Skip to main content

R-010-001 Suppliers evaluation

Governed by GP-010 Purchases and suppliers evaluation
Comes from template T-010-001
Date: 20231018

Supplier verification

#	Code	Name:	Type:	Score	Required score	Approve
1	S-AMA	Amazon Web Services	Controlled Impact Vendor (CIV)	13	8	TRUE
2	S-ATL	Atlassian	Controlled Impact Vendor (CIV)	11	8	TRUE
3	S-GOO	Google Workspace	Non-Impact Vendor (NIV)	12	6	TRUE
4	S-PSC	PS Consulting	Non-Impact Vendor (NIV)	8	6	TRUE
5	S-AUD	Audens	Non-Impact Vendor (NIV)	8	6	TRUE
6	S-STR	Stripe	Non-Impact Vendor (NIV)	12	6	TRUE
7	S-BER	Berba Translation	Non-Impact Vendor (NIV)	9	6	TRUE
8	S-LAW	Lawesome	Non-Impact Vendor (NIV)	8	6	TRUE
9	S-HUB	HubSpot	Non-Impact Vendor (NIV)	12	6	TRUE
10	S-HOL	Holded Technologies	Non-Impact Vendor (NIV)	9	6	TRUE
11	S-FAC	Factorial	Non-Impact Vendor (NIV)	11	6	TRUE
12	S-SLA	Slack	Non-Impact Vendor (NIV)	12	6	TRUE
13	S-APO	Apotech Consulting	Non-Impact Vendor (NIV)	10	6	TRUE
14	S-BSI	BSI	Non-Impact Vendor (NIV)	8	6	TRUE
15	S-MIC	Microsoft	Controlled Impact Vendor (CIV)	13	8	TRUE
16	S-THA	Thanic	Controlled Impact Vendor (CIV)	10	8	TRUE
17	S-INT	Intel Corporation	Controlled Impact Vendor (CIV)	13	8	TRUE

S-AMA

Name: Amazon Web Services
Type: Controlled Impact Vendor (CIV)
Final score: 13

Criteria	Parameters	Value	Score	Comments
Quality of services	Prior experience with this supplier Customer reviews in Trustpilot.com Market penetration	7	1	Prior experience with this supplier shows a high degree of quality of the supplier. However, the supplier has a poor rating on Trustpilot. Still, AWS is the leading cloud supplier worldwide and its trusted by the majority of the consumers.
QMS Certification	Observed by looking at the supplier's claims and the mention of the QMS in the license of use.	TRUE	2	The presence of a certificated quality manage system is evidenced in the supplier's website and also in the constract of license of use in force between.
ISMS Certification	Observed by looking at the supplier's claims and the mention of the QMS in the license of use.	TRUE	2	The vendor provided an ISO 27001 certificate, that is attached as evidence to this record as S-AMA-ISMS Certification.
Affordable price	Compared to competitors and considering special discounts we may enjoy	9	2	It's quite afforable by all standards, plus they offer un free credits for being an innovative startup
Technical capacity	Capability to provide the services	8	2	They have a wide range of services, including elastic balancing, as well as instances for different processing activities.
Experience	Knowledge and domain on their activity	10	2	They practically invented modern cloud infrastructure services.
International	Presence in the whole world	10	2	They operate in all continents.

S-ATL

Name: Atlassian
Type: Controlled Impact Vendor (CIV)
Final score: 11

Criteria	Parameters	Value	Score	Comments
Quality of services	Prior experience with this supplier Customer reviews in Trustpilot.com Market penetration	5	1	Prior experience with this supplier shows a high degree of quality of the supplier. However, the supplier has a very bad rating on Trustpilot. Still, Atlassian is of the major project management softwares.
QMS Certification	Observed by looking at the supplier's claims and the mention of the QMS in the license of use.	FALSE	0	They don't seem to have an ISO 9001 certification.
ISMS Certification	Observed by looking at the supplier's claims and the mention of the QMS in the license of use.	TRUE	2	They do have ISO 27001 certification that is attached as evidence to this record as S-ATL-ISMS Certification.
Affordable price	Compared to competitors and considering special discounts we may enjoy	10	2	We are using the free version and it's enough. When scaling to the paid version, it is still affordable.
Technical capacity	Capability to provide the services	10	2	Atlassian is the only one providing, in the same ecosystem, a task manager, a knowledgebase and a git code repository. This makes it perfect to manage all the lifecycle: requirements (in Confluence), activities (in Jira) and deliverables (in Bitbucket).
Experience	Knowledge and domain on their activity	10	2	They are a long-lived company, one of the most in this space.
International	Presence in the whole world	10	2	They operate in all continents.

