Core Concepts
Understanding a few core concepts makes it easier to build reliable data workflows in VendorGate.
Account and workspace
Your VendorGate account is the top-level container for everything you build. Inside an account, you can invite team members and configure billing. All resources belong to the account.
Credentials
Credentials are secure records that store the details VendorGate needs to connect to external systems. Examples include SFTP usernames and passwords, API keys, database connection strings, and webhook signing secrets. Credentials are referenced by name in pipelines and monitors, never embedded in configuration files.
Contracts
A contract defines what a valid file looks like. It specifies the source format, the columns a file must contain, expected data types (string, integer, decimal, boolean, date, datetime, time, email, url, uuid, json), and business rules that rows must satisfy. For each column, required controls whether the column must appear in the source, and nullable controls whether cells may be empty. When a pipeline runs, the contract is applied to the incoming file and invalid rows are flagged.
Pipelines
A pipeline moves data from one place to another. Each pipeline has a source, a contract for validation, a delivery destination, and optional execution settings. Single pipelines use one contract; workbook pipelines use one contract per sheet. Sources include SFTP, FTP, S3, HTTP APIs, and databases. Destinations include SFTP, FTP, S3, HTTP APIs, databases, and lookup datasets. Pipelines can be triggered on a schedule or run manually on demand. You can also enable fail-fast execution to stop processing after a configured number of errors.
A typical VendorGate workflow
Source
Collect the file
Contract
Validate the data
Standardizer
Transform the data
Destination
Deliver the output
Transformations (Standardizers)
Transformations, also called standardizers, take validated input data and convert it into a clean, predictable output schema. You define output columns and choose a mapping mode for each one: simple field mapping, multi-step transforms, expression evaluation, or llm prompts that call a provider-owned LLM. Transformations can also reference lookup datasets and join multiple inputs.
Lookup datasets
A lookup dataset is a reference file or table that a transformation can use to enrich or validate data. For example, you can map supplier IDs to standardized names or validate country codes against a reference list.
API monitors
An API monitor checks a remote endpoint on a schedule. It verifies status codes, response times, response content, headers, and TLS certificate expiry. Monitors support OAuth2 client credentials, mTLS, bearer tokens, basic auth, query-param, and header-based API credential authentication. Monitors are independent of pipelines and transformations.
Runs and alerts
Every pipeline and monitor execution creates a run record. You can inspect run history, view errors, and configure alerts to notify your team by email or webhook when something fails or succeeds.