JAGGAER vs Tipalti

Requirement evaluated: Automatic tolerance-based auto-approval for minor variances (e.g., invoices within $25 or 1% of PO are auto-matched)

For a services company processing ~990 PO-based invoices per month across two Sage Intacct entities, JAGGAER's Invoicing module handles tolerance-based auto-approval as a native, configured capability within its AP matching engine. Administrators set tolerance parameters at AP Administration > Matching Rules and Tolerances, where both percentage-based thresholds (e.g., 3% above cost, 10% below cost) and direction-specific variance rules are defined per the organization's policy. …

Limitations: The automated matching workflow and its tolerance rules must be initially configured by JAGGAER professional services rather than self-service by administrators post-go-live; real-world feedback indicates this setup is labor-intensive, so the buyer should budget implementation time accordingly. …

Requirement evaluated: Automatic tolerance-based auto-approval for minor variances (e.g., invoices within $25 or 1% of PO are auto-matched)

For a $120M multi-location services company running 55% PO-backed invoices across two Sage Intacct entities, Tipalti handles tolerance-based auto-matching inside its dedicated PO Matching module, which sits at stages 2 and 3 of the pre-processing journey (PO match and receipt confirmation). Administrators configure tolerance thresholds by dollar amount or percentage at the bill or line level; invoices that land within the defined range are treated as matched and proceed automatically, while invoices that exceed the threshold are flagged for manual review and routed through an exception workflow. …

Limitations: The Sage Intacct integration requires units of measurement to be unique in Intacct for the PO-matching sync to succeed; mismatched unit values will cause sync failures that AP must resolve before the tolerance rules can operate. The 45% non-PO invoices (utilities, subscriptions, insurance) …

No public documentation covering this requirement was found on the documentation sources this vendor publishes. That is a limit of the public evidence, not a finding about the product.

Requirement evaluated: Support for Sage Intacct dimensions: Location, Department, Class, Project, Customer, and custom dimensions

For a $120M services company running 1,800 invoices per month across two Sage Intacct entities, the critical question is whether JAGGAER can read Intacct's full dimension string at invoice line level and write coded values back on posting. JAGGAER's invoicing page confirms real-time posting to 'SAP, Oracle, Workday, Infor and 30+ more' and names Sage generically in its FAQ, and its fact sheet documents integrations with 40+ ERPs. However, JAGGAER's dedicated Connect page lists only Oracle, SAP, NetSuite, and Ellucian as named pre-built connectors — Sage Intacct does not appear among them. …

Limitations: No public documentation confirms that JAGGAER's Sage Intacct connection carries the full dimension string (Location, Department, Class, Project, Customer, and custom dimensions) at the line-item level, or that dimension lists are dynamically synced from Intacct into JAGGAER's coding UI. …

Requirement evaluated: Support for Sage Intacct dimensions: Location, Department, Class, Project, Customer, and custom dimensions

For a multi-location services company running two Sage Intacct entities, Tipalti's native Intacct integration handles cost-allocation coding (pre-processing journey stage 5) directly inside its bill-processing interface. The five named standard dimensions, Department, Class, Location, and Project, are explicitly documented as fields that sync from Intacct to Tipalti and are required to be populated before payment sync completes; Tipalti's Setup article names all four and requires default values to be configured for each. …

Limitations: Intacct user-defined dimensions do not auto-discover into Tipalti; each UDD must be manually configured as a custom field by an administrator using the UDD's integration name in Tipalti, meaning any new custom dimension added in Intacct after go-live requires a corresponding setup step in Tipalti before it becomes avai …

Requirement evaluated: AI/OCR-powered extraction from PDF, image, and email-embedded invoices with 95%+ accuracy on header and line-item data

For a 3-person AP team processing 1,800 invoices per month across mixed PO and non-PO categories, JAGGAER offers a native module called Digital Capture, embedded inside JAGGAER One Invoicing. Embedded technology in JAGGAER One Invoicing captures data from invoice documents using OCR (digitization), and suppliers can submit invoices via email to trigger automated processing. JAGGAER Digital Capture enables customers to automatically import invoices from a wide range of sources, such as email, scanners, and FTP. The platform advertises no-touch invoice capture via machine learning. …