S-GOO

Name: Google Workspace
Type: Non-Impact Vendor (NIV)
Final score: 12

Criteria	Parameters	Value	Score	Score Comments
Quality of services	Prior experience with this supplier Customer reviews in Trustpilot.com Market penetration	7	1	Prior experience with this supplier shows a high degree of quality of the supplier. However, the supplier has a poor rating on Trustpilot. Still, AWS is the leading cloud supplier worldwide and its trusted by the majority of the consumers.
QMS Certification	Observed by looking at the supplier's claims and the mention of the QMS in the license of use.	TRUE	2	Google Cloud Platform is certified as ISO 9001 compliant after undergoing an audit by an independent third party.
ISMS Certification	Observed by looking at the supplier's claims and the mention of the QMS in the license of use.	TRUE	2	They do have ISO 27001 certification.
Affordable price	Compared to competitors and considering special discounts we may enjoy	7	1	It's not expensive and it includes services that, if hired separately from different companies, would add up to triple the price.
Technical capacity	Capability to provide the services	8	2	They have a wide range of services, including elastic balancing, as well as instances for different processing activities.
Experience	Knowledge and domain on their activity	10	2	They practically invented modern cloud infrastructure services.
International	Presence in the whole world	10	2	They operate in all continents.

S-PSC

Name: PS Consulting
Type: Non-Impact Vendor (NIV)
Final score 8

Criteria	Parameters	Value	Score	Comments
Quality of services	Prior experience with this supplier Customer reviews in Trustpilot.com Market penetration	8	2	Prior experience with this supplier shows a high degree of quality of the supplier. The don't have reviews in Trustpilot, but the reviews from companies we know were good. They don't have a huge market penetration, which is expected.
QMS Certification	Observed by looking at the supplier's claims and the mention of the QMS in the license of use.	FALSE	0	They do not have ISO 13485 certification, but are in the process of ataining it.
ISMS Certification	Observed by looking at the supplier's claims and the mention of the QMS in the license of use.	FALSE	0	They do not have ISO 27001 certification.
Affordable price	Compared to competitors and considering special discounts we may enjoy	6	1	It's not expensive and it includes services that, if hired from different companies, would increase the price.
Technical capacity	Capability to provide the services	8	2	They have the employees with the technical capcities required to provide the services.
Experience	Knowledge and domain on their activity	9	2	They have demonstrated the required knowledge and experience to provide the services
International	Presence in the whole world	5	1	The operate in Spain only, but they provide services for the European CE Marking

S-AUD

Name: Audens
Type: Non-Impact Vendor (NIV)
Final score 8

Criteria	Parameters	Value	Score	Comments
Quality of services	Prior experience with this supplier Customer reviews in Trustpilot.com Market penetration	8	2	Prior experience with this supplier shows a high degree of quality of the supplier. The don't have reviews in Trustpilot, but the reviews from companies we know were good. They don't have a huge market penetration, which is expected.
QMS Certification	Observed by looking at the supplier's claims and the mention of the QMS in the license of use.	FALSE	0	They do not have ISO 13485 certification, but are in the process of ataining it.
ISMS Certification	Observed by looking at the supplier's claims and the mention of the QMS in the license of use.	FALSE	0	They do not have ISO 27001 certification.
Affordable price	Compared to competitors and considering special discounts we may enjoy	6	1	It's not expensive and it includes services that, if hired from different companies, would increase the price.
Technical capacity	Capability to provide the services	8	2	They have the employees with the technical capcities required to provide the services.
Experience	Knowledge and domain on their activity	9	2	They have demonstrated the required knowledge and experience to provide the services
International	Presence in the whole world	5	1	The operate in Spain only, but they provide services for the European CE Marking

S-STR

Name: Stripe
Type: Controlled Impact Vendor (CIV)
Final score 12

Criteria	Parameters	Value	Score	Comments
Quality of services	Prior experience with this supplier Customer reviews in Trustpilot.com Market penetration	8	2	Prior experience with this supplier shows a high degree of quality of the supplier. The don't have reviews in Trustpilot, but the reviews from companies we know were good. They don't have a huge market penetration, which is expected.
QMS Certification	Observed by looking at the supplier's claims and the mention of the QMS in the license of use.	FALSE	0	They do not have ISO 13485 certification
ISMS Certification	Observed by looking at the supplier's claims and the mention of the QMS in the license of use.	TRUE	2	They have an equivalent to ISO 27001 certification, called Payment Card Industry (PCI) Data Security Standard.
Affordable price	Compared to competitors and considering special discounts we may enjoy	8	2	It's one of the most afforable solutions, much more than Paypal.
Technical capacity	Capability to provide the services	8	2	They have a wide range of services, including the possibility to allow care providers to charge patients through us.
Experience	Knowledge and domain on their activity	9	2	They are specialised and have years of experience.
International	Presence in the whole world	10	2	They are the payment processor with the largest geographic coverage.

