- The buyer requires independently verified security and compliance evidence (SOC 2 Type II report, ISO certificates, pen-test summaries) and the vendor cannot provide these for supernova.ai.
- The organization requires deep, code-first customization (complex, reproducible transformations, Git-based workflows, advanced attribution) and prefers in-house engineering control over all data modeling.
- The data to be processed is subject to strict regulatory requirements (HIPAA, PCI) and the vendor does not provide contractual support or documentation to meet those obligations.
- The buyer requires guaranteed connector SLAs (for example, defined fix windows) and the vendor’s connector maintenance model is unclear.
- The organization expects a large, demonstrable community ecosystem (public plugins, dbt packages) that is not evidenced publicly for supernova.ai.