Limitations: The most material limitation for this buyer is the documented mandatory manual review of every line item on non-PO invoices within the native Digital Capture module: with 45% of volume being non-PO, a significant share of the 1,800 monthly invoices will not achieve touchless line-item extraction regardless of document …

Requirement evaluated: AI/OCR-powered extraction from PDF, image, and email-embedded invoices with 95%+ accuracy on header and line-item data

For a $120M multi-location services company currently keying 1,800 invoices per month by hand, Tipalti addresses the invoice capture requirement through its AI Smart Scan module and a named Invoice Capture Agent. Invoices arrive via a configurable AP email inbox, direct upload, or supplier portal submission; supported upload formats include PDF, images (JPEG, JPG, BMP, PNG, and TIFF), and both your team and your payees can submit invoices via email. …

Limitations: Tipalti's own content states that while legacy OCR operates at 85-90% accuracy, modern AI solutions can achieve 99% accuracy over time, but this high rate relies on a human-in-the-loop model where the AI flags low-confidence data for human verification. …

Requirement evaluated: PO templates for recurring purchases (monthly facilities services, quarterly IT maintenance)

For a $250M technology company running monthly facilities services POs and quarterly IT maintenance POs today via manual NetSuite entry, JAGGAER ONE's PO Management module supports recurring purchases through two complementary mechanisms. First, blanket/standing orders: procurement configures a master agreement tied to a vendor, with pre-populated line items, GL codes, and spend limits; JAGGAER ONE supports automated PO generation, approval workflows, recurring and pre-specified purchases, and blanket orders within its PO management module, rated at 90 by independent analysts. …

Limitations: There is no publicly documented evidence of fully automated, zero-user-touch scheduled PO generation (e.g., the system autonomously emitting a monthly facilities PO on the 1st of each month without any user action); both mechanisms identified require a user to either trigger a release or copy a prior cart, meaning the …

Requirement evaluated: PO templates for recurring purchases (monthly facilities services, quarterly IT maintenance)

For a $250M technology company looking to eliminate manual monthly and quarterly PO re-creation for facilities and IT maintenance, Tipalti Procurement operates at the upstream requisition-to-PO stage and offers two relevant mechanisms. First, the platform supports customizable PO templates: automated PO creation should offer pre-approved, customizable templates to create purchase orders, and the system automatically populates POs with data from purchase requisitions, vendor catalogues, or historical transactions to reduce manual entry. …

Limitations: The buyer's specific need, auto-generating POs on a monthly cadence for facilities services and a quarterly cadence for IT maintenance without manual re-initiation each cycle, is not documented as a native capability. …

Requirement evaluated: Tail spend analysis: identify high-transaction-count, low-dollar vendors for consolidation

For a $250M technology company with 800+ active vendors and 35% maverick spend, JAGGAER's dedicated Spend Analytics module (part of JAGGAER ONE) directly addresses tail spend identification through a multi-dimensional spend cube. The Data Insights module provides an aggregated spend view across dimensions including category, organization, geography, and suppliers, with an interactive drill-down model to identify insights and the ability to define opportunity scenarios with flexible simulation. On the analytics side, machine learning and natural language processing automatically classify and enrich transactions, delivering greater accuracy and faster insight generation. …

Limitations: The documented mechanism is primarily a configurable spend cube and dashboard environment rather than a named, out-of-the-box "transaction count vs. dollar value" scatter plot report; buyers should confirm during demos that the pre-built views segment vendors specifically by transaction frequency thresholds, not just t …

Requirement evaluated: Tail spend analysis: identify high-transaction-count, low-dollar vendors for consolidation

Your company's goal of rationalizing 800+ active vendors down to fewer than 300 requires a report that surfaces vendors with high transaction counts but low aggregate spend: a classic tail spend quadrant. Tipalti Procurement's 'Spend Analytics and Insights' module consolidates spend data from purchases, receipts, suppliers, and contracts into a real-time dashboard where users can filter on custom fields to produce custom spend reports segmented by vendor and category. The procurement software lets you filter data and custom fields to obtain a customized spend report, and in Tipalti AP automation your business can view spending data by vendor and category. …

Limitations: There is no documented pre-built tail spend scatter plot or transaction-frequency-vs.-spend-volume quadrant report: your CFO cannot simply open a 'tail spend' screen and see which of the 800+ vendors are high-volume/low-dollar candidates for consolidation. …

