# Renewly

Contract renewal tracker

Research: https://www.safecli.org/company/renewly.gg
Company: https://renewly.gg

## Evidence status

Procurement review needed
Source review: 2026-11-04T15:01:01.479Z
API: Public API

Company-published claims, not independently verified controls. Unknown is not evidence of absence.

## Procurement checks

### Security assurance — Mixed claims — review

> Vercel + Supabase, SOC 2 Type II

Source: https://renewly.gg/trust
Reviewed: 2026-11-04T15:01:01.479Z

> Contracts, files and login accounts live in the Supabase project for your region, held by SOC 2 Type II certified infrastructure providers rather than on hardware we run ourselves.

Source: https://renewly.gg/trust
Reviewed: 2026-11-04T15:01:01.479Z

> ### SOC 2 infrastructure

Source: https://renewly.gg/trust
Reviewed: 2026-11-04T15:01:01.479Z

> Our hosting providers (Supabase and Vercel) hold SOC 2 Type II certification.

Source: https://renewly.gg/trust
Reviewed: 2026-11-04T15:01:01.479Z

- [ ] Request the current audit report, scope, exceptions and expiry; confirm the vendor entity.
- [ ] Record reviewer, test date, scope, result and supporting artifact.

### SSO & provisioning — Mixed claims — review

> If SAML is a requirement for you, contact us.

Source: https://renewly.gg/security
Reviewed: 2026-11-04T15:01:01.479Z

> This covers calendar connections (Google and Outlook), Salesforce and DocuSign connections, the addresses Renewly uses to post to Slack or Microsoft Teams, and your single sign-on certificate.

Source: https://renewly.gg/help/soc2-compliance
Reviewed: 2026-11-04T15:01:01.479Z

> ### Do you support SSO or SAML?

Source: https://renewly.gg/security
Reviewed: 2026-11-04T15:01:01.479Z

> Single sign-on through your own identity provider (SAML) is not available today.

Source: https://renewly.gg/security
Reviewed: 2026-11-04T15:01:01.479Z

- [ ] Test SSO enforcement, user removal and privileged-account recovery.
- [ ] Record reviewer, test date, scope, result and supporting artifact.

### Access controls — Not found


- [ ] Test least-privilege roles and cross-tenant access with separate test accounts.
- [ ] Record reviewer, test date, scope, result and supporting artifact.

### Auditability — Company-published

> You choose your region at signup and your contracts, account data, and audit logs stay in that region for the life of the workspace.

Source: https://renewly.gg/trust
Reviewed: 2026-11-04T15:01:01.479Z

> Audit logs are retained for 3 years for security and compliance purposes.

Source: https://renewly.gg/security
Reviewed: 2026-11-04T15:01:01.479Z

- [ ] Verify administrative and data-access events, retention and export.
- [ ] Record reviewer, test date, scope, result and supporting artifact.

### Data handling — Company-published

> Every plan, including Free, runs on your choice of EU or US data residency infrastructure.

Source: https://renewly.gg/pricing
Reviewed: 2026-11-04T15:01:01.479Z

> Every plan, including Free, runs on your choice of EU or US data residency infrastructure.

Source: https://renewly.gg/pricing
Reviewed: 2026-11-04T15:01:01.479Z

- [ ] Review DPA, subprocessors, retention, deletion, residency and AI training use.
- [ ] Record reviewer, test date, scope, result and supporting artifact.

### Reliability & support — Company-published

> | Volume-banded contract limits Custom seats Everything in Business Custom SLA | from $999 a month · by agreement Write to us |

Source: https://renewly.gg/pricing
Reviewed: 2026-11-04T15:01:01.479Z

> Enterprise covers larger, volume-banded contract counts, custom seats and a custom SLA.

Source: https://renewly.gg/pricing
Reviewed: 2026-11-04T15:01:01.479Z

- [ ] Request SLA, incident history, recovery targets and support escalation terms.
- [ ] Record reviewer, test date, scope, result and supporting artifact.

### Product effectiveness — Not found


- [ ] Run a representative pilot against your current workflow; measure errors, missed cases, time saved and human review cost.
- [ ] Record reviewer, test date, scope, result and supporting artifact.

## Decision

- Owner:
- Intended use and data sensitivity:
- Blocking requirements:
- Pilot success criteria:
- Unresolved risks:
- Decision and review date: