Order.co is a procurement and finance platform for businesses. Its modules cover purchasing, accounts payable, spend management, virtual cards and working capital, and an AI assistant is part of the product. According to the website, it integrates with accounting systems, Workday and single sign-on tools. The service is delivered as a cloud application.
The contracting entity named in the privacy policy is Negotiatus Corp, operating as Order.co, a Delaware corporation with a New York address. The policy states that customer data may be stored in the United States or other countries, that transactions are deemed to occur on servers located in the United States, and that no EU data residency is offered. It refers to the GDPR, to data processing agreements and to the EU-US Data Privacy Framework, but does not mention standard contractual clauses. For a European organisation, the US head office and US storage mean that US legal access rules can apply, so the processor list should be reviewed closely.