Sellions

The platform is a deterministic process engine and the vendor claims nothing else.

Two passes across the vendor's own site, its pricing page, its process catalogue, its company page and a directory listing located no model capability of any kind: no assistant, no generation, no scoring, no prediction and no agent. What is described is a low code engine assembling processes from more than twenty ready made components, with tasks assigned by rules according to the stage a process has reached or the parameters of the user, and reminders and escalations firing on elapsed time.

That is deterministic software doing deterministic work, and for the buyer it is arguably the point. A process automation platform whose behaviour is predictable is easier to audit than one whose routing depends on inference, and the vendor's positioning is precisely that processes should run according to plan.

One piece of trade press from 2021 frames the company against a market backdrop of intelligent bots responding to voice and text commands, and a reader skimming could take that as a description of the product. It is scene setting in the article rather than a vendor claim, and nothing on any vendor surface supports it.

The grade reflects what the axis measures rather than a judgement on the choice.

Ask whether any model capability is planned and on what timeline.

Oversight is the product rather than a control layer bolted onto it, and the vendor publishes worked examples rather than claims.

The published process catalogue does the work. In the quotation process, a sales representative raises a request on the technical team with the documents gathered so far, the application routes it, and if the technical team does not accept the request within the set time the application notifies their manager. Once an engineer assigns the work to themselves the application presents the form to complete, and if they miss the deadline it reminds them. That is a described escalation path with a named trigger, a named recipient and a time bound, published as a concrete example a buyer can evaluate.

Around it sit the general mechanisms: task assignment by process stage or by user parameter, a single view of what is due and at what status for every participant, and current reports to managers on process effectiveness intended to surface bottlenecks before they become delays.

What is not described is administrative control over the automation itself. Two passes located no permission model governing who may build or change a process, no approval step before a modified process goes live, no audit trail of changes, and no statement of who can see whose task data.

For a low code engine where business users build the processes, change control is the question.

Ask who can publish a process change and whether changes are logged or reviewed.

Abstention is the disclosure, and in this category it is worth something.

Across the vendor's own site, its pricing page, its process catalogue, its company page and an independent directory profile, two passes located no artificial intelligence claim of any kind. There is therefore no unnamed model, no undisclosed provider, no agent of ambiguous authorship and no capability a buyer would need to discount. A company selling process automation in 2026 without attaching a model story to it has left a great deal of marketing on the table, and the restraint tells a buyer something true.

The practical consequence matters for this product specifically. Because routing is rule based, a customer can predict what the system will do with a given case, and a compliance function reviewing an automated process can read the rules rather than probe a model.

What holds this below the top band is the same thing that held the comparable record earlier in this index: the position is inferred from absence rather than stated. No page says the platform uses no models, so a buyer running a governance review has to establish it by asking. And a 2021 trade article framing the company against intelligent bots leaves a misleading impression available to anyone who reads only that.

Ask for written confirmation that no model processes customer or process data.

Thirteen years of operation and not one retrievable review.

Two passes located no review on any independent platform. The one directory carrying a full profile states plainly that no review has been left and invites the reader to be the first. No enterprise review platform profile was found, no second directory carried ratings, and no customer logo, named reference or case study appeared on any vendor surface examined.

For a company founded in 2013 serving named industries at stated scale, an entirely empty independent record is itself the finding. Small vendors in this index routinely carry a handful of reviews within two years of launch.

What the vendor asserts in place of evidence: that its system handles several hundred thousand processes monthly, and that it operates to the highest standards of security and scalability. Neither carries a source, a period or a method.

One figure circulates in a 2021 trade interview, that cutting a customer's wait for first contact below fifteen minutes produces a large percentage improvement. Read carefully it is a general observation about response time in sales rather than a measurement of this platform's effect at a named customer.

A buyer has the vendor's word and nothing to check it against.

Ask for three customer references in the named industries with process cycle times before and after.

A European vendor automating customer email and text messaging, with no data protection statement retrievable.

The sending is real and described by the vendor and by trade press: unattended dispatch of email to customers, with specific actions programmed to follow when a recipient clicks a link, and automated text messaging so that a customer showing interest receives an immediate response.

