Trust Center

Welcome to the Progentic Inc. Trust Center. This foundational portal is designed to provide our customers, partners, and visitors with a transparent, high-level overview of our security posture, operational practices, and commitment to safeguarding sensitive data. Please note that documents on this site are draft and live materials; we continuously refine and revise as needed.

Who We Are and What We Do

Progentic Inc.'s proprietary tool, ProcureSense, is a procurement intelligence platform that turns spend data into actionable P&L impact. Because our clients trust us with supplier spend data, maintaining client trust is core to our business. We are deeply committed to ensuring the confidentiality, integrity, and availability of this information, as well as maintaining strict compliance with regulatory frameworks such as SOC2, applicable provincial privacy laws, and our client contractual obligations.

Purpose and Scope of the Trust Center

This Trust Center serves as a central resource to share how we design, operate, and secure our systems. Here, you will find detailed information regarding our comprehensive Information Security Program (ISP), which is governed by an overarching Information Security Policy and a suite of dedicated security policies. These policies ensure that information in all forms—written, spoken, recorded electronically, or printed—is protected from accidental or intentional unauthorized modification, destruction, or disclosure throughout its entire life cycle.

Our Trust Posture and Security Practices

Our security and trust program is built upon several key operational pillars:

• Data Protection & Privacy: We maintain a strict, risk-averse posture toward the confidentiality of client data. To support this, we provide dedicated contact mechanisms for data subjects to submit privacy-related requests or report privacy incidents.
• Robust Policy Framework: Our information security program is supported by a wide range of formalized policies, including Acceptable Use, Asset Management, Backup, Business Continuity/Disaster Recovery, Incident Response, Vulnerability Management, and Software Development Life Cycle Policies.
• Continuous Monitoring & Logging: We utilize a centralized logging system that collects and stores system activity logs, restricting access to authorized personnel and sending alerts based on pre-configured rules to proactively manage system security.
• Rigorous Vendor Management: We rely on cloud and AI providers, and we hold our third-party vendors to exceptionally high standards. We maintain a complete vendor register that tracks risk ratings, service descriptions, and risk management activities. We execute formal agreements with all service providers accessing or processing our information assets, ensuring they meet our security requirements. Notably, we do not share client data with any providers that do not exclude it from AI model training.
• Open Communication: We believe in transparency and support. We provide user guides, help articles, and system documentation to help users understand our system boundaries and requirements. Additionally, we maintain external communication channels—such as support portals and ticketing systems—to allow customers and third parties to report complaints, bugs, vulnerabilities, or incidents, all of which are responded to within defined Service Level Agreements (SLAs).

We invite you to explore the rest of this Trust Center to review our specific policies, controls, and documentation in greater detail.

Please contact William.kwok@pro-gentic.com with any questions not answered here.