Your data, your choice.

Matched line items only. When you audit a quote, each line you matched to a catalog item is captured: the vendor name, unit price, quantity, pricing basis (e.g. flat rate, quantity break), and the catalog item it matched.

Never the free-text description. The description you type for each line is never stored as part of a contribution. Only structured fields are captured.

Vendor names are anonymized. Your vendor name is passed through a one-way HMAC-SHA256 before storage. The original name cannot be recovered from the output. The HMAC allows aggregate grouping (e.g. “how many observations from this vendor?”) without revealing who the vendor is.

No personal data in the observation. The observation record contains no account name, email, company, or any other personally identifying information. Your user ID links the observation to your account solely so you can withdraw — it is never published or surfaced.

Aggregate benchmarks only. Contributed observations are used only to improve the pricing benchmark — computing medians, ranges, and confidence tiers. They are never resold, never surfaced individually, and never shared with third parties.

Three-vendor minimum. A benchmark band only publishes when three or more independent vendors back it, so any single contribution vanishes into the blend.

Opt-in only. Contribution is entirely voluntary. Nothing is collected unless you explicitly click “Yes, contribute.” Declining or dismissing the prompt has no effect on your audit results.

Withdraw at any time. You can withdraw your consent from your account settings. When you withdraw, your consent record is deleted and all pending (not yet promoted) observations are marked as withdrawn. Observations that have already been anonymized into published benchmark bands are not recoverable — they contain no personal data and cannot be traced back to you.