Procurement outsourcing: what to outsource, what to keep and how to stay in control

Procurement outsourcing means hiring a company to run part of the procurement process for you: quoting, issuing purchase orders, supplier follow-up, master data, invoice matching. What you outsource is execution. The decision about what to buy, from whom and under which rules stays with the company.

Outsource execution and you gain capacity without hiring. Outsource the decisions and you lose control of spend and, before long, of the supplier itself. This article separates the two: what to hand over by step and category, what never leaves the building, the risks, the KPIs, the comparative cost and the transition. The commercial view, when it pays and what it costs in Brazil, is on our procurement outsourcing page.

What procurement outsourcing is

Three different arrangements go by the same name. It is worth separating them, because contract, risk and price change with each.

Staff augmentation. The provider places analysts inside your process and your tools. They quote and issue POs in your ERP, just as an employee would. It is the fastest fix for a shortage of hands. The cost is payroll plus the provider's margin, and it grows with volume.

Procurement BPO (business process outsourcing). The provider takes over the process, with its own team, method and service-level agreement. It charges per FTE (the equivalent of one full-time professional) or per bundle of transactions. The operation usually runs on the provider's systems, with periodic reporting. This is the traditional procurement outsourcing model.

Project-based consulting and sourcing. A specialist leads a negotiation or category review and delivers the result. It is not outsourcing the operation; it is capacity for a fixed period.

In recent years a fourth arrangement has appeared, combining the first two with automation: AI agents run the routine inside the ERP and a lean team of specialists handles negotiation and exceptions. This article calls it a digital team.

In Deloitte's 2024 Global Outsourcing Survey, 83% of executives already use AI within outsourced services, but only 25% report lower cost or better quality, and 70% have brought some previously outsourced scope back in-house over the past five years. Outsourcing without criteria is reversible, but it is expensive both ways.

What makes sense to outsource, by step and by category

The right question is not "outsource procurement or not." It is "which step, for which category."

By step: requisition, quoting, negotiation, PO issuing, delivery follow-up, invoice matching, master data and contracts. The middle steps are repetitive, rule-based and measurable: they are the first candidates. Negotiation and contracts depend on context and relationships.

By category: what goes into the product (raw materials and critical items) has few suppliers, long contracts and a direct impact on production. What keeps the operation running (MRO, facilities, services, IT) has many suppliers, small orders and little negotiation. That is the tail of spend, which CIPS defines as the 10% to 20% of spend that accounts for 80% of suppliers. How to find that tail in the ERP, including the C curve of the ABC classification Brazilian ERPs already use, is covered on our tail spend page.

Crossing the two axes:

Step	Raw materials and critical items	Indirect and tail spend (C curve)	Recurring services
Requisition and approval	Keep	Keep (approval limits are yours)	Keep
Quoting	Keep or partial	Outsource	Outsource
Negotiation	Keep	Outsource with approval-limit rules	Partial: renewals yes, new contracts no
PO issuing	Partial, with a double check	Outsource	Outsource
Follow-up and delivery	Outsource	Outsource	Outsource
Invoice matching and master data	Outsource	Outsource	Outsource
Supplier qualification and contract management	Keep	Partial: records yes, decisions no	Keep

Read the matrix as a starting point. A manufacturer with a single resin supplier keeps even the follow-up on that item in-house. A chain with two thousand building-maintenance suppliers can outsource almost the entire middle column. Three criteria help case by case:

1. Volume per rule. The more orders follow the same rule (item, ceiling, supplier list), the better the step lends itself to outsourcing and automation.
2. Cost of error. If a wrong PO stops the plant, the step stays in-house or gets a double check. If it costs a reissue, it can go.
3. Knowledge outside the system. If the purchase depends on knowing that supplier B runs late in December, and that is not recorded anywhere, the provider will get it wrong. Record it first, or keep the step.

What never leaves the building

Three things stay in-house under any model, because handing them over transfers control of spend to someone whose incentives differ from yours.

Procurement policy. Who can buy, what, up to how much, from whom, with how many quotes, on what payment terms. It is the rule the provider executes. If it does not exist in writing, the provider writes its own, and the company finds out at the first audit.

Approval limits. Approving an order above a certain value, or outside the standard, is a decision for the company's manager. The provider prepares, quotes and issues within the limit; it does not approve exceptions. This matters even more when part of the execution is software: an agent that negotiates within the rule is useful; an agent that approves its own exception is a control risk.

