Designed an on-demand company enrichment system for TenderScope that discovers and evaluates public company contact information only when a profile is requested. The architecture uses cache-first processing and job deduplication, with controlled web extraction through Crawl4AI/Playwright, structured JSON-LD extraction, and Trafilatura fallback. Every candidate result preserves provenance and confidence for review instead of automatically treating discovered contacts as verified. Security controls include SSRF protection, robots.txt compliance, restricted network access, and evidence tracking. Architecture and read-only pilot completed. Production activation is gated behind final validation.