R-010-001 Suppliers evaluation 2023_002

• Governed by GP-010 Purchases and suppliers evaluation
• Comes from template T-010-001
• Date: 20230817

Supplier verification

#	Code	Name	Type	Score	Required score	Approve
1	S-AMA	Amazon Web Services	Critical supplier	13	8	✅
2	S-ATL	Atlassian	Critical supplier	11	8	✅
3	S-GOO	Google Workspace	Non-critical supplier	12	6	✅
4	S-PSC	PS Consulting	Non-critical supplier	8	6	✅
5	S-AUD	Audens	Non-critical supplier	8	6	✅
6	S-STR	Stripe	Non-critical supplier	12	6	✅
7	S-BER	Berba Translation	Non-critical supplier	9	6	✅
8	S-LAW	Lawesome	Non-critical supplier	8	6	✅
9	S-HUB	HubSpot	Non-critical supplier	12	6	✅
10	S-HOL	Holded Technologies	Non-critical supplier	9	6	✅
11	S-FAC	Factorial	Non-critical supplier	11	6	✅
12	S-SLA	Slack	Non-critical supplier	12	6	✅
13	S-APO	Apotech Consulting	Non-critical supplier	10	6	✅
14	S-BSI	BSI	Non-critical supplier	8	6	✅
15	S-MIC	Microsoft	Critical supplier	13	8	✅

S-AMA

• Name Amazon Web Services
• Type Critical supplier
• Final score: 13

Criteria	Parameters	Value	Score	Comments
Quality of services	Prior experience with this supplier Customer reviews in Trustpilot.com Market penetration	7	1	Prior experience with this supplier shows a high degree of quality of the supplier. However, the supplier has a poor rating on Trustpilot. Still, AWS is the leading cloud supplier worldwide and its trusted by the majority of the consumers.
QMS Certification	Observed by looking at the supplier's claims and the mention of the QMS in the license of use.	✅	2	The presence of a certificated quality manage system is evidenced in the supplier's website and also in the constract of license of use in force between.
ISMS Certification	Observed by looking at the supplier's claims and the mention of the QMS in the license of use.	✅	2	The vendor provided an ISO 27001 certificate, that is attached as evidence to this record as S-AMA-ISMS Certification.
Affordable price	Compared to competitors and considering special discounts we may enjoy	9	2	It's quite afforable by all standards, plus they offer un free credits for being an innovative startup
Technical capacity	Capability to provide the services	8	2	They have a wide range of services, including elastic balancing, as well as instances for different processing activities.
Experience	Knowledge and domain on their activity	10	2	They practically invented modern cloud infrastructure services.
International	Presence in the whole world	10	2	They operate in all continents.

S-ATL

• Name Atlassian
• Type Critical supplier
• Final score: 11

Criteria	Parameters	Value	Score	Comments
Quality of services	Prior experience with this supplier Customer reviews in Trustpilot.com Market penetration	5	1	Prior experience with this supplier shows a high degree of quality of the supplier. However, the supplier has a very bad rating on Trustpilot. Still, Atlassian is of the major project management softwares.
QMS Certification	Observed by looking at the supplier's claims and the mention of the QMS in the license of use.	❌	0	They don't seem to have an ISO 9001 certification.
ISMS Certification	Observed by looking at the supplier's claims and the mention of the QMS in the license of use.	✅	2	They do have ISO 27001 certification that is attached as evidence to this record as S-ATL-ISMS Certification.
Affordable price	Compared to competitors and considering special discounts we may enjoy	10	2	We are using the free version and it's enough. When scaling to the paid version, it is still affordable.
Technical capacity	Capability to provide the services	10	2	Atlassian is the only one providing, in the same ecosystem, a task manager, a knowledgebase and a git code repository. This makes it perfect to manage all the lifecycle: requirements (in Confluence), activities (in Jira) and deliverables (in Bitbucket).
Experience	Knowledge and domain on their activity	10	2	They are a long-lived company, one of the most in this space.
International	Presence in the whole world	10	2	They operate in all continents.

