Custom · Procurement & SRM

Custom supplier management platform development.

One central place where your procurement team manages all suppliers — from onboarding and contracts to performance, risk and sustainability data. Custom supplier relationship management that fits your sector, your ERP and the compliance requirements of DORA, CSRD and the Dutch Public Procurement Act (Aanbestedingswet).

TypeSRM platform
Target groupProcurement & purchasing
ComplianceDORA · CSRD · GDPR
IntegrationERP · accounting · ESG
ApproachSprint-based
HostedSaaS or own environment

What is a supplier management platform?

A supplier management platform — internationally often called supplier relationship management (SRM) — brings together all processes relating to your suppliers in one system. Onboarding, master data, contracts, performance monitoring, risk checks, sustainability reporting and communication with suppliers themselves all come together in one place.

The difference from a simpler vendor portal is that an SRM serves both the internal side (procurement, finance, legal, compliance) and the external side (supplier self-service). A vendor portal is usually a subset: the self-service layer for suppliers. An SRM platform is broader and integrates with your ERP, accounting system and ESG reporting tools. An order management system, by contrast, manages the order flow itself (orders, fulfilment, stock), whereas an SRM focuses on the relationship with the supplier behind those orders. In practice, both systems sit side by side and exchange master data.

We don't build a copy of Ariba or Coupa; those products do what they do. We build custom solutions where off-the-shelf packages don't fit: for mid-market organisations that are too large for Excel but too small for enterprise procurement, for sectors with their own contract law or qualification requirements, or for multi-system integrations where the package runs out and the real work begins. Often a SRM isn't a standalone product either, but part of a broader enterprise software landscape in which ERP, finance, project administration and compliance tooling work together.

Good supplier management is also not a static project. Legislation on third parties is constantly changing: DORA in 2025, CSRD reporting with scope 3 data, EU CSDDD due diligence, the digital product passport for batteries. An SRM platform that you build needs to keep pace with this, rather than requiring an external consultant for every change in the law. That maintenance perspective is an important argument for going custom when standard packages lock you in or are slow to respond to new requirements.

When is custom development the right choice?

01
The mid-market gap

Too big for Excel, too small for Ariba

Hundreds to thousands of suppliers, not the tens of thousands for which SAP Ariba or Coupa are designed. The annual licence of an enterprise package doesn't justify the volume.

02
Industry-specific

Sector-specific contract law or qualifications

Construction with RAW and UAV context, pharma with MDR validation, government under the Aanbestedingswet (Dutch Public Procurement Act), or energy with multi-supplier capex projects. Off-the-shelf packages rarely cover these.

03
Multi-system

ERP, accounting, ESG and compliance together

When SAP or Exact, an accounting package, a CSRD reporting tool and a DORA register must work together seamlessly, a single package alone falls short. The integration work is the heart of the project.

04
Subcontractors

Cascading subcontracting and sub-subcontracting

In construction, you often work with subcontractors who in turn hire subcontractors of their own. Standard SRM tools model that cascade poorly. Custom software records the chain transparently, which is relevant for the Dutch Act to Combat Sham Arrangements (Wet Aanpak Schijnconstructies) and CSDDD due diligence.

Three things an SRM platform does.

Core task 01

Onboarding and recording

Suppliers register themselves via an onboarding form. KvK, VAT and IBAN validation, KYB/KYC checks, sanctions list screening (OFAC, EU, UN) and compliance questionnaires run automatically. The result is a clean supplier record with certificates, qualifications and contact persons, ready for procurement, finance and legal to work with, without one department having to fill in missing fields halfway through.

Core task 02

Managing and monitoring

Contracts, framework agreements and price agreements in one place with expiry alerts. Performance scorecards for OTIF (on-time-in-full), quality and response time. Financial health signals via Dun & Bradstreet or Graydon, visible to your procurement team daily. In this way supplier management moves from a reactive process (something happens, we respond) to a proactive one (we see it coming).

Core task 03

Reporting and demonstrating compliance

The DORA register for ICT third parties, scope 3 emissions for CSRD, conflict minerals due diligence, modern slavery audits and the usual spend analytics roll straight out of the platform. No more exporting to Excel and merging by hand, and no versions that differ between procurement and compliance. Audit trails and signed documents are kept together, so that an ESMA or DNB query can be answered within a day.

Modules of a supplier management platform.

An SRM is not a monolith but a collection of interrelated modules. Which you need depends on your sector, size and compliance context. We establish the scope together with your procurement, finance and legal teams.

Supplier onboarding

Self-service application form with KYB/KYC checks, sanctions lists and automatic GDPR screening.