Two passes across the vendor's own surfaces located no privacy policy, no terms of service, no data protection page, no unsubscribe or opt out handling, no consent basis, no suppression mechanism and no reference to the European data protection regulation at all.

That last absence is the material one. This is a Polish company operating inside the European Union, where the regulation applies directly rather than by extension, where electronic marketing carries additional consent requirements, and where text messaging to individuals is among the most tightly governed channels. Vendors in this index operating from outside Europe at least gesture at the regime; a vendor inside it publishing nothing is a different order of gap.

The mitigating reading is that these are the customer's own clients inside the customer's own processes rather than cold prospects, which places the consent obligation with the customer. The platform still executes the sending.

Ask what governs consent and opt out for automated email and text under the regulation.

One sentence of assurance and no document behind it.

The vendor's company page states that it operates in accordance with the highest standards of security and scalability, and that its system handles several hundred thousand processes monthly. That is the entirety of what two passes located on this subject.

What was not found: a privacy policy, a data processing agreement, a supplier or subprocessor list, a retention schedule, a deletion commitment, a residency statement, a rights request process and a named data protection contact.

The jurisdiction makes this heavier than the same absence elsewhere in this index. A Polish company falls directly under the European regulation, which requires a processing agreement with every customer whose personal data it handles, obliges it to support data subject rights, and expects a documented basis for processing. This platform holds customer contact records, sends them email and text, tracks their link clicks and stores the resulting task and document history.

A buyer's counsel would ordinarily begin by reading the processing agreement, and there is none published.

The absence may reflect a vendor that handles this through contract rather than through published documents, which is common for smaller enterprise software firms selling in one country.

Ask for the processing agreement and the retention schedule for customer contact data.

The vendor supplies no data, and for a process engine that is the whole answer.

Everything the platform operates on originates inside the customer: their own process definitions, their own staff, their own customer records, their own documents. Two passes located no contact database, no enrichment offering, no lead pool, no credit model, no profile count and no third party data supplier. There is no pool of unknown origin for a buyer to inherit and no licensing question to resolve.

In a category where the standard package pairs workflow with a bundled contact database of undisclosed origin, a platform that automates only what the customer already holds exposes them to none of that.

What is unaddressed is the vendor's own position on the material passing through. The company states its system handles several hundred thousand processes monthly, which is an aggregate across its customer base, and nothing describes whether that aggregate informs product development, benchmarking or the ready made process catalogue it publishes.

The process catalogue is the interesting case. It contains detailed worked processes for lead qualification and quotation, and whether those were designed from scratch or distilled from what customers actually run is not stated.

Ask whether customer process data informs the published process catalogue.

The exposure is minimal because the surface is minimal, and one detail on the vendor's own domain is worth recording.

Two passes located no scraping, no social network automation, no browser extension operating a property the vendor does not own, no unofficial interface use and no capability depending on a platform failing to notice. The product operates on the customer's own processes and staff, which is about as low a third party exposure as software can carry.

That cleanliness is a consequence of having almost no external connections at all, which is recorded as a weakness on the ecosystem axis rather than counted twice as a strength here.

The detail worth recording concerns the vendor's own site. A page on the company's domain returns a title identifying itself as being about casino gaming applications, over body content that is otherwise an ordinary listing of the company's process automation articles. A mismatch of that kind between the title a search engine reads and the content a visitor sees is the characteristic signature of injected search spam on a page that has been compromised or left insufficiently protected.

That is an observation rather than a confirmed finding, and it should be checked against the live site before being relied on. It does sit awkwardly against a company page claiming operation to the highest standards of security.

Ask whether the site has been reviewed for injected content and when.

Half this axis is inapplicable and the other half is a single sentence.

There is no model in the product, so there is no generated output to govern, no hallucination surface, no training use of customer content, no evaluation to publish and no human review step to design. A reader should take the grade as a statement about stewardship rather than about model handling, since the model half carries no risk because it carries no capability.

On stewardship the record is thin to the point of empty. The only statement located across two passes is that the company operates in accordance with the highest standards of security and scalability. No encryption position for data in transit or at rest, no access control description, no least privilege statement, no logging, no backup or continuity position, no incident response or breach notification process, no named security contact and no vulnerability disclosure route was found.