S-GOO

• Name Google Workspace
• Type Non-critical supplier
• Final score: 12

	Criteria	Parameters	Value	Score	Comments
Quality of services	Prior experience with this supplier Customer reviews in Trustpilot.com Market penetration	7	1	Prior experience with this supplier shows a high degree of quality of the supplier. However, the supplier has a poor rating on Trustpilot. Still, AWS is the leading cloud supplier worldwide and its trusted by the majority of the consumers.
QMS Certification	Observed by looking at the supplier's claims and the mention of the QMS in the license of use.	✅	2	Google Cloud Platform is certified as ISO 9001 compliant after undergoing an audit by an independent third party.
ISMS Certification	Observed by looking at the supplier's claims and the mention of the QMS in the license of use.	✅	2	They do have ISO 27001 certification.
Affordable price	Compared to competitors and considering special discounts we may enjoy	7	1	It's not expensive and it includes services that, if hired separately from different companies, would add up to triple the price.
Technical capacity	Capability to provide the services	8	2	They have a wide range of services, including elastic balancing, as well as instances for different processing activities.
Experience	Knowledge and domain on their activity	10	2	They practically invented modern cloud infrastructure services.
International	Presence in the whole world	10	2	They operate in all continents.

S-PSC

• Name PS Consulting
• Type Non-critical supplier
• Final score 8

Criteria	Parameters	Value	Score	Comments
Quality of services	Prior experience with this supplier Customer reviews in Trustpilot.com Market penetration	8	2	Prior experience with this supplier shows a high degree of quality of the supplier. The don't have reviews in Trustpilot, but the reviews from companies we know were good. They don't have a huge market penetration, which is expected.
QMS Certification	Observed by looking at the supplier's claims and the mention of the QMS in the license of use.	❌	0	They do not have ISO 13485 certification, but are in the process of ataining it.
ISMS Certification	Observed by looking at the supplier's claims and the mention of the QMS in the license of use.	❌	0	They do not have ISO 27001 certification.
Affordable price	Compared to competitors and considering special discounts we may enjoy	6	1	It's not expensive and it includes services that, if hired from different companies, would increase the price.
Technical capacity	Capability to provide the services	8	2	They have the employees with the technical capcities required to provide the services.
Experience	Knowledge and domain on their activity	9	2	They have demonstrated the required knowledge and experience to provide the services
International	Presence in the whole world	5	1	The operate in Spain only, but they provide services for the European CE Marking

S-AUD

• Name Audens
• Type Non-critical supplier
• Final score 8

Criteria	Parameters	Value	Score	Comments
Quality of services	Prior experience with this supplier Customer reviews in Trustpilot.com Market penetration	8	2	Prior experience with this supplier shows a high degree of quality of the supplier. The don't have reviews in Trustpilot, but the reviews from companies we know were good. They don't have a huge market penetration, which is expected.
QMS Certification	Observed by looking at the supplier's claims and the mention of the QMS in the license of use.	❌	0	They do not have ISO 13485 certification, but are in the process of ataining it.
ISMS Certification	Observed by looking at the supplier's claims and the mention of the QMS in the license of use.	❌	0	They do not have ISO 27001 certification.
Affordable price	Compared to competitors and considering special discounts we may enjoy	6	1	It's not expensive and it includes services that, if hired from different companies, would increase the price.
Technical capacity	Capability to provide the services	8	2	They have the employees with the technical capcities required to provide the services.
Experience	Knowledge and domain on their activity	9	2	They have demonstrated the required knowledge and experience to provide the services
International	Presence in the whole world	5	1	The operate in Spain only, but they provide services for the European CE Marking