Requirement evaluated: Guided buying experience: search shows preferred/contracted options first with savings vs. off-contract alternatives

For a $250M technology company replacing ad-hoc email/Slack purchasing with a structured system, JAGGAER's eProcurement module delivers this requirement through two interlocking mechanisms. First, the Guided Buying layer intercepts demand at the point of request: guided buying steers users toward the best available purchasing option, with AI comparing the request against existing contracts, preferred suppliers, and negotiated pricing, then recommending compliant options such as approved SKUs or framework agreements, making the right choice the easiest one to take. …

Limitations: Web search evidence confirms negotiated price visibility and preferred-supplier prioritization at search time, but explicit documentation of a per-item "you save $X vs. off-contract" savings callout in the UI was not found; the price comparison is achieved through simultaneous display of contracted vs. …

Requirement evaluated: Guided buying experience: search shows preferred/contracted options first with savings vs. off-contract alternatives

Your company is coming from a zero-system baseline where 35% of spend is maverick, so the core ask is an active search experience that steers employees to contracted vendors with visible cost justification. Tipalti Procurement's intake-management module addresses part of this: its AI layer can 'recommend or automatically select preferred suppliers based on historical data, pricing, performance metrics, and predefined business rules' during the purchase request flow, and suppliers can self-upload their catalogs and pricing into the platform so intake requests are matched to pre-approved suppliers. …

Limitations: Tipalti's mechanism is AI-assisted preferred supplier recommendation during intake form completion, not a consumer-style catalog search with explicit on-contract vs. …

Requirement evaluated: Simple receipt confirmation workflow: designated receiver confirms delivery with quantity, condition, and date

For a $250M technology company moving off email-based receiving, JAGGAER ONE's Invoicing module includes a dedicated receiving workflow that is PO-bound by design. A designated user navigates to a purchase order and selects 'Create Quantity Receipt' or 'Create Cost Receipt' from the Document Actions menu; the receipt is automatically populated with the PO information, including the remaining number of items to be received. The user enters the quantity received per line and logs the delivery date, and can flag individual lines as Received, Returned, or Cancelled to capture condition outcomes. …

Limitations: The native receipt form captures quantity, delivery date, and line-level status (Received/Returned/Cancelled), but a dedicated free-text 'condition notes' or photo-attachment field is not explicitly documented in JAGGAER's help center; condition issues are handled by marking lines as Returned rather than via a named co …

Requirement evaluated: Simple receipt confirmation workflow: designated receiver confirms delivery with quantity, condition, and date

For this $250M technology company coming from a manual email/Slack approval environment, Tipalti Procurement does include a goods receipt confirmation step that feeds a true 3-way match (PO + GR + invoice). The mechanism works as follows: once a PO is issued, Tipalti captures item receipts 'on auto-pilot' by prompting users to log Goods Received directly in the platform or via email at the right moment, with item statuses automatically updated to facilitate the 3-way PO match. …

Limitations: The receipt confirmation step is tied to the requester role, not a separately designated physical receiver, which collapses the separation of duties the buyer needs (requestor vs. receiver) and reduces the control value for verifying actual delivery condition. …

Requirement evaluated: Automatic escalation: if approver has not acted within 48 hours, escalate to their manager with notification

For a $120M multi-location services company moving off manual email-chain approvals, JAGGAER's configurable approval workflow engine handles this requirement within its Invoicing and eProcurement modules. JAGGAER explicitly documents that escalation for stalled approvals is supported alongside delegation, parallel routing, and sequential routing: when an approver has not acted within a defined period, the system automatically escalates and notifies the appropriate next-level approver. …

Limitations: No publicly documented specification for a minimum-configurable timeout interval (e.g., whether 48 hours is a supported threshold or whether the platform enforces a coarser granularity such as 1-day or 2-day increments) was found; the buyer should confirm 48-hour precision during a demo or contract negotiation. …

Requirement evaluated: Dual approval requirement for all capital expenditures regardless of amount

For a 3-person AP team at a $120M services company needing a compliance-grade dual-approval rule on all capital expenditure invoices, Tipalti operates at stage 4 of the pre-processing journey (approval routing) through two distinct modules. In the Bills module, which handles your 45% non-PO volume, multi-approver sequential chains are supported: once a bill is coded and submitted, each approver in the sequence receives an email notification and the bill only advances to 'Pending payment' status after the last approver in the chain signs off (Tipalti help center: 'How to approve bills via email'). …