The holdings are not trivial. A process automation platform accumulates a company's operating procedures, the task history of named employees against deadlines, the documents circulated through those processes and the customer contact records the email and text steps address.

The title anomaly recorded on the platform terms axis cuts against the security assurance rather than supporting it.

Ask for the encryption position and the breach notification commitment.

Contact runs under the customer's identity to the customer's own clients, and the recipient is given no way out.

On identity the record is clean. Email and text messages leave under the customer's own branding to people already inside the customer's processes, typically a lead who has enquired or a client being served. Two passes located no persona, no synthetic sender, no rented identity, no automated reply handling under a human's name and no undetectability marketing of any kind. The recipient is being contacted by the company they approached.

The timing design is genuinely recipient favourable in one respect. The vendor's stated aim is that a customer showing interest receives an immediate response rather than waiting, and reducing that wait is the outcome the company markets. Fast honest follow up is better for the person on the other end than slow follow up.

What is missing is the exit. Two passes located no unsubscribe or stop mechanism, no sender identification requirement, no frequency disclosure and no description of what happens when a recipient asks to stop. For automated text messaging inside the European Union that is a specific and regulated omission rather than a general one, and the click tracking that triggers subsequent actions is behavioural observation the recipient is not told about.

Ask how a recipient stops automated email and text, and what the click tracking discloses.

A workflow platform that has published nothing about what it connects to.

The independent directory profile states the position twice and plainly: the vendor has not provided details about third party integrations for this software, and there is no information available about an interface. Two passes across the vendor's own site, its pricing page and its process catalogue found nothing to contradict either, with no connector list, no named system, no authentication scheme, no webhooks and no developer documentation located.

For this category that is the material gap rather than a secondary one. A process automation engine earns its value by reaching into the systems where work already happens, the record system holding the customer, the mail platform sending the message, the document store, the accounting package. A platform that automates only what lives inside itself becomes another island, which is the problem it was bought to solve.

The directory records the consequence as a stated drawback, noting that integration often requires third party interface connections, meaning the customer supplies the connective work.

Some of this may reflect a vendor selling through consultative implementation, where connections are built per engagement rather than offered as a catalogue. That is a coherent model and it still leaves a buyer unable to assess fit before a sales conversation.

Ask which systems the platform already connects to and whether an interface exists.

Nothing about where any of this runs was located.

Two passes across the vendor's own site, its company page, its pricing page and an independent directory found no hosting provider, no region, no data centre, no residency commitment, no tenancy or isolation model, no encryption statement, no backup position, no continuity plan and no uptime commitment. A web and mobile application is described as the delivery surface, which establishes the form of the product and nothing about its infrastructure.

The only claim adjacent to this is the assertion that the company operates to the highest standards of scalability and that its system handles several hundred thousand processes monthly. Volume is not location.

The jurisdiction cuts both ways here. A Polish vendor serving Polish customers is very likely hosting inside the European Union, which would satisfy most residency requirements a buyer in that market would raise, and the absence of a statement may simply reflect that nobody in its home market has needed to ask. But likely is not stated, and a buyer in a regulated industry among the named verticals, financial services and insurance in particular, will be required to establish it rather than assume it.

Ask where the platform is hosted and whether the region is contractually fixed.

An assurance without an instrument behind it.

The company page states that the vendor operates in accordance with the highest standards of security and scalability. Two passes located nothing else: no certification of any kind, no audit report, no international standard, no penetration test, no trust portal, no security page, no encryption or access control description, no vulnerability disclosure route, no named security contact and no subprocessor list.

A superlative claim with no attestation behind it is weaker than no claim at all, because it invites a buyer to stop asking.

The named target industries make the gap consequential. Financial services and insurance both appear on the vendor's own list of who this is for, and both operate supplier assurance regimes that will require documentary evidence rather than a sentence. A prospect in either will reach this question in their first review cycle.

The title anomaly recorded on the platform terms axis, where a page on the company's own domain presents itself to search engines as being about casino gaming applications, is the one observable data point available and it points the wrong way.

Thirteen years of operation without a retrievable certification suggests a vendor selling into a market that has not demanded one rather than one that has failed an audit.

