Renewly

Contract renewal tracker

Enterprise evidence

Procurement review needed

Public information covers auditability, data handling, reliability & support. Still unresolved: security assurance, sso & provisioning, access controls.

9 official sources · Fresh page review · Not independently tested

Sources reviewed 2026-11-04

3 / 7 areas with published evidence · 0 independently verified

Evidence & checks

Security assuranceMixed claims — review

Vercel + Supabase, SOC 2 Type IIReviewed 2026-11-04View source

Contracts, files and login accounts live in the Supabase project for your region, held by SOC 2 Type II certified infrastructure providers rather than on hardware we run ourselves.Reviewed 2026-11-04View source

### SOC 2 infrastructureReviewed 2026-11-04View source

Our hosting providers (Supabase and Vercel) hold SOC 2 Type II certification.Reviewed 2026-11-04View source

Before relying on it
Request the current audit report, scope, exceptions and expiry; confirm the vendor entity.

SSO & provisioningMixed claims — review

If SAML is a requirement for you, contact us.Reviewed 2026-11-04View source

This covers calendar connections (Google and Outlook), Salesforce and DocuSign connections, the addresses Renewly uses to post to Slack or Microsoft Teams, and your single sign-on certificate.Reviewed 2026-11-04View source

### Do you support SSO or SAML?Reviewed 2026-11-04View source

Single sign-on through your own identity provider (SAML) is not available today.Reviewed 2026-11-04View source

Before relying on it
Test SSO enforcement, user removal and privileged-account recovery.

Access controlsNot found

Before relying on it
Test least-privilege roles and cross-tenant access with separate test accounts.

AuditabilityCompany-published

You choose your region at signup and your contracts, account data, and audit logs stay in that region for the life of the workspace.Reviewed 2026-11-04View source

Audit logs are retained for 3 years for security and compliance purposes.Reviewed 2026-11-04View source

Before relying on it
Verify administrative and data-access events, retention and export.

Data handlingCompany-published

Every plan, including Free, runs on your choice of EU or US data residency infrastructure.Reviewed 2026-11-04View source

Before relying on it
Review DPA, subprocessors, retention, deletion, residency and AI training use.

Reliability & supportCompany-published

| Volume-banded contract limits Custom seats Everything in Business Custom SLA | from $999 a month · by agreement Write to us |Reviewed 2026-11-04View source

Enterprise covers larger, volume-banded contract counts, custom seats and a custom SLA.Reviewed 2026-11-04View source

Before relying on it
Request SLA, incident history, recovery targets and support escalation terms.

Product effectivenessNot found

Before relying on it
Run a representative pilot against your current workflow; measure errors, missed cases, time saved and human review cost.

Published claims are not verified controls. No hands-on performance or security testing has been performed.

What we know

Renewly specializes in contract renewal tracking for procurement, extracting notice deadlines and auto-renewal clauses from PDFs to provide cascading alerts.

Worth asking

How does the platform handle complex multi-entity/campus hierarchy contract visibility?

Sources

Evidence details

Enterprise controls

Vercel + Supabase, SOC 2 Type II Our hosting providers (Supabase and Vercel) hold SOC 2 Type II certification Contracts, files and login accounts live in the Supabase project for your region, held by SOC 2 Type II certified infrastructure providers rather than on hardware we run ourselves

Developer access

| 500 contracts included 10 team seats Everything in Starter Slack notifications Microsoft Teams notifications Salesforce integration DocuSign e-signatures Webhooks API keys Alert routing Audit log export Priority support | $499 a month · or $4,990 a year Start on Business | | Enterprise For large portfolios with custom terms - single sign-on settings being added, changed or removed - API keys being created or revoked - a member's role being changed - Settings > Data Retention - choose how long records are kept - Settings > Security Events - review security-related changes - Settings > SSO - save your single sign-on details - Settings > Activity Log - the full record of who did what API documentation | Renewly

Last checked Nov 4, 2026

Company-published evidence, not an independent audit. Unknown means unverified.