S-STR

• Name Stripe
• Type Critical supplier
• Final score 12

Criteria	Parameters	Value	Score	Comments
Quality of services	Prior experience with this supplier Customer reviews in Trustpilot.com Market penetration	8	2	Prior experience with this supplier shows a high degree of quality of the supplier. The don't have reviews in Trustpilot, but the reviews from companies we know were good. They don't have a huge market penetration, which is expected.
QMS Certification	Observed by looking at the supplier's claims and the mention of the QMS in the license of use.	❌	0	They do not have ISO 13485 certification
ISMS Certification	Observed by looking at the supplier's claims and the mention of the QMS in the license of use.	✅	2	They have an equivalent to ISO 27001 certification, called Payment Card Industry (PCI) Data Security Standard.
Affordable price	Compared to competitors and considering special discounts we may enjoy	8	2	It's one of the most afforable solutions, much more than Paypal.
Technical capacity	Capability to provide the services	8	2	They have a wide range of services, including the possibility to allow care providers to charge patients through us.
Experience	Knowledge and domain on their activity	9	2	They are specialised and have years of experience.
International	Presence in the whole world	10	2	They are the payment processor with the largest geographic coverage.

S-BER

• Name Berba Translation
• Type Non-critical supplier
• Final score 9

Criteria	Parameters	Value	Score	Comments
Quality of services	Prior experience with this supplier Customer reviews in Trustpilot.com Market penetration	8	2	Prior experience with this supplier shows a high degree of quality of the supplier. The don't have reviews in Trustpilot, but the reviews from companies we know were good. They don't have a huge market penetration, which is expected.
QMS Certification	Observed by looking at the supplier's claims and the mention of the QMS in the license of use.	❌	0	They do not have ISO 13485 certification
ISMS Certification	Observed by looking at the supplier's claims and the mention of the QMS in the license of use.	❌	0	They do not have ISO 27001 certification.
Affordable price	Compared to competitors and considering special discounts we may enjoy	6	1	It's not expensive and it includes services that, if hired separately from different companies, would add up to triple the price.
Technical capacity	Capability to provide the services	8	2	They have a wide range of services, including elastic balancing, as well as instances for different processing activities.
Experience	Knowledge and domain on their activity	9	2	They are specialised in new technologies, both for GDPR and also other contractual matters.
International	Presence in the whole world	8	2	They support more than 12 languages.

S-LAW

• Name Lawesome
• Type Non-critical supplier
• Final score 8

Criteria	Parameters	Value	Score	Comments
Quality of services	Prior experience with this supplier Customer reviews in Trustpilot.com Market penetration	8	2	Prior experience with this supplier shows a high degree of quality of the supplier. The don't have reviews in Trustpilot, but the reviews from companies we know were good. They don't have a huge market penetration, which is expected.
QMS Certification	Observed by looking at the supplier's claims and the mention of the QMS in the license of use.	❌	0	They do not have ISO 13485 certification
ISMS Certification	Observed by looking at the supplier's claims and the mention of the QMS in the license of use.	❌	0	They do not have ISO 27001 certification.
Affordable price	Compared to competitors and considering special discounts we may enjoy	7	1	They're are experts in big companies and startups, they apply a special price for small companies and comparing the expertise and quality they're one of the most afforable solutions.
Technical capacity	Capability to provide the services	8	2	They have a wide range of services, including financing rounds consultancy, corporate venturing, protection and explotation of innovation.
Experience	Knowledge and domain on their activity	8	2	They are specialised and have years of experience.
International	Presence in the whole world	5	1	The operate in Spain only, but most of it applies to the whole EU.

S-HUB

• Name Hubspot
• Type Non-critical supplier
• Final score: 9

Criteria	Parameters	Value	Score	Comments
Quality of services	Prior experience with this supplier Customer reviews in Trustpilot.com Market penetration	9	2	Prior experience with this supplier shows a high degree of quality of the supplier. They are rated above the media in Trustpilot and our experience working with it is satisfactory. They have a huge market penetration
QMS Certification	Observed by looking at the supplier's claims and the mention of the QMS in the license of use.	❌	0	They do not have ISO 13485 certification
ISMS Certification	Observed by looking at the supplier's claims and the mention of the QMS in the license of use.	✅	2	They do not have ISO 27001 certification, but they are SOC-2 certified, that is the equivalent in the US. The SOC-3 public report of internal controls over security, availability, processing integrity, and confidentiality is archived as evidence.
Affordable price	Compared to competitors and considering special discounts we may enjoy	8	2	We are using the free version and it's enough. When scaling to the paid version, it is still affordable.
Technical capacity	Capability to provide the services	8	2	They connect everything scaling companies need to deliver a best-in-class customer experience into one place.
Experience	Knowledge and domain on their activity	9	2	They have more than 15 years of experience
International	Presence in the whole world	10	2	They operate in all continents.