S-BER

Name: Berba Translation
Type: Non-Impact Vendor (NIV)
Final score 9

Criteria	Parameters	Value	Score	Comments
Quality of services	Prior experience with this supplier Customer reviews in Trustpilot.com Market penetration	8	2	Prior experience with this supplier shows a high degree of quality of the supplier. The don't have reviews in Trustpilot, but the reviews from companies we know were good. They don't have a huge market penetration, which is expected.
QMS Certification	Observed by looking at the supplier's claims and the mention of the QMS in the license of use.	FALSE	0	They do not have ISO 13485 certification
ISMS Certification	Observed by looking at the supplier's claims and the mention of the QMS in the license of use.	FALSE	0	They do not have ISO 27001 certification.
Affordable price	Compared to competitors and considering special discounts we may enjoy	6	1	It's not expensive and it includes services that, if hired separately from different companies, would add up to triple the price.
Technical capacity	Capability to provide the services	8	2	They have a wide range of services, including elastic balancing, as well as instances for different processing activities.
Experience	Knowledge and domain on their activity	9	2	They are specialised in new technologies, both for GDPR and also other contractual matters.
International	Presence in the whole world	8	2	They support more than 12 languages.

S-LAW

Name: Lawesome
Type: Non-Impact Vendor (NIV)
Final score 8

Criteria	Parameters	Value	Score	Comments
Quality of services	Prior experience with this supplier Customer reviews in Trustpilot.com Market penetration	8	2	Prior experience with this supplier shows a high degree of quality of the supplier. The don't have reviews in Trustpilot, but the reviews from companies we know were good. They don't have a huge market penetration, which is expected.
QMS Certification	Observed by looking at the supplier's claims and the mention of the QMS in the license of use.	FALSE	0	They do not have ISO 13485 certification
ISMS Certification	Observed by looking at the supplier's claims and the mention of the QMS in the license of use.	FALSE	0	They do not have ISO 27001 certification.
Affordable price	Compared to competitors and considering special discounts we may enjoy	7	1	They're are experts in big companies and startups, they apply a special price for small companies and comparing the expertise and quality they're one of the most afforable solutions.
Technical capacity	Capability to provide the services	8	2	They have a wide range of services, including financing rounds consultancy, corporate venturing, protection and explotation of innovation.
Experience	Knowledge and domain on their activity	8	2	They are specialised and have years of experience.
International	Presence in the whole world	5	1	The operate in Spain only, but most of it applies to the whole EU.

S-HUB

Name: Hubspot
Type: Non-Impact Vendor (NIV)
Final score: 9

Criteria	Parameters	Value	Score	Comments
Quality of services	Prior experience with this supplier Customer reviews in Trustpilot.com Market penetration	9	2	Prior experience with this supplier shows a high degree of quality of the supplier. They are rated above the media in Trustpilot and our experience working with it is satisfactory. They have a huge market penetration
QMS Certification	Observed by looking at the supplier's claims and the mention of the QMS in the license of use.	FALSE	0	They do not have ISO 13485 certification
ISMS Certification	Observed by looking at the supplier's claims and the mention of the QMS in the license of use.	TRUE	2	They do not have ISO 27001 certification, but they are SOC-2 certified, that is the equivalent in the US. The SOC-3 public report of internal controls over security, availability, processing integrity, and confidentiality is archived as evidence.
Affordable price	Compared to competitors and considering special discounts we may enjoy	8	2	We are using the free version and it's enough. When scaling to the paid version, it is still affordable.
Technical capacity	Capability to provide the services	8	2	They connect everything scaling companies need to deliver a best-in-class customer experience into one place.
Experience	Knowledge and domain on their activity	9	2	They have more than 15 years of experience
International	Presence in the whole world	10	2	They operate in all continents.

S-HOL

Name: Holded Technologies
Type: Non-Impact Vendor (NIV)
Final score 9

Criteria	Parameters	Value	Score	Comments
Quality of services	Prior experience with this supplier Customer reviews in Trustpilot.com Market penetration	8	2	Prior experience with this supplier shows a high degree of quality of the supplier. The don't have reviews in Trustpilot, but the reviews from companies we know were good. They don't have a huge market penetration, which is expected.
QMS Certification	Observed by looking at the supplier's claims and the mention of the QMS in the license of use.	FALSE	0	They do not have ISO 13485 certification
ISMS Certification	Observed by looking at the supplier's claims and the mention of the QMS in the license of use.	FALSE	0	They do not have ISO 27001 certification.
Affordable price	Compared to competitors and considering special discounts we may enjoy	8	2	Best solution for startups and they're one of the most afforable.
Technical capacity	Capability to provide the services	8	2	Their solution allows us automating tasks and streamlining our accounting and invoicing
Experience	Knowledge and domain on their activity	7	1	They have more than 5 years of experience helping SMEs being more efficient and having more information about their businesses to make better decisions.
International	Presence in the whole world	10	2	They operate in all continents.