Limitations: The buyer's requirement is that the dual-approval rule fires for every capex invoice regardless of amount, including small-dollar equipment or fixed asset purchases; without a documented GL-account-based or capex-category-based policy rule in the Bills module, enforcement depends on AP staff manually assigning two appr …

Requirement evaluated: Vendor performance visibility: on-time payment rate, average payment cycle, dispute frequency

For a $120M multi-location services company running 1,800 invoices per month across two Sage Intacct entities, JAGGAER's relevant mechanism spans three modules rather than a single AP-side vendor performance dashboard. The Spend Analytics module offers the closest match to on-time payment monitoring: 65+ pre-built Tableau dashboards cover spend, savings, supplier, and category performance, and the module explicitly tracks payment-term adherence and off-contract leakage. …

Limitations: No documented mechanism delivers all three buyer-required metrics (on-time payment rate, average payment cycle, dispute frequency) as calculated, per-vendor historical analytics in a single AP-oriented view; the closest capabilities are spread across Spend Analytics (payment-term adherence), JAGGAER Pay (real-time paym …

Requirement evaluated: Vendor communication log: track every inquiry and response to eliminate the 6 hours/week our team spends on status calls

For a 3-person AP team fielding non-stop vendor status calls across 1,800 invoices monthly, Tipalti's primary mechanism is the Supplier Hub, a self-service portal where each vendor can log in at any time to view their invoice history, invoice status, and payment history without contacting AP directly. Suppliers receive proactive, branded email notifications when payments are sent, updated, or when additional information is needed to process a payment, covering intermediate workflow milestones rather than just final payment confirmation. …

Limitations: The Supplier Hub eliminates most inbound status calls by giving vendors 24/7 self-service visibility into invoice and payment status, but does not appear to include an in-portal messaging center or structured inquiry log where vendors submit questions and AP responds in a tracked, auditable thread. …

Requirement evaluated: Approval bottleneck analysis: which approvers are slowest, which invoice types take longest

For a 3-person AP team currently flying blind on email-chain approvals across 1,800 invoices per month, JAGGAER offers two overlapping mechanisms that address approval bottleneck visibility, but neither delivers the full per-approver, per-invoice-type breakdown the buyer describes. First, the JAGGAER Invoicing module documents 'complete visibility into bottlenecks' alongside exception routing, meaning AP staff can see where invoices are stalled in the approval queue in real time. …

Limitations: The buyer's requirement specifically asks for ranked approver slowness and invoice-type cycle time as structured, reportable dimensions; JAGGAER's documented bottleneck visibility operates primarily at the exception and backlog level through JAI queries and workflow exception routing, not as a named, pre-built approver …

Requirement evaluated: Export to Excel and scheduled report delivery to Controller and CFO

For your 3-person AP team reporting to a Controller and CFO across two Sage Intacct entities, Tipalti provides a structured reporting layer with multiple pre-built report categories (payment reports, bill reports, payee reports, tax reports, and user reports) plus an AI Report Builder that generates custom reports from natural language prompts. The AI Report Builder, documented in Tipalti's official blog and product pages, lets a user type a plain-language query, refine columns and filters, save the report, and download it for deeper analysis; the Reporting Agent is also described as generating 'real-time spend or payment reports from natural language prompts.' A G2 reviewer who has used the …

Limitations: The confirmed export format from Tipalti's official help center documentation is CSV, not .xlsx; if the Controller's month-end close workbooks depend on native Excel formatting or formula-linked templates, CSV delivery may require an extra conversion step. …

Requirement evaluated: Virtual card program with rebate revenue; we want to shift 30%+ of spend to virtual card

Your team currently runs bi-weekly check runs and monthly ACH batches with no virtual card revenue; JAGGAER Pay is the payment module within JAGGAER ONE that directly targets this shift. When an invoice clears approval, JAGGAER Pay uses data analytics and AI to automatically route the payment to a rebate-generating method: first a single-use virtual card, then Premium ACH, then check, based on each supplier's acceptance profile. JAGGAER states it 'turns routine payments into revenue by using data analytics and AI to automatically shift spend to rebate-generating methods like virtual cards and premium ACH,' with supplier enablement fully managed on the buyer's behalf to drive adoption. …

