Principal PM · Supplier Experience — Panel caseVerify once.
Trust everywhere.
A product proposal for Coupa's next chapter of Verified — turning the network's existing knowledge into something buyers can actually rely on before money moves.
From a hidden tax → to a moat only Coupa can build.
The problem is structural. The mechanism is one credential. The plan validates before it codes.
One broken mechanism. Three victims.
Verification doesn't travel across buyers — so the supplier repeats, the buyer re-verifies, and Coupa watches the value leak to third parties. Same root cause. Three bills.
“Our Coupa Verified badge cost us months of back-and-forth and it still doesn't travel — every new customer restarts the diligence.”
“A vendor called to update banking info. Voice matched. Email matched. It was a $340K wire fraud.”
“The trust layer sits with Trulioo and D&B. Coupa sells the portal — not the confidence.”
Only Coupa sits in the middle of the network.
The same supplier is verified by four buyers, four times, in parallel — every week. No single buyer can fix that. No third-party verifier has the buyer pull. The platform they all share does.
All three victims sit here: the supplier already registered, the buyer already paying, the network already built. Fixing this from anywhere else means rebuilding what Coupa already has.
Every verification makes the next one cheaper, faster, and more required.
A portal is a feature. A flywheel is a moat. Before we get to what we build, this is the loop it has to create — and why the loop only closes where suppliers and buyers already share a network.
% of verification requests answered from facts the network already holds — instead of triggering a fresh KYB, doc chase, or bank check.
- · A standalone verifier (Trulioo, D&B) has suppliers but no buyer pull — no loop.
- · A single buyer (SAP, Ariba tenant) has policy but can't force reuse outside its walls.
- · Coupa is the only place both sides already stand — 3M suppliers, 2K buyers, one graph.
What would it take to break the cycle?
Any real fix has to be all four at once. Miss one and it collapses back into a badge — the thing we already have.
Notice what's not on that list: identity alone. Identity says who you are. Buyers need verified facts they can act on — can I pay you today, is this bank verified, did anything change since last month.
The Trust Passport.
One portable source of verified business facts — owned by the supplier, reused with consent by every buyer on Coupa. Identity, bank, evidence, and continuous monitoring, in one signed record.
Coupa doesn't replace buyer approval — it replaces manual evidence collection. The final call is always the buyer's. Data residency and GDPR scope live with the supplier's consent.
“ Suppliers don't wake up wanting a passport. They wake up wanting to get paid faster. ”
Trust PassportYou don't ask buyers to push suppliers.
The product makes verified the default.
- ✕Buyer emails: please get Verified
- ✕Supplier ignores or delays
- ✕Buyer does manual verification anyway
- ✕Nothing changes for the next buyer
- ✓Buyer configures requirements once
- ✓Verified suppliers arrive 85% complete
- ✓Unverified fall to manual review
- ✓Every buyer benefits, from day one
Everything so far has been strategy. Let me show you what the supplier actually experiences →
In about 4 minutes, your Passport is done — forever.
Trust PassportApprove in seconds, not weeks.
Show audit trail
- · 14:22:07 · Passport read · consent scope = onboarding
- · 14:22:07 · Identity, bank, tax, sanctions, insurance — signed sources logged
The supplier changed banks with one buyer.The other 46 find out in the same minute.
A fraudster emailed a buyer's AP team: “We changed banks, pay here.” The buyer wired the money before anyone noticed. Static verification missed this.
Bank change is a Passport event. Every buyer subscribed to Nordic is alerted the moment it happens — and the supplier has to reconfirm before any buyer can approve a payment.
Trust PassportToday the wrong side pays.
Suppliers pay $49 for a badge that changes no process — like the verified check on Instagram. The party in pain is the buyer. Time to move where the money is created.
- →Verify once, reuse everywhere
- →Faster time-to-revenue
- →Full consent control
- →Onboarding in days, not weeks
- →$50K+ manual verification saved
- →Fewer fraud vectors — bank change alerts
- →New buyer-side revenue module
- →Higher retention + switching costs
- →A compounding network asset
- → "Supplier is who they say they are"
- → Better search rank on the network
- → Buyers rarely require it — no economic pull
- ✓ Identity + bank + compliance, evidence-backed, current
- ✓ Reusable across every buyer with consent + audit trail
- ✓ Bank-change alerts and continuous monitoring
- ✓ Verified Pro ($49) survives as a supplier-marketing add-on
Same SKU family, same brand equity, same onboarding UI. What changes is who pays and what the credential means.
North Star · Inputs · Guardrails · a Counter-metric that kills vanity.
- · Passports created
- · Reuse requests / week
- · Buyer policies configured
- · Time-to-onboard (days)
- · Supplier NPS ≥ baseline
- · False-positive alerts < 2%
- · Verified Pro GRR ≥ 90%
- · Data-residency incidents = 0
- · Buyer approval override rate
- · Target: < 10% by month 12
- · If reuse ↑ but overrides ↑ = fake
- · Kills vanity reuse
- · Buyer Trust ARR
- · Fraud loss $ prevented
- · Manual-verify hours saved
- · Verified Pro GRR
Free for the supplier. Paid by the buyer. Pro re-anchored to efficiency.
Why buyer-paid, not supplier-paid? The buyer captures the $50K+ savings and the fraud avoidance — they'll pay for outcomes. Suppliers already pay $49 for a badge that doesn't travel; charging them more breaks adoption right when the flywheel needs volume.
- · Verified identity + bank + docs
- · Consent-scoped sharing
- · Reused on every buyer
- · Policy engine · one-time config
- · Live Trust Reuse dashboard
- · Bank-change alerts + audit trail
- · Continuous monitoring
- · Auto-renewals + analytics
- · ERP + procurement sync
~$21M ARR path.
And that's the small number.
I sized this conservatively so it survives scrutiny. Deliberately outside this number: core retention, switching costs, and the foundation for payments, risk, compliance — plus agentic AI, which can only act on facts it can trust.
30–40% sounds aggressive until you remember the buyer already pays Coupa. This isn't a new logo motion — it's a module attach against 2K live tenants with an ROI story their AP team writes themselves. Cut it in half (15–20%) and it's still a $10M+ line.
Why enterprise first, not mid-market? The flywheel needs supplier density day one — one Fortune 500 buyer brings ~5,000 suppliers, one mid-market buyer brings ~150. Mid-market enters Wave 2 with a self-serve motion, once the Passport pool is deep enough that reuse sells itself.
Validate before we code. Identity + bank is the wedge.
- 1 PMOwns the reuse loop and buyer policy scope
- 3 Engineers1 platform · 1 integrations · 1 full-stack
- 1 DesignerConsent flows, Passport UX, buyer dashboard
- ✕Reputation scores
- ✕AI fraud engines
- ✕Custom buyer workflows
- ✕In-house verification
Every “no” is what makes four engineers enough.
We orchestrate trust. We don't build another verification company.
- ✓ Passport data model
- ✓ Consent management
- ✓ Audit trail & provenance
- ✓ Verification orchestration
- ✓ The reuse engine
- ✓ Buyer policy engine
Someone else will own the trust layer of B2B.
Trulioo, D&B and vertical KYB players are already selling verification-as-a-service to our buyers. Every year we wait, the Trust Tax compounds — and the moat gets built on top of Coupa, not by Coupa.
The supplier didn't have to prove itself again.
The network did it for them.
Today every buyer asks: can I trust this supplier?
My proposal changes the question: has the network already established that trust?
That's why the future of Verified isn't verification. It's reusable trust.