S-HOL

• Name Holded Technologies
• Type Non-critical supplier
• Final score 9

Criteria	Parameters	Value	Score	Comments
Quality of services	Prior experience with this supplier Customer reviews in Trustpilot.com Market penetration	8	2	Prior experience with this supplier shows a high degree of quality of the supplier. The don't have reviews in Trustpilot, but the reviews from companies we know were good. They don't have a huge market penetration, which is expected.
QMS Certification	Observed by looking at the supplier's claims and the mention of the QMS in the license of use.	❌	0	They do not have ISO 13485 certification
ISMS Certification	Observed by looking at the supplier's claims and the mention of the QMS in the license of use.	❌	0	They do not have ISO 27001 certification.
Affordable price	Compared to competitors and considering special discounts we may enjoy	8	2	Best solution for startups and they're one of the most afforable.
Technical capacity	Capability to provide the services	8	2	Their solution allows us automating tasks and streamlining our accounting and invoicing
Experience	Knowledge and domain on their activity	7	1	They have more than 5 years of experience helping SMEs being more efficient and having more information about their businesses to make better decisions.
International	Presence in the whole world	10	2	They operate in all continents.

S-FAC

• Name Factorial
• Type Non-critical supplier
• Final score 11

Criteria	Parameters	Value	Score	Comments
Quality of services	Prior experience with this supplier Customer reviews in Trustpilot.com Market penetration	9	2	Prior experience with this supplier shows a high degree of quality of the supplier. They are rated above the media in Trustpilot and our experience working with it is satisfactory. They have a huge market penetration.
QMS Certification	Observed by looking at the supplier's claims and the mention of the QMS in the license of use.	❌	0	They do not have ISO 13485 certification
ISMS Certification	Observed by looking at the supplier's claims and the mention of the QMS in the license of use.	✅	2	They do have ISO 27001 certification.
Affordable price	Compared to competitors and considering special discounts we may enjoy	7	1	Best solution for startups and they're one of the most afforable.
Technical capacity	Capability to provide the services	8	2	In addition to automating processes, Fatorial provide us with data with which to grow our company's talent.
Experience	Knowledge and domain on their activity	8	2	More than 5 years of experience
International	Presence in the whole world	9	2	They operate in more than 12 countries

S-SLA

• Name Slack
• Type Non-critical supplier
• Final score 12

Criteria	Parameters	Value	Score	Comments
Quality of services	Prior experience with this supplier Customer reviews in Trustpilot.com Market penetration	9	2	Prior experience with this supplier shows a high degree of quality of the supplier. The supplier has a good rating onTrustpilot, and the reviews from companies we know were good. They have a huge market penetration.
QMS Certification	Observed by looking at the supplier's claims and the mention of the QMS in the license of use.	❌	0	They do not have ISO 13485 certification
ISMS Certification	Observed by looking at the supplier's claims and the mention of the QMS in the license of use.	✅	2	They do have ISO 27001 certification.
Affordable price	Compared to competitors and considering special discounts we may enjoy	8	2	We are using the free version and it's enough. When scaling to the paid version, it is still affordable.
Technical capacity	Capability to provide the services	9	2	It offers a wide range of features and benefits that are useful for us as real-time messaging, channels to organize conversations based on projects, teams or departments, integration with a wide range of other tools, search functionality and mobile access.
Experience	Knowledge and domain on their activity	9	2	They have demonstrated the required knowledge and experience to provide the services
International	Presence in the whole world	10	2	They operate in all continents.

S-APO

• Name Apotech Consulting
• Type Non-critical supplier
• Final score 10

Criteria	Parameters	Value	Score	Comments
Quality of services	Prior experience with this supplier Customer reviews in Trustpilot.com Market penetration	8	2	Prior experience with this supplier shows a high degree of quality of the supplier. The don't have reviews in Trustpilot, but our experience working with them was good. They don't have a huge market penetration, which is expected, but they are growing and assuming more projects.
QMS Certification	Observed by looking at the supplier's claims and the mention of the QMS in the license of use.	❌	0	They do not have ISO 13485 certification
ISMS Certification	Observed by looking at the supplier's claims and the mention of the QMS in the license of use.	❌	0	They do not have ISO 27001 certification.
Affordable price	Compared to competitors and considering special discounts we may enjoy	8	2	They offer an international portfolio of consultancy, in some cases cheaper that their equivalences with other suppliers, in other cases more expensive.
Technical capacity	Capability to provide the services	9	2	They have demonstrated their
Experience	Knowledge and domain on their activity	9	2	They count with a big amount of consultants with demonstrate experience on the different consultancy projects they offer.
International	Presence in the whole world	10	2	They are UK based but they offer services around the world, as Mexico and USA.

S-BSI

• Name BSI
• Type Non-critical supplier
• Final score 7

Criteria	Parameters	Value	Score	Comments
Quality of services	Prior experience with this supplier Customer reviews in Trustpilot.com Market penetration	7	1	We do not have previous experience with this supplier yet. Despite the supplier has a poor rating on Trustpilot, it is worldwide recognized. They have a huge market penetration
QMS Certification	Observed by looking at the supplier's claims and the mention of the QMS in the license of use.	❌	0	They do not have ISO 13485 certification
ISMS Certification	Observed by looking at the supplier's claims and the mention of the QMS in the license of use.	❌	0	They do not have ISO 27001 certification.
Affordable price	Compared to competitors and considering special discounts we may enjoy	4	0	The price is the most expensive in comparison with their competitors, but they offer faster terms.
Technical capacity	Capability to provide the services	8	2	The European Commission has notified that BSI, Notified Body number : 2797, has the technical capacity to provide the services that we require.
Experience	Knowledge and domain on their activity	10	2	They are accredited by different international bodies as: American National Standards Institute - American Society for Quality National Accreditation Board LLC (ANAB); China National Accreditation Service for Conformity Assessment (CNAS); Raad voor Accreditatie (RvA) in the Netherlands; United Kingdom Accreditation Service (UKAS).
International	Presence in the whole world	9	2	They are worldwide recognized as Notified Body

S-MIC

• Name Microsoft
• Type Critial supplier
• Final score 13

Criteria	Parameters	Value	Score	Comments
Quality of services	Prior experience with this supplier Customer reviews in Trustpilot.com Market penetration	6	1	We do not have previous experience with this supplier yet. Despite the supplier has a poor rating on Trustpilot, it is worldwide recognized. They have a huge market penetration
QMS Certification	Observed by looking at the supplier's claims and the mention of the QMS in the license of use.	✅	2	They have ISO 9001 certification
ISMS Certification	Observed by looking at the supplier's claims and the mention of the QMS in the license of use.	✅	2	They do have ISO 27001 and ISO 27018 certifications, and they are SOC 1, SOC 2 and SOC 3 compliant
Affordable price	Compared to competitors and considering special discounts we may enjoy	9	2	We are using the free version and it's enough. When scaling to the paid version, we will review this section.
Technical capacity	Capability to provide the services	9	2	Microsoft GitHub is the only one providing a git code repository that includes a verified signature choice for the commits performed compliant with the 21 CFR part 11. This makes it perfect to manage the QMS documents and records.
Experience	Knowledge and domain on their activity	10	2	They are a long-lived company.
International	Presence in the whole world	9	2	They operate in all continents.

Record signature meaning

• Author: JD-004 María Diez
• Review: JD-005 Alfonso Medela
• Approval: JD-001 Andy Aguilar