Critical suppliers. Single-source raw materials, regulated inputs, contracts with high penalties, licensed technology. The relationship with these suppliers is a company asset. The provider can handle POs and follow-up; negotiation, qualification and the decision to switch stay with whoever answers for production.

There is a fourth item: the data. PO history, prices paid, master data and contracts stay in your ERP, or at least exportable at any time. If the operation runs on the provider's portal and spreadsheets, three years of history belong to them, and when you switch providers the company starts from scratch.

Risks: labor, compliance and dependency

Labor risk

Since 2017, outsourcing any activity has been lawful in Brazil. Law 13,429/2017 and the labor reform amended Law 6,019/74, which now defines the contracting party as one that hires services "related to any of its activities, including its core activity" (art. 5-A). In August 2018, Brazil's Supreme Federal Court (STF) settled the question: ruling on ADPF 324 and RE 958,252, it decided by seven votes to four that outsourcing is lawful at every stage of the production process, whether a support or a core activity. Procurement, therefore, can be outsourced in full.

Lawful does not mean free of liability. The same law says the contracting party "is secondarily liable for labor obligations relating to the period in which the services are provided" (art. 5-A, § 5): if the provider fails to pay severance, the bill can land on the client. The law also requires the client to ensure safety, hygiene and healthy conditions when work is done on its premises (§ 3), prohibits using the workers in activities other than those contracted (§ 1) and requires a written contract specifying the service, term and price (art. 5-B).

Two practical points for staff augmentation. Subordination: if the company's manager gives direct orders to the allocated analyst, controls their hours and evaluates them like an employee, the arrangement risks being recognized as employment; day-to-day management must belong to the provider. Quarantine: the law prohibits hiring as a provider a company whose partners were employees of the client in the previous eighteen months (art. 5-C), and prohibits a dismissed employee from returning as an outsourced worker before that period (art. 5-D). Turning the in-house buyer into a contractor to cut cost is exactly what this rule prevents.

Compliance and data-protection risk

Procurement handles personal data: taxpayer IDs of individual suppliers, bank details, sales-rep contacts. When you outsource, the company remains the controller of that data, and the provider becomes a processor. Brazil's data-protection law, the LGPD, requires the processor to handle data "according to the instructions provided by the controller" (art. 39), and makes it jointly liable when it breaches the law or those instructions (art. 42, § 1, I). The contract needs clauses on data protection, purpose, retention period and security measures (art. 46). Without them, a leak on the provider's portal is your incident.

The other risk is anti-corruption. If the provider negotiates on your behalf, your integrity policy, whistleblower channel and gift rules apply to it too. Ask for the provider's compliance program, check segregation of duties (whoever quotes does not approve, whoever approves does not pay) and require an audit trail for every PO.

Dependency risk

The third risk is the quietest. After two years, knowledge of the process lives with the provider: which suppliers are good, which items are seasonal, which rule was changed and why. If the contract ends badly, the company cannot operate the next day. The defense is contractual (assisted transition with a set term and price, ownership of data and rules) and technical (operating inside your ERP, so that switching providers means changing who executes, not rebuilding the process).

Governance and provider KPIs

A contract without KPIs becomes an argument about perception. Five measures cover what matters, and all of them come from the ERP.

KPI	What it measures	Negotiation reference
Requisition-to-PO lead time	Days between the approved requisition and the issued PO	A target per category; urgent and routine orders do not share a deadline
Quote coverage	Share of POs, by count and value, that went through price competition	Usually low in the tail; the target is to raise it every quarter
Contract and catalog compliance	Share of spend bought under a valid contract	Off-contract buying means higher prices and compliance risk
Rework	POs canceled, changed or reissued as a share of the total	Measures execution quality, not just speed
Auditable savings	Difference between the price paid and a reference (last price, contract or quote), in reais, per PO	Require the calculation PO by PO, with the reference recorded

The market benchmark shows how far the bar goes. The Hackett Group compares the procurement organizations it calls "Digital World Class" with the rest: they operate with 31% fewer FTEs, 19% lower cost as a percentage of spend and a 58% shorter requisition-to-PO cycle, and lose 60% less savings to off-contract buying. A provider that does not measure these items will not deliver them.

