# RELEX Solutions

Unified retail platform

Research: https://www.safecli.org/company/relexsolutions.com
Company: https://relexsolutions.com

## Evidence status

Insufficient enterprise evidence
Source review: 2026-10-24T14:00:13.195Z
API: Public API

Company-published claims, not independently verified controls. Unknown is not evidence of absence.

## Procurement checks

### Security assurance — Mixed claims — review

> To gain ISO 27001:2013 certification for RELEX’s Inventory and Supply Chain software, we had to demonstrate a systematic and rigorous approach to managing sensitive information.

Source: https://www.relexsolutions.com/security-compliance/
Reviewed: 2026-10-24T14:00:13.195Z

> The ISAE 3000 SOC 2 standard for assurance was originally developed by the American Institute of Certified Public Accountants and is widely regarded as the gold standard for reporting on information security.

Source: https://www.relexsolutions.com/security-compliance/
Reviewed: 2026-10-24T14:00:13.195Z

> ### ISO 27001

Source: https://www.relexsolutions.com/security-compliance/
Reviewed: 2026-10-24T14:00:13.195Z

- [ ] Request the current audit report, scope, exceptions and expiry; confirm the vendor entity.
- [ ] Record reviewer, test date, scope, result and supporting artifact.

### SSO & provisioning — Not found


- [ ] Test SSO enforcement, user removal and privileged-account recovery.
- [ ] Record reviewer, test date, scope, result and supporting artifact.

### Access controls — Not found


- [ ] Test least-privilege roles and cross-tenant access with separate test accounts.
- [ ] Record reviewer, test date, scope, result and supporting artifact.

### Auditability — Not found


- [ ] Verify administrative and data-access events, retention and export.
- [ ] Record reviewer, test date, scope, result and supporting artifact.

### Data handling — Company-published

> Customers maintain complete control over their personal data with clear data processing agreements and transparent privacy policies.

Source: https://www.relexsolutions.com/policy/ai-governance-trust-at-relex/
Reviewed: 2026-10-24T14:00:13.195Z

> | GDPR | Full compliance with EU data protection regulations including privacy rights, data processing agreements, and breach notification procedures.

Source: https://www.relexsolutions.com/policy/ai-governance-trust-at-relex/
Reviewed: 2026-10-24T14:00:13.195Z

- [ ] Review DPA, subprocessors, retention, deletion, residency and AI training use.
- [ ] Record reviewer, test date, scope, result and supporting artifact.

### Reliability & support — Company-published

> There are regular disaster recovery tests to verify the backup restore process is working smoothly.

Source: https://www.relexsolutions.com/security-compliance/
Reviewed: 2026-10-24T14:00:13.195Z

> - We are GDPR compliant in our governance and incident response procedures

Source: https://www.relexsolutions.com/security-compliance/
Reviewed: 2026-10-24T14:00:13.195Z

- [ ] Request SLA, incident history, recovery targets and support escalation terms.
- [ ] Record reviewer, test date, scope, result and supporting artifact.

### Product effectiveness — Needs clarification

> Collaborative Intelligence models under development will deliver ecosystem-level intelligence such as benchmarks, built exclusively from aggregated, anonymized, and filtered data with no customer-specific Confidential information ever exposed

Source: https://www.relexsolutions.com/policy/ai-governance-trust-at-relex/
Reviewed: 2026-10-24T14:00:13.195Z

- [ ] Run a representative pilot against your current workflow; measure errors, missed cases, time saved and human review cost.
- [ ] Record reviewer, test date, scope, result and supporting artifact.

## Decision

- Owner:
- Intended use and data sensitivity:
- Blocking requirements:
- Pilot success criteria:
- Unresolved risks:
- Decision and review date: