Data handling

What data does Reqventa handle?

Reqventa handles the business data needed to go from incoming request to a finished quote draft: incoming requests and email, customers and contact persons, products and product data, price lists and pricing rules, purchase and sales prices, quote drafts, and user accounts and permissions.

Data isolation between organisations

Each customer company is its own organisation. All data is tied to the organisation, and isolation is enforced in the database with Row Level Security — not only in the interface. Organisation membership is verified server-side on every request.

Permissions

Within the organisation there are roles for administrator and salesperson. Platform administration is handled through a separate platform role. Accounts can only be created via a valid invitation, which is enforced in the database.

How an request is processed

An request arrives via a connected email inbox or is registered manually. The content is interpreted, the sender is compared against existing customers and contacts, the lines are matched against the product catalogue and prices are calculated using the customer's price lists and rules. The salesperson reviews and decides before a quote draft is created.

AI steps provide suggestions. No quote is issued automatically without a human reviewing the result.

Email and connected inboxes

When an email inbox is connected, messages are retrieved so requests can be identified and processed. Access tokens are stored encrypted, and the connection can be disconnected at any time by the customer's administrator.

Your business data is yours

The customer retains the rights to its business data. Reqventa uses it only to deliver, secure and maintain the service and to carry out the customer's instructions.

Retention

The principle is that data is not kept longer than necessary for the purpose or than required by law. Retention rules are documented and made configurable as they are established.

Export and deletion

Quote drafts can be exported from the service. On termination, export and deletion are handled under the data processing agreement and the agreed process, subject to legal requirements.

Subprocessors

Reqventa engages providers for hosting, database, email infrastructure and AI processing. Verified subprocessors and processing regions are listed on the Subprocessors page.