Limitations: Published rebate rates and specific spend-shift percentages achievable for a $120M services company are not disclosed publicly; actual rebate economics depend on supplier mix, card acceptance rates among your subcontractors and utilities vendors, and the terms negotiated at contract time with JAGGAER Pay. …

Requirement evaluated: Payment reconciliation with automatic journal entries back to Sage Intacct

For a 2-entity Sage Intacct environment processing 1,800 invoices per month, Tipalti's prebuilt API integration handles payment reconciliation as a configurable, automated writeback: once a payment is executed in Tipalti, the integration pushes a bill payment record directly to Sage Intacct in real time, closing the open bill in the AP subledger without any manual import or file upload. …

Limitations: Sync health depends on subsidiary and AP account alignment between both systems: Tipalti's troubleshooting documentation notes that mismatches between the entity's AP account on the bill and the payment will cause the payment sync to fail, so initial setup requires careful entity mapping across the buyer's 2 Intacct en …

Requirement evaluated: SOC 2 Type II certification for the platform

For a $250M technology company with CFO-level compliance scrutiny, JAGGAER meets the SOC 2 Type II bar at the platform level. JAGGAER's own solutions and Procure-to-Pay pages explicitly list 'SOC 2 Type II audited' as a security credential alongside ISO 27001, applying to the JAGGAER One suite. Their dedicated certifications page confirms the SOC 2 report evaluates controls across Security, Availability, and Confidentiality using the AICPA's Trust Services Criteria, and that the report is available on request to prospects who sign an NDA and to existing customers under their agreements. …

Limitations: The publicly available documentation does not enumerate which specific modules are in scope for each SOC 2 audit period; buyers should request the current report under NDA during due diligence to confirm that the procurement modules they intend to deploy (e.g., eProcurement, Supplier Management, Invoicing) …

Requirement evaluated: Role-based access control with entity and department-level restrictions

For a 450-person, multi-office company moving off email and Slack approvals, Tipalti's Team management (Tipalti Hub > Administration) lets admins assign predefined roles or build custom roles by selecting individual permissions. The same screen sets which entities each user can view and manage bills for (Tipalti Help Center, Team management). Entity access is therefore a real per-user restriction, and multi-entity AP runs in one system with consolidated visibility rather than separate tenants (fact sheet fc91de66, e39afbb4). …

Limitations: I found no documentation that a user can be limited to specific departments or cost centers when viewing or editing spend, or that NetSuite department and subsidiary segments drive those permissions. …

No public documentation covering this requirement was found on the documentation sources this vendor publishes. That is a limit of the public evidence, not a finding about the product.

Requirement evaluated: Approved POs push to NetSuite automatically; payment status syncs back

For your move from email and Slack approvals plus manual PO keying in NetSuite, JAGGAER eProcurement uses prebuilt connectors in JAGGAER Link, which JAGGAER says lets approved purchases write back to your ERP, with NetSuite on the named connector list. Under the hood, JAGGAER's integration documentation lists a Purchase Order Export (including PO changes) to the client ERP system, plus a Purchase Order Status import for closed or canceled orders. For payment status, the JAGGAER Indirect API includes a method that imports updated invoice payment status (In Process, Payable, Paid, or Cancelled) and payment details. …

Limitations: The public material does not give a NetSuite-specific field map or confirm whether the NetSuite connector uses the same export and status-import calls as the generic API document. …

Requirement evaluated: Budget data pulled from NetSuite for real-time budget enforcement

For a company that now approves purchases over Slack and email and has an ops person key POs into NetSuite, Tipalti Procurement adds a front-end intake and approval layer. Employees submit purchase requests on custom forms, and rules route them to approvers. Approved requests generate POs automatically in NetSuite, and the budget status is synced from NetSuite to Tipalti so approvers can make informed purchasing decisions. In Elite plan subscriptions, approvers can also view budget vs. actual from within the approval flow. Routing logic can be tied to budget lines, and budget data is shown to approvers in real time. …

Limitations: Tipalti documents budget status being synced from NetSuite and shown to approvers, but I found no documented hard stop that rejects an over-budget request before it becomes a PO. …

Requirement evaluated: Centralized supplier database with self-service onboarding portal: vendors enter their own info, upload W-9, insurance, banking