Master data management

Name, address, KvK, VAT, IBAN, certificates and qualifications as a single source of truth for all systems.

Contract management

Framework agreements and MSAs with versioning, expiry alerts and price list integration.

Performance monitoring

OTIF scorecards, quality metrics, complaint handling and regular supplier reviews.

Supplier risk

DORA register, financial health via Graydon, sanctions list screening and conflict minerals (3TG).

Sustainability/ESG

CSRD scope 3 data, supplier CO₂ reporting, modern slavery audits and the EU Battery Regulation.

RFx sourcing

RFI, RFQ and RFP platforms with supplier invitations, bid comparison and e-auctions.

Spend analytics

Insight into purchasing volumes, duplicate suppliers and category management by department.

Invoice & 3-way match

Purchase orders, goods receipt notes and invoices are matched automatically and linked to your accounting.

Communication & tickets

Issue tracking with suppliers, structured communication and escalation routes.

Renewals & category

Contract renewals, category strategy and regular market re-tendering per purchasing category.

Supplier portal

Self-service for suppliers: invoice status, ongoing RFx, contract overviews and documents.

Compliance requirements that have shifted the focus.

For a long time, supplier management was primarily a procurement discipline. Today, it is also a compliance discipline. Legislation concerning third parties — financial, ESG, human rights and data — is growing rapidly, and the burden of proof rests with you as the client. A modern SRM platform is therefore also an audit tool.

For the financial sector, DORA is the most urgent: since January 2025, a register of all ICT third-party providers has been mandatory, including subcontracting, with a prescribed dataset per provider. For companies subject to the CSRD, something similar applies to scope 3 emissions data from the supply chain. Our KYC/AML compliance software shares much of its underlying logic with supplier screening — sanctions lists, beneficial ownership and risk scoring.

  • DORARegister of ICT third-party providers for financial institutions, including subcontracting and critical function classification.
  • CSRD/ESRSSustainability reporting with scope 3 data from your supply chain, including assurance.
  • CSDDDEU Corporate Sustainability Due Diligence Directive: supply chain responsibility for human rights and the environment.
  • EU Battery RegulationDigital product passport and due diligence on the origin of battery raw materials.
  • Conflict Minerals3TG due diligence (tin, tantalum, tungsten, gold) based on OECD guidance.
  • Modern Slavery ActUK and Australian reporting obligations regarding working conditions in the supply chain.
  • GDPRProcessing of supplier staff data, right to erasure and data minimisation.
  • Public Procurement ActFor government bodies: TenderNed integration, transparent award and objection procedures.

Custom development versus off-the-shelf packages.

SAP Ariba, Coupa, Jaggaer, Ivalua and Synertrade are market leaders in enterprise procurement. In the mid-market, Procurify and Tradeshift play a role, and in the Netherlands Onventis and ISPnext. We do not replace these packages — we build when the package does not fit.

Standard

Enterprise procurement suites

Ariba, Coupa, Jaggaer and Ivalua offer the breadth of a procurement suite with sourcing, contracts, P2P, supplier management and spend analytics. This makes sense for large organisations with thousands of suppliers, provided you can adapt to the product's logic.

Mid-market

Middle-tier solutions

Procurify, Tradeshift and, in the Netherlands, Onventis or ISPnext focus on the middle tier. Cheaper and quicker to implement, but less depth in sector-specific flows such as RAW/UAV contracts or MDR validation.

Custom build

Custom platform by Appfront

We build when mid-market packages are too limited and enterprise suites too heavy — or when integration with your existing systems landscape, sector requirements and DORA/CSRD flows make the difference. Your own IP, no licence lock-in, full integration with your ERP, accounting and reporting tools.

Which organisations do we build for?

Custom supplier management is relevant once your supplier base grows in size and complexity beyond what Excel and loose spreadsheets can handle, but before Ariba or Coupa makes sense. These are the sectors we most often see in practice.

Procurement

Procurement teams in mid-sized enterprises

Procurement departments managing hundreds to a few thousand suppliers, where the head of procurement wants control over spend, contracts and risk without a suite the whole company has to adopt.

Manufacturing

Automotive, electronics, food, pharma

Complex supply chains with multi-tier suppliers, qualification requirements per component, batch traceability and, for pharma, MDR and GMP validation of suppliers.

Retail

Clothing brands, food retail, multi-SKU

Procurement across hundreds of brands and producers, seasonal collections, food safety certification and, for clothing, modern slavery and sustainability obligations within the supply chain.

Build

Subcontractor management under RAW/UAV

RAW specifications, UAV contracts, G-account administration and cascade management of subcontractors and sub-subcontractors. The Dutch Act on Combating Sham Constructions and chain liability make transparency mandatory.