Three governance rules complete the contract:

• A monthly meeting with data, not slides. The provider brings the numbers from the ERP; the company checks them against its own records.
• An internal owner. One person answers for the contract, the policy and the approval limits. Without an internal owner, decisions get outsourced by omission.
• A baseline recalculated every year. First-year savings become the normal price in year two. Without resetting the reference, the provider gets paid twice for the same gain.

Outsource, automate or build a hybrid team with AI

Until recently the choice was binary: hire people or hire a provider. Today there is a third option.

Automating means putting software on the routine: a quoting portal, a catalog with automatic approval, a bot that issues the PO from the approved requisition. It works when the rule is fixed and the item is standardized. It fails at the exception, which is where procurement spends most of its time.

Outsourcing means bringing in outside people to run both routine and exceptions. It absorbs variation, but cost grows with volume, and the tail still goes unquoted, because no human team quotes an R$ 80 item with the attention it gives an R$ 80 thousand one.

A hybrid team with AI, or digital team, is the combination: agents handle quoting, rule-based negotiation and PO issuing in the ERP, and a small group of specialists handles what requires judgment. Unlike traditional automation, the agent deals with language, with a supplier who replies by email, with an item described three different ways. Unlike traditional BPO, capacity does not depend on headcount, so the entire tail gets worked. We compare the options in more detail in procurement bot vs. AI agent.

In practice: a step with a fixed rule, automate it. A staff shortage for six months, bring in staff augmentation. The whole process growing faster than the team, compare traditional BPO and a digital team on cost per order and tail coverage, which is where the two part ways.

Comparative cost: the three models with an example

The example in this section is illustrative: the numbers are hypothetical and show the mechanics, not a forecast of your case.

A mid-sized manufacturer has a six-person procurement team that issues 4,000 POs per year. The fully loaded cost of each person (salary, payroll taxes, benefits and overhead) is R$ 12 thousand per month. The team costs R$ 864 thousand per year, or R$ 216 per PO. Of annual spend, R$ 20 million sits in the tail: small orders, many suppliers, almost no quoting.

The price ranges are those practiced in the Brazilian market and published on our procurement outsourcing page: a dedicated FTE between R$ 15 thousand and R$ 40 thousand per month, and a success fee of 15% to 30% of savings achieved.

	Staff augmentation	Traditional BPO per FTE	Digital team
How it is paid	Per allocated analyst, month by month	Per provider FTE, with SLA	Lean specialists + a fee on savings
Composition in the example	6 analysts × R$ 15 thousand	4 FTEs × R$ 20 thousand	2 specialists × R$ 12 thousand + 25% of savings
Annual cost in the example	R$ 1.08 million	R$ 960 thousand	R$ 288 thousand + fee
Cost per PO (4,000/year)	R$ 270	R$ 240	R$ 72 + fee
How cost evolves	Grows with volume; indexed to payroll	Indexed to payroll year after year	Falls each cycle as routine work leaves the team
Tail coverage	What 6 people can reach	What 4 people can reach	100% of POs, including the C curve
Where it runs	In your ERP	Usually on the provider's systems	In your ERP
Contractual savings	None	Sometimes a savings target in the contract	The basis of the fee

Staff augmentation costs more than the in-house team: it is payroll plus margin. It is for covering a peak or a leave of absence, not a permanent model. Traditional BPO costs a little more than the in-house team in year one, and the difference is what comes with it: method, SLA, reporting. On the other hand, the price is indexed to payroll every year, and tail coverage is limited to four people.

The digital team needs the second half of the math. Suppose the agents work the R$ 20 million tail and achieve a 4% price reduction: R$ 800 thousand in savings. A 25% fee on that is R$ 200 thousand. Total annual cost comes to R$ 488 thousand, or R$ 122 per PO, and the company ends up R$ 600 thousand ahead, net. If the savings do not come, the fee is not charged, and cost stays at the R$ 288 thousand for the specialists. The 4% is only a hypothesis; the honest way to check it is to measure price dispersion in your own tail before signing.

Two caveats. First, below a certain volume the in-house team beats them all: with 800 POs per year and two people, no outsourced model pays back the transition cost. Second, cost per PO measures efficiency, not results. What changes cash is auditable savings, and those only appear where there is quoting. That is why the tail-coverage row weighs more than the cost row.

For an estimate with your own numbers, start with the tail spend estimate on our procurement page.

