Who can say yes to licensing supplier substitution approval records? A decision tree for procurement systems consultants

Short answer

Start with the procurement director, who knows which substitutions happened and where the requests, quotes and purchase orders sit. The approval to open a licensing discussion has to come from someone with authority over procurement, quality and engineering records together, which means the CEO, with general counsel involved. A QMS administrator who can export records has access, not authority. Supplier quotes and customer drawings add outside owners whose terms stay open until SourceX's rights review.

Visual briefFull-size diagram
A left-to-right approval tree: three record owners (procurement, quality, engineering) converge on one question about authority over all three, which lights a path to the CEO with general counsel, while side branches for a QMS administrator, supplier terms and customer drawings end at access only or the rights review.
Generic decision path for a manufacturer. Record owners' titles vary; the CEO, who has authority over all three record families, approves.

This answer is part of the supplier substitution approvals hub. It does one job: take a procurement systems consultant from the contact they already know to the person who can say yes.

Why one substitution record has three internal owners

A substitution approval is a single decision spread across three functions, and each one guards its own piece.

  • Procurement owns the request, the alternative quotes, the buyer's notes and the purchase order. In suites such as SAP Ariba, the Approvals reporting fact also records who approved or denied documents, who reassigned approvers and who delegated approval authority.
  • Quality owns the deviation or nonconformance record, the receiving inspection results and the supplier certificates in the QMS.
  • Engineering owns the drawing, its revision history and the judgment that a deviation was acceptable for a given use.

A procurement director can describe all three but rarely holds authority to commit quality or engineering records. Under ISO 9001, purchase requirements are meant to be checked as correct before they reach the supplier, which is one reason engineering and quality sign-offs sit in their own files rather than in procurement's.

The yes tree, question by question

  1. Who opens and tracks substitution requests today?
    • The procurement director or a sourcing manager: start there as sponsor. Go to 2.
    • Planners or buyers decide informally by email: ask who reviews those decisions and start with that person.
  2. Does the sponsor have authority over quality and engineering records as well as procurement?
    • No, only procurement: go to 3.
    • Yes, because the sponsor is also the CEO, as in some owner-run firms: go to 4.
  3. Who sits above procurement, quality and engineering together?
    • The CEO, or the owner-CEO in an owner-run firm. That person is the approver. The COO or CFO may sponsor the case internally. Go to 4.
    • In an investor-owned group, the operating company CEO, with the holding company informed.
  4. Do supplier quotes or certificates carry confidentiality terms?
    • Often. Mark them as an outside owner and go to 5. Counsel reads the supply agreements later.
  5. Are any drawings or specifications owned by customers?
    • Common for contract manufacturers. Mark them as excluded unless customer contracts allow use. Go to 6.
  6. Is the company regulated in a way that shapes its quality records?
    • Medical device makers now work under FDA's Quality Management System Regulation, in effect since February 2, 2026, which incorporates ISO 13485:2016. Their quality lead and counsel join the conversation early. Go to 7.
  7. What is left?
    • The rights review. Introduce the approver with supplier terms, customer drawings and any regulatory questions written down as open.

Roles and their authority over substitution records

RoleWhat they hold or knowCan they authorize a licensing discussion?
Buyer or sourcing specialistRequests, quotes, buyer notesNo
Procurement directorFull view of substitutions and suppliersSponsor; rarely final
Quality managerDeviations, inspection results, certificatesNo, but confirms what quality would release
Design or manufacturing engineerDrawings, revisions, acceptability judgmentsNo, but flags customer-owned drawings
QMS or source-to-pay administratorExport options, retention settingsNo: access only
COOOperations across procurement, quality and engineeringNo; often sponsors internally
CFOSupplier spend, contract riskNo; may prepare the case
CEO or owner-CEOOverall appetite, customer relationshipsYes; authorizes and signs
General counselSupply agreements, customer contracts, regulatory dutiesAdvises; may set conditions

Outside owners: supplier terms and customer drawings

Two parties outside the company can limit what is usable even after the approver says yes.

Suppliers. Quotes, price breaks and material certificates come from suppliers and can carry the supplier's confidentiality terms. The company holds them; whether it can license them depends on those terms. If the consultant's own firm buys from one of the suppliers involved, read can I refer a supplier my company buys from before going further.

Customers. Contract manufacturers often build to customer drawings, and those drawings, with the specifications attached, may belong to the customer. The substitution record that cites them is the company's; the drawing itself may not be. Counsel sorts this, not the partner.

Three plants, three paths (Illustrative)

Fictional examples written for this page.

CompanyPath through the treeWho to introduce
A 380-person pump maker, owner-managedProcurement director sponsors; owner-CEO oversees all functions; counsel reads top supply agreementsThe CEO, with procurement director and quality manager copied
A 900-person contract electronics manufacturerCOO above procurement and quality; engineering under a CTO; many customer drawingsThe CEO, with the COO and CTO as sponsors, customer drawings listed as excluded pending review
A 260-person device component supplier under a private equity ownerQuality lead joins early because of QMSR; operating CEO approves; board informedOperating CEO, quality lead as co-sponsor

Distributors held by investors follow a similar shape; MRO distribution gives sector context.

What stays open until SourceX's rights review

For SourceX, an introduced company needs 50+ full-time employees at peak (contractors excluded), a documented operating history, rights to license and an authorized contact. Companies in the U.S., Canada and the EU qualify, as do companies in the UK, Australia, New Zealand, India, Singapore, South Africa, Latin America, the UAE and Saudi Arabia when at least 90% of the data is in English.

Whoever approves, these remain unknown until review: which supplier documents can be included, whether customer drawings must be excluded, what regulated records require, whether buyers want substitution decisions and whether any offer follows. Why data rights matter explains the review. Partners sign the Channel Partner Agreement before submitting introductions, and the first valid introduction within the 90-day window is credited when the company submits a verified application. To hand the answers over, use the substitution referral brief template; if supplier consolidation is coming, the substitution preservation timeline shows what to inventory first. The broader category is in procurement approvals and exception workflows.

Next step

Refer a company. Earn up to $100,000. Default reward: 25% of Actual Supplier Payout, capped at $100,000 cumulatively per referred company. Eligibility and payment conditions apply, and a signed Schedule A or addendum can differ. A lead, meeting or signature alone does not trigger payment.

When the tree ends at the CEO, who oversees procurement, quality and engineering, register as a partner, check the company against who qualifies and read the program terms before you make the introduction.

  1. Step 1Share your linkSend your personal link to a company you know.
  2. Step 2Company appliesThe company applies itself at /apply.
  3. Step 3Company signs and is paidThe company signs, delivers its data and is paid by SourceX under its agreement.
  4. Step 4You get your rewardYour 25% of the actual supplier payout. A reward becomes payable after SourceX has paid the referred company under its signed agreement and the payout conditions in the program terms are met, including finance approval and your tax and payment details.

Common questions

The procurement director reports to the COO. Can the COO approve alone?

No. The COO can sponsor the discussion and speak for operations, but the CEO, who sits above procurement, quality and engineering, authorizes it and signs, usually with general counsel advising.

Does a customer have to agree before the company discusses its substitution records?

Not before a discussion. Whether customer drawings or specifications can be included later depends on the customer contracts, and SourceX's rights review decides that. Many cases are handled by excluding customer-owned files.

I configure the company's source-to-pay suite. Is that a conflict?

It can be. Disclose the referral relationship, keep it separate from paid configuration work, and never pull reports or records for the introduction. You introduce the approver; you do not act for them.

Sources

  1. help.sap.com/docs/buying-invoicing/reporting-fact-referen…
  2. committee.iso.org/files/live/sites/tc176/files/PDF APG New Dis…
  3. fda.gov/medical-devices/postmarket-requirements-devi…
  4. refer.sourcex.si/terms

Free resources

Know a company with valuable proprietary data?

Become a referral partner, get your link and introduce the company’s CEO (in an owner-run company, usually the owner). Referral partners can join from most countries. We can't work with partners in countries or regions under U.S. sanctions or on U.S. restricted-party lists. The companies you introduce should be based in the U.S., Canada and the EU, or in the UK, Australia, New Zealand, India, Singapore, South Africa, Latin America, the UAE and Saudi Arabia with at least 90% of their data in English.

Refer a company →

I own a business

Explore licensing your company's data directly to SourceX for AI training and evaluation. Start a short assessment; no uploads needed.

Start an assessment