For a $250M technology company moving away from email-based purchasing and managing 800+ active vendors, JAGGAER's Supplier Management module provides exactly the centralized supplier database and self-service onboarding portal the buyer requires. Vendors receive an invitation and self-register through a dedicated supplier portal: they enter company information, provide tax details, and upload compliance documents without buyer-side manual data entry. …

Limitations: The supplier portal is free to suppliers, but the full Supplier Management and onboarding workflow capabilities sit within JAGGAER's broader source-to-pay platform, so the buyer will need to confirm which specific tier or module covers their required onboarding configuration depth (e.g., custom questionnaires, insuranc …

Requirement evaluated: Vendor deduplication: identify and merge the 800+ vendor records into a clean master list

Your company's immediate need is to retrospectively clean up 800+ NetSuite vendor records that have accumulated without deduplication controls. Tipalti's payee management capabilities address the forward-looking side of this problem but not the retrospective cleanup. On the prevention side, Tipalti validates each new payee's TIN/EIN against IRS records during self-service onboarding through the Supplier Hub: TIN validation verifies the number provided by payees against IRS records, and if it fails, the payee is marked "unpayable" until resolved; the TIN can be an SSN for individuals or an EIN for companies. …

Limitations: Tipalti has no documented mechanism for scanning an existing payee database for duplicate records using fuzzy name, address, or banking-detail matching, and no merge tool to consolidate fragmented transaction history under a master record. …

Requirement evaluated: Automatic routing to the right approver based on category, amount, department, and location

For a $250M tech company currently routing nothing automatically (approvals happen via Slack and email), JAGGAER's eProcurement module fires its configurable approval workflow engine at the purchase requisition stage -- before a PO is ever created -- which directly cuts off the maverick spend path the buyer's CFO identified. Approval workflows in JAGGAER route purchase requisitions and orders to the right approvers based on rules you define: spend amount, department, supplier, commodity category, or any combination. …

Limitations: Separate-per-BU workflow routing requires JAGGAER to enable the Multiple Business Unit feature during implementation -- it is not self-serve out of the box -- so the buyer should confirm this is scoped into their implementation engagement for all five locations. …

Requirement evaluated: Mobile submission capability; our field team needs to submit requests from job sites

For this $250M technology company whose field team needs to originate purchase requests from job sites, Tipalti's procurement intake sits in the web-based Tipalti Hub. Employees fill out customizable intake forms in the Hub to submit purchase requests, and the system routes them through automated approval workflows. Tipalti does publish a native mobile app, but that app is scoped specifically to expense management (the 'Tipalti Expenses' app on iOS and Android, documented in help.tipalti.com): it handles post-purchase receipt capture and expense reimbursement, not pre-purchase requisition creation. …

Limitations: The Tipalti Expenses mobile app covers post-purchase reimbursement workflows, not pre-purchase procurement requests; using it as the 'mobile' solution for field requisition intake would perpetuate the maverick spend problem the buyer is trying to solve. …

Requirement evaluated: SSO integration with Microsoft Azure AD

For a multi-location services company whose AP team and internal approvers authenticate via Microsoft Azure AD, JAGGAER ONE supports federated SSO by accepting Azure AD (Microsoft Entra ID) as an external identity provider. JAGGAER ONE allows organizations to integrate their own identity provider via standardized authentication protocols: SAML or OpenID Connect, for seamless single sign-on to the JAGGAER solution. At the configuration level, the buyer's IT administrator registers JAGGAER as an enterprise application in Azure AD and exchanges metadata; JAGGAER then acts as the SAML/OIDC service provider (SP), deferring all credential validation to Azure AD. …

Limitations: Only SP-initiated SSO is supported, meaning users must navigate to the JAGGAER URL first rather than launching it from the Azure AD MyApps portal tile, which is a minor UX gap but does not affect centralized identity governance. …

Requirement evaluated: Data encryption at rest and in transit

For a multi-location services company moving invoice and payment data through an AP platform, Tipalti protects financial information at two layers. For data at rest, Tipalti's published security documentation explicitly states it uses AES-256 encryption to safeguard stored data, covering personal information, payment details, and banking records held on its AWS-hosted infrastructure. For data in transit, Tipalti's official Data Processing Addendum (a contractual document, not marketing copy) …

Limitations: Tipalti's published documentation names AES-256 and TLS as the encryption standards in use but does not publicly disclose whether customer-managed encryption keys (CMEK) …