CLIENT: Durmevaart Group🇧🇪Belgium

Waag - Supplier Onboarding and Third-Party Risk Platform

Supplier Onboarding and Risk Platform for a Belgian Industrial Group

Designed and built a clickable supplier onboarding and third-party risk platform for a Belgian industrial and logistics group: a 10-item onboarding checklist from request to approved vendor, registry, VAT and ownership checks, bank details confirmed by an independent call-back and a second person, and a supplier base scored by tier and risk rating.

Scope of Work
Product design, UI build and clickable demo
Industry
Procurement & ESG / Supplier Onboarding & Risk
Enterprise
Compliance & Certifications
EU sanctions (restrictive measures)Instant Payments Regulation (VoP)Belgian UBO register30bis and article 403 (Belgium)CSDDDEU Forced Labour RegulationNIS2GDPR

Most of our work is under NDA. Per agreement, we can share the work but not the company details - all names and identifying information shown here have been changed.

Impact

5 Screens
Clickable end to end

Dashboard, supplier list, supplier detail with 9 tabs, the onboarding board with its case drawer, and bank verifications with the verification drawer.

10 Checks
Before a supplier is approved

Business need, registry, VIES, UBO, screening, bank account, questionnaires, documents, 30bis / 403 and risk appetite. Approve supplier stays disabled until the checklist passes.

2 People
On every bank change

A call-back to an independently sourced number, then a second approval by a different user. The first checker cannot approve their own request, and four fraud signals are flagged in red.

27 Suppliers
Realistic demo data

From 11 countries, with 16 onboarding cases, 13 bank verifications, 7 screening hits, 14 staff users and 5 buying entities, all with valid-format KBO / BCE numbers.

The Problem

Durmevaart Group onboarded suppliers through an emailed Excel form, a shared mailbox and a vendor master team in finance. Buyers bypassed the process to get urgent suppliers paid, the same company existed three times in the ERP, nobody knew which insurance certificates had lapsed, and two invoices totalling EUR 184,000 went to a fraudster's IBAN after a fake change of bank details email.

Our Solution

Waag takes a supplier from a buyer's request to an approved, payable vendor record and keeps watching it afterwards. Every case runs one checklist across registry, VAT, ownership, screening, bank, questionnaire and document checks, and no bank account is payable until two different people have confirmed it.

The Challenge: Checking Suppliers Before Anyone Is Paid

Durmevaart buys from about 6,500 suppliers across the EU for its warehouses, haulage fleet and two component plants. Each one has to be checked against Belgian and EU rules and the group's own policy, and the checks depend on what the supplier will touch.

Payment Fraud Through Bank Changes

A convincing email was enough to redirect payments. Verification of Payee under the EU Instant Payments Regulation helps, but the group also needs a call-back to a number taken from an independent source, made by someone other than the person who entered the change.

Ownership Without Register Access

Durmevaart is not an AML obliged entity, so it cannot assume access to the Belgian UBO register. It has to collect a UBO declaration from the supplier and cross-check it against registry and commercial ownership data.

Sanctions and Monitoring After Approval

EU restrictive measures ban making funds available to listed persons, including entities they own or control. The supplier, its directors and its UBOs have to be screened at onboarding and watched afterwards, not checked once.

Different Rules per Supplier

Questionnaires on ESG, cyber, anti-bribery and modern slavery, required documents and 30bis / 403 social and tax debt checks depend on tier and category. A haulier, an IT provider and a site contractor each need a different set.

Our Approach: From Due Diligence Rules to a Clickable Platform

01

Spec and Rules Research

Mapped 9 user roles, 34 screens (27 staff and 7 supplier portal) and the data model for suppliers, people, documents, screening hits, bank verifications, onboarding cases, questionnaires, reviews and remediation actions. Wrote down the rules the design follows: KBO / BCE and VIES checks, the Belgian UBO register, EU sanctions, Verification of Payee, 30bis and article 403, CSDDD, the EU Forced Labour Regulation, NIS2 and GDPR.

02

Clickable Demo on a Production UI Kit

Built 5 key screens on a production dashboard kit: the dashboard with supplier base by tier and rating, onboarding flow and My work by role, the supplier list with status pills and quick view, supplier detail with ownership tree and lifecycle rail, the onboarding board with drag between stages and the case checklist, and bank verifications with call-back script and second approval. All actions run on local state.

03

What a Production Build Adds

Integration with KBO / BCE, VIES, Orbis or Creditsafe, a screening provider such as Dow Jones, World-Check or ComplyAdvantage, SurePay, EcoVadis, itsme sign-in and SAP S/4HANA for the vendor master. Staff auth by role, a full audit log, and the remaining screens: KYB checks, the screening alert queue, questionnaire review, documents, periodic reviews, reports, settings and the NL / FR / EN supplier portal.

Why It Works: One Checklist, Two Sets of Eyes

Approval Waits for the Checklist

Each case shows its 10 checks as done, pending, failed or not required, with who completed each. Approve supplier only unlocks when the checklist passes, and approve with conditions records the conditions and due dates.

The Request Number Is Never Offered

The call-back panel shows a phone number from the registry, the supplier's website or the record before the change, with its source. Email requests, a bank in another country and recent contact changes are flagged as fraud signals.

Cases Show What They Are Waiting On

Board cards say what holds each case, such as a call-back or 2 documents from the supplier, and days in stage turn amber after 3 working days and red after 5. The dashboard marks stages that are past their target age.

One Record per Supplier

Supplier detail brings identity, engagement, risk per dimension, ownership, people, bank accounts, screening, questionnaires, documents, reviews and activity together, with a lifecycle rail of every status change and its date.

Related case studies

View all: Procurement & ESG
Logo
Oceanlab

Enterprise Software Engineering - Human + AI

Languages

Locations

Global Headquarters

21 Merchant Road, 3rd Floor, Singapore 058267

Main corporate office and leadership operations

North America Office

548 Market Street, PMB 12345, San Francisco, CA 94104

Client operations and business development

India Office

402 Shivalik Shilp II, SG Highway, Ahmedabad 380015

Engineering and delivery center

© 2026 - Copyright. All Rights reserved Oceanlab