Vendor Grading — lift-scan report (2026-07-08, additive to the two DRs)

Ranked top-10 steal list

1. ERPNext Supplier Scorecard schema (GPL — schema+UX steal only, rebuild clean): Scorecard → weighted Criteria (sum 100) → Criteria Formula over pre-defined Variables (items accepted/rejected, delivery timeliness, RFQ response time) → period scores rolled into current score via customizable weighting (default linear decay over last 12 periods) → Standings (named tiers, per-supplier customizable) that gate procurement actions (block RFQs/POs). Grade A.
2. NOMOI CW Gmail-IMAP + forwarding-token pipeline (NOM-SYN-* pattern) — internal code vendor for email→event ingest (Wave 6). Grade A.
3. CUAD fine-tuned checkpoints (HF: gustavhartz/roberta-base-cuad-finetuned, Rakib/roberta-base-on-cuad) — CUAD labels already include Expiration Date, Renewal Term, Notice Period to Terminate Renewal, Effective Date. Usable as deterministic second engine in a two-engine extraction quorum (disagreement → human review flag). Grade A.
4. ADHICS Domain 10 "Supplier Relationships" (DoH Abu Dhabi) — mandates vendor security assessment + ongoing vendor monitoring for every AD healthcare entity (SSMC included). "ADHICS Domain 10 vendor oversight evidence pack" export = compliance wedge no US competitor offers. Grade A.
5. Gatekeeper pricing axis — price per third-party count, unlimited users; floor ~$1,245/mo for 150 vendors. Undercut 10x. Grade A/B.
6. Abu Dhabi Procurement Standards — supplier performance scores are part of the mandated evaluation framework for AD government entities; they are obligated to produce what our engine outputs. Grade A.
7. Sirion renewal-pipeline dashboard shape + their "9% revenue drain from missed renewals" pitch stat. Grade B.
8. NuExtract 2.0-2B/4B — on-prem extraction lane for data-cannot-leave buyers (check per-variant license). Grade B.
9. mail-parser (Apache-2.0) — MIME/attachment normalization dep for ingest path. Grade A.
10. Wallos renewal-timeline UX (upcoming-renewals strip, lead-time notifications, category rollups) — UX reference only (GPL). Grade A.

Competitor pricing floor (the gap)

Gatekeeper ~$15k/yr (150 vendors); Vanta TPRM add-on ~$11k/yr on top of $10–28k base; Venminder/Ncontracts, Sirion, Icertis, Zip = quote-only enterprise $40k+; Ramp = free procurement but zero grading/contract intelligence, no UAE. OSS field is empty (no supplier-scorecard/renewal repo above 20 stars; OpenCLM and MXHook have no public code). Nobody sells "grade your 50 vendors and never miss a renewal" at $100–500/mo, and nobody offers GCC compliance framing.

Pricing verdict: anchor $99–299/mo (AED ~400–1,100), 10x under Gatekeeper's floor. GCC/ADHICS framing = differentiation.

Banned-license discipline applied

LexNLP (AGPL) and OpenCLM (AGPL, repo 404s) excluded from lift; ERPNext (GPL), Wallos (GPL), Odoo (LGPL) restricted to schema/UX reference; no code lifted from copyleft sources.