Ask whether any independent security assessment has been completed and what it covered.

The pricing page answers the question this category usually dodges.

That question is metering. Process automation platforms commonly charge per process, per workflow or per execution, which makes the cost of automating the tenth process unknowable at the point of buying the first. This vendor states directly that any processes a customer chooses to automate are included in the price, which removes the trap and lets a buyer plan a programme rather than a pilot.

Structure is published in the vendor's own currency across three tiers, described by buyer situation rather than by feature checklist: a medium sized company looking to improve team collaboration, a medium sized company that has decided to automate in order to keep growing, and a large company needing flexible software with dedicated support. An independent directory reports the middle tier at 2,499 zloty monthly as a base charge plus 94 zloty per user monthly, with a custom enterprise arrangement and a free trial.

A demonstration implementation is offered before purchase, automating one real business process on the platform after a short discussion of that process and its stages, which is a substantive pre sale commitment rather than a slide deck.

The deductions: the base and per user split reaches this record through a directory rather than from the vendor page, the enterprise tier carries no band, and the analytical workshop and ongoing advisory engagement are described without a rate.

Ask what the analytical workshop and the assigned advisory team cost.

The platform accumulates the most portable thing a company owns and describes no way to take it.

Two passes located no export mechanism, no format, no scope statement, no timeline, no deletion or retention commitment after cancellation, no account closure process and no interface for programmatic extraction.

What accumulates here deserves naming, because it is unusual. The asset is not a contact list, which can be rebuilt. It is the company's operating processes: how a lead is qualified, who is notified when a quotation is late, what documents a request must carry, which stage assigns which task to whom. A customer who runs this platform for three years has encoded a substantial part of how their business works into it, refined through use. That is the accumulated value, and whether any of it leaves in a usable form is unaddressed.

Alongside it sits the operational record: task histories against deadlines for named employees, documents circulated through processes, and the reports managers have been running on effectiveness.

The absence of any published interface, recorded separately on the ecosystem axis, closes the alternative route out, since a customer cannot extract programmatically what the vendor does not export.

Ask whether process definitions, task history and circulated documents can be exported, and in what form.

Unattended sending on two channels with no discipline described on either.

The capability is stated by the vendor and by trade press covering it: email dispatched to customers without manual handling, with follow up actions programmed to fire when a recipient clicks a link, and automated text messaging so a customer showing interest receives an immediate response.

Two passes located nothing governing how that sending behaves. No sender authentication guidance, no warmup, no rate control or throttling, no bounce handling policy, no address verification, no list hygiene, no reputation monitoring, no measured deliverability data and no published volume ceiling.

On the text channel the omission is broader still, with no route registration, no sender identification, no message frequency position and no carrier or aggregator named.

The partial mitigation is genuine and should be stated so the grade is read correctly. This platform sends to a customer's existing contacts inside a running process rather than to cold purchased lists, and the volumes implied by process driven triggers are transactional rather than campaign scale. The failure mode here is a misconfigured process sending the same reminder repeatedly rather than a reputation collapse from bulk prospecting.

Ask what limits apply to automated email and text volume per process and per recipient.

Seven industries named, a company size stated, and a preference declared among them.

The industry list is specific: fast moving consumer goods, manufacturing, telecommunications, financial services, insurance, logistics and retail distribution. More usefully the vendor does not treat them as equal, stating that its specialisation in repetitive sales and service cycles makes it best suited to the consumer goods and telecommunications niches. Naming a preference inside your own target list is a disqualifying signal offered voluntarily and it is rare.

Company size is drawn consistently as medium sized organisations experiencing friction as they scale across multiple departments, and the tier structure follows the same logic, describing buyer situations rather than seat bands.

The positioning against alternatives is stated too, with the low code engine presented as the middle ground between an expensive bespoke build and a rigid off the shelf application, which tells a buyer which comparison the vendor expects to be measured against.

The boundary is language and it is decisive. The product is primarily available in Polish, the website, pricing page and process catalogue are Polish, pricing is quoted in zloty and support is Polish. That confines the addressable market to one country, and the vendor states the industries and the company size without ever stating the geography.

Ask whether the platform and its support are available in any language other than Polish.