How to make the transition

The transition takes two to four months, and it is where most contracts go wrong. A sequence that works:

1. Measure the starting point. Pull twelve months of POs from the ERP: volume, value, suppliers, lead time, share quoted, share under contract. Without a baseline, no KPI means anything.
2. Write the policy. Approval limits, quotes per value band, qualified suppliers per category, exceptions and who approves them. If the policy lives only in the manager's head, it is time to get it out.
3. Define scope by step and category. Use the matrix above. Start with what has the most volume per rule and the lowest cost of error: quoting and issuing for indirect items, follow-up, invoice matching.
4. Sign with the KPIs on paper. The five in the table, with formula, data source and frequency. Include clauses for LGPD data protection, audit rights, data ownership and assisted transition at exit.
5. Run in parallel for one cycle. For four to eight weeks, the provider executes and the in-house team checks a sample. Errors show up here, while they are still cheap.
6. Redeploy the team. People freed from routine move to category negotiation, critical suppliers and contracts. Outsourcing done well does not eliminate the team; it changes what the team does.
7. Recalculate the baseline every year. First-year savings become the reference price for year two.

A common mistake is outsourcing and letting the team go in the same month. The provider loses the people who know the process, and the company loses the people who would check the results.

Frequently asked questions

What is procurement outsourcing?

Procurement outsourcing is hiring an external company to run steps of the procurement process, such as quoting, PO issuing, follow-up and supplier master data. In Brazil the term "outsourcing" is often used when the service includes the provider's method and KPIs, not just staff. In any variant, policy, approval limits and critical suppliers stay with the client.

What are the types of procurement outsourcing?

There are three traditional types and one newer one. Staff augmentation: the provider's analysts work in your process and your tools. Procurement BPO: the provider takes over the operation with its own team, method and SLA, charging per FTE or per transaction. Project-based consulting: a specialist leads a negotiation or category review over a set period. The fourth is the digital team: AI agents run the routine inside the ERP and lean specialists handle negotiation and exceptions.

How much does it cost to outsource procurement in Brazil?

In Brazil, the dedicated-FTE model runs between R$ 15 thousand and R$ 40 thousand per month per professional, depending on seniority and scope. Outcome-based models charge a success fee of 15% to 30% of proven savings. To compare proposals, divide the annual cost by the number of POs and look at coverage: a cheaper contract that leaves the tail unquoted can cost more by year end. Below a certain volume, a small in-house team is cheaper than any outsourced option. Our procurement BPO cost guide walks through each pricing model.

Is procurement outsourcing allowed under Brazilian labor law?

Yes. Since Law 13,429/2017 and the labor reform, Law 6,019/74 allows outsourcing any company activity, including the core one, and in 2018 Brazil's Supreme Federal Court confirmed that outsourcing core activities is lawful, ruling on ADPF 324 and RE 958,252. The client remains secondarily liable for labor obligations during the contract, must ensure safety and hygiene when work happens on its premises, and cannot hire as a provider a company formed by former employees dismissed less than eighteen months earlier.

What should never be outsourced in procurement?

Procurement policy, approval limits and relationships with critical suppliers. The policy is the rule the provider executes; if the provider writes it, the provider controls spend. Approval limits are the decision to approve exceptions, and that belongs to whoever answers for the result. Single-source raw materials, regulated inputs and licensed technology are company assets, and negotiation with those suppliers stays in-house, as does process data, which should remain in the ERP or be exportable at any time.

Should I outsource or automate procurement?

It depends on what is stuck. If a step has a fixed rule (approval, catalog, follow-up), automation solves it at lower cost and risk. If the pain is a staff shortage for a period, staff augmentation solves it quickly. If the whole process is growing faster than the team, the comparison is between traditional BPO and a digital team, on cost per order and tail coverage. The most efficient models combine both: software runs the routine, people decide the exceptions.

How UpFlux does it

UpFlux takes over the transactional work of procurement with a digital team: AI agents operated by specialists handle quoting, rule-based negotiation and PO issuing inside TOTVS Protheus, Datasul or SAP, while lean specialists handle exceptions and critical suppliers. Policy, approval limits and decisions stay with the client, with an audit trail for every PO and a live cockpit. At a multinational manufacturer, R$ 22 million processed in the long tail returned R$ 1.6 million to cash, with no new hires. The new procurement BPO covers 100% of the flow, including the C curve, with a cost that shrinks each annual cycle as the agents absorb the routine.