- When independently verified security certifications are required
- If procurement requires SOC 2 Type II or ISO 27001 evidence during vendor selection, CartDigi’s publicly available materials do not document these certifications. Procurement teams should require auditable evidence before selection.
- When full transparency before initial contact is required
- Organizations that require self-serve trials, public pricing, and extensive online documentation may find CartDigi’s public materials oriented toward quote-based engagement and direct contact.
- When broad third-party review validation is necessary
- If vendor selection depends on review volume from platforms such as G2, TrustRadius, or Gartner Peer Insights, CartDigi has limited visible presence on those platforms, making independent validation more difficult.
- When cloud-first architecture and published controls are mandatory
- CartDigi’s public materials did not clearly describe cloud hosting options, SSO/SCIM, or modern identity controls in the reviewed sources. Organizations requiring a cloud-first solution with published control documentation should evaluate vendors that provide detailed cloud architecture and security documentation.
- Current limitations acknowledged by the vendor
- No explicit public "known issues" page or published roadmap items were located in the reviewed sources.
- Roadmap / future features
- No publicly detailed roadmap was found in the accessible vendor pages.
- Scale limitations
- Not publicly documented.
- Security or compliance gaps
- LGPD documentation is present, but:
- Security certifications (SOC 2/ISO) are not publicly documented
- Enterprise identity features (SAML/SSO, SCIM), encryption details, audit log scope, and hosting architecture are not clearly published
- API limitations / integration constraints
- Not publicly documented.