Pharma / medical

Validated supply chains

MDR and CE validation of suppliers, validated quality systems, origin due diligence for active pharmaceutical ingredients and comprehensive audit trails for inspections.

Banking / insurance

DORA third-party register

Since January 2025, a register of ICT third-party providers has been mandatory for financial institutions, covering subcontracting, critical function classification and concentration risk. Off-the-shelf packages cover this only partially; the specific ESMA dataset almost always requires custom development.

Government

Tendering and contract management

TenderNed integration, transparent award, objection deadlines, framework agreements with multiple lots, and an audit trail that stands up to a National Audit Office investigation.

Energy / utilities

Multi-supplier capex projects

Large infrastructure projects with dozens of suppliers per project, EPC contracts, performance guarantees and risk allocation. Performance monitoring per project and across total supplier spend, side by side.

Frequently asked questions.

What is the difference between a supplier management platform and a vendor portal?
A vendor portal is the external self-service layer for suppliers: submitting invoices, responding to RFx requests, uploading documents. A supplier management platform includes that and everything on the internal side: onboarding workflows, contract management, performance scorecards, risk monitoring and ESG reporting. Many clients start with a vendor portal and later grow into a full SRM.
How does it differ from an order management system?
An order management system manages the order flow itself: purchase orders, sales orders, fulfilment. An SRM manages the supplier behind those orders: who they are, whether you can still work with them, how they perform. The two are often closely linked, but they are separate disciplines with separate data models.
Where does document workflow fit in?
Many onboarding and contract processes revolve around documents: signed MSAs, certificates, insurance policies, annual accounts. Our document workflow automation is often built as the underlying layer of an SRM. The platform drives the substantive process, while the document workflow handles versions, signatures and archiving.
Do you replace SAP Ariba or Coupa?
No, not for organisations that genuinely need enterprise procurement. Ariba and Coupa have a ten-year head start in breadth and partner ecosystem. We build where those packages don't fit: mid-market players, industry-specific processes, multi-system integrations and compliance challenges not yet covered by standard products. In practice, our platforms often sit alongside an ERP rather than replacing a procurement suite.
What exactly does the DORA register do?
From January 2025, DORA requires financial institutions to maintain a register of all ICT third-party providers, including sub-outsourcing, using a dataset prescribed by ESMA. A good SRM platform generates this register automatically from the supplier master and contract tagging, so a compliance officer doesn't have to wrestle with Excel. During ESMA audits, this is the difference between being reportable and not.
How does KYB/KYC work during supplier onboarding?
When a new supplier is registered, KvK data is retrieved, beneficial ownership structures are checked, sanctions lists (OFAC, EU, UN) are consulted and, optionally, a financial health report from Graydon or Dun & Bradstreet is attached. For financial and healthcare institutions, we extend this with PEP screening and adverse media checks, similar to the logic in our KYC/AML software.
Does it integrate with SAP, Exact, AFAS and other ERP systems?
Yes, integration is almost always the heart of the project. We connect via standard APIs where they exist, via SAP IDoc or OData, AFAS GetConnectors and Exact Online REST. For systems without an open API, we build an intermediate layer with scheduled synchronisations. CSRD reporting tools, e-invoicing via Peppol and accounting packages are handled in the same way.
Which organisations is this relevant for?
Mid-sized enterprise organisations with hundreds to thousands of suppliers and serious compliance requirements. Specifically: manufacturing (automotive, electronics, food, pharma), retail with multi-SKU and supply chain complexity, construction with subcontractor management under RAW/UAV, pharma under MDR, banks and insurers under DORA, government under the Dutch Public Procurement Act (Aanbestedingswet), and energy and utilities with multi-supplier capex projects. See also our enterprise software approach.
What determines the cost of an SRM project?
The scope (which modules), the number of integrations with existing systems, the compliance context (a DORA register and CSRD reporting are substantial work), and the number of supplier roles involved. We work sprint-based: after the discovery phase, you receive a concrete scope with a fixed sprint budget. No surprises, no open-ended commitments.
Who manages the platform after delivery?
Procurement is the functional owner, IT or finance the technical owner. For larger setups, clients appoint a procurement system owner who oversees master data, workflow changes and supplier communication. We remain available in the background for further development and compliance updates whenever legislation changes.

Talk to us about your supplier management platform.

A thirty-minute introductory call in which we go through the supplier processes you currently run, where the pain points lie, and whether a custom-built platform is the right investment alongside, or instead of, a standard package.

Response within 1 working day
No-obligation conversation
Westerdoksdijk 599, Amsterdam

Edit content