The business app — your org's main procurement workspace.
An API-first platform, not a product silo.
Multi-tenant by design. Open API, signed webhooks, bilingual by default. Four subdomains, one object graph, every action audit-logged.
Four domains. One platform.
Your team, your API, your support surface, your docs — each behind its own subdomain, all wired to the same tenant scope.
REST API and webhooks. OpenAPI spec, API keys, HMAC-signed events.
Searchable documentation — every module, every workflow.
Superadmin console for multi-org management and support access.
Connect to your existing stack.
Connectors shipping today. Your inbox, your messaging app, your supplier network, your carriers — wired in minutes.
Two-way messaging, auto-link to RFQs, OCR-parsed quotes.
OAuth email sync. AI classifies inquiries, RFQs, and complaints.
Outlook 365 OAuth. Same AI classification and thread linking.
Supplier data, PO push, invoice import via Ariba Network.
Invoice sync + inbound webhook. Your accounting partner submits the e-invoice on its end; Tawridy stays the source of truth.
Fast, typo-tolerant global search across every entity.
Live rate quotes, AWB creation from a purchase order, and shipment tracking.
Live rate quotes and shipment tracking; AWB creation through the API.
Event subscriptions with HMAC signing and automatic retries.
Programmatic access with the creating user's permissions; create and revoke in Settings.
More landing through 2026.
Every integration below is planned, not live. We publish this roadmap so you know what's coming; timings shift.
Two-way accounting sync for SMEs outside ZATCA scope.
Card payments and subscription billing.
UAE B2B buy-now-pay-later financing.
KSA BNPL financing for supplier payables.
GCC payment gateway — cards, wallets, local rails.
Source-to-pay connector for Coupa-using buyers.
Direct banking feed for AP reconciliation.
Build on Tawridy.
Everything the app does, the API does. Webhooks carry every state change; API keys act with their creator's permissions and can be revoked.
Every endpoint documented. Tokens for machine-to-machine access.
HMAC-signed, retry with exponential backoff, per-org subscription.
Organisation API keys (X-API-Key), created and revoked in Settings.
Busy endpoints are rate-limited and answer HTTP 429.
Isolation by design.
Every query is tenant-scoped. Every change is audit-logged. Hosted in Singapore (Railway, Southeast Asia region).
Every API call is scoped to your organization at the query layer. Cross-tenant data access is a compile-time error in the codebase.
Roles per module, permissions per action. System roles on day one; custom roles in seconds.
Every create, update, delete, and status change is logged with user, timestamp, and diff.
Tenant data is hosted in Singapore (Railway, Southeast Asia region). Ask us before signing if you need data kept in the UAE.
Built for the Gulf, from day one.
Per-country VAT, currency, and GCC-format invoices out of the box. ZATCA / FTA / Dhareeba submission via your certified accounting partner.
Stop losing deals to your own back office.
Start free. Import your supplier list on day one. Live within a week.