S-FAC

Name: Factorial
Type: Non-Impact Vendor (NIV)
Final score 11

Criteria	Parameters	Value	Score	Comments
Quality of services	Prior experience with this supplier Customer reviews in Trustpilot.com Market penetration	9	2	Prior experience with this supplier shows a high degree of quality of the supplier. They are rated above the media in Trustpilot and our experience working with it is satisfactory. They have a huge market penetration.
QMS Certification	Observed by looking at the supplier's claims and the mention of the QMS in the license of use.	FALSE	0	They do not have ISO 13485 certification
ISMS Certification	Observed by looking at the supplier's claims and the mention of the QMS in the license of use.	TRUE	2	They do have ISO 27001 certification.
Affordable price	Compared to competitors and considering special discounts we may enjoy	7	1	Best solution for startups and they're one of the most afforable.
Technical capacity	Capability to provide the services	8	2	In addition to automating processes, Fatorial provide us with data with which to grow our company's talent.
Experience	Knowledge and domain on their activity	8	2	More than 5 years of experience
International	Presence in the whole world	9	2	They operate in more than 12 countries

S-SLA

Name: Slack
Type: Non-Impact Vendor (NIV)
Final score 12

Criteria	Parameters	Value	Score	Comments
Quality of services	Prior experience with this supplier Customer reviews in Trustpilot.com Market penetration	9	2	Prior experience with this supplier shows a high degree of quality of the supplier. The supplier has a good rating onTrustpilot, and the reviews from companies we know were good. They have a huge market penetration.
QMS Certification	Observed by looking at the supplier's claims and the mention of the QMS in the license of use.	FALSE	0	They do not have ISO 13485 certification
ISMS Certification	Observed by looking at the supplier's claims and the mention of the QMS in the license of use.	TRUE	2	They do have ISO 27001 certification.
Affordable price	Compared to competitors and considering special discounts we may enjoy	8	2	We are using the free version and it's enough. When scaling to the paid version, it is still affordable.
Technical capacity	Capability to provide the services	9	2	It offers a wide range of features and benefits that are useful for us as real-time messaging, channels to organize conversations based on projects, teams or departments, integration with a wide range of other tools, search functionality and mobile access.
Experience	Knowledge and domain on their activity	9	2	They have demonstrated the required knowledge and experience to provide the services
International	Presence in the whole world	10	2	They operate in all continents.

S-APO

Name: Apotech Consulting
Type: Non-Impact Vendor (NIV)
Final score 10

Criteria	Parameters	Value	Score	Comments
Quality of services	Prior experience with this supplier Customer reviews in Trustpilot.com Market penetration	8	2	Prior experience with this supplier shows a high degree of quality of the supplier. The don't have reviews in Trustpilot, but our experience working with them was good. They don't have a huge market penetration, which is expected, but they are growing and assuming more projects.
QMS Certification	Observed by looking at the supplier's claims and the mention of the QMS in the license of use.	FALSE	0	They do not have ISO 13485 certification
ISMS Certification	Observed by looking at the supplier's claims and the mention of the QMS in the license of use.	FALSE	0	They do not have ISO 27001 certification.
Affordable price	Compared to competitors and considering special discounts we may enjoy	8	2	They offer an international portfolio of consultancy, in some cases cheaper that their equivalences with other suppliers, in other cases more expensive.
Technical capacity	Capability to provide the services	9	2	They have demonstrated their
Experience	Knowledge and domain on their activity	9	2	They count with a big amount of consultants with demonstrate experience on the different consultancy projects they offer.
International	Presence in the whole world	10	2	They are UK based but they offer services around the world, as Mexico and USA.

S-BSI

Name: BSI
Type: Non-Impact Vendor (NIV)
Final score 7

Criteria	Parameters	Value	Score	Comments
Quality of services	Prior experience with this supplier Customer reviews in Trustpilot.com Market penetration	7	1	We do not have previous experience with this supplier yet. Despite the supplier has a poor rating on Trustpilot, it is worldwide recognized. They have a huge market penetration
QMS Certification	Observed by looking at the supplier's claims and the mention of the QMS in the license of use.	FALSE	0	They do not have ISO 13485 certification
ISMS Certification	Observed by looking at the supplier's claims and the mention of the QMS in the license of use.	FALSE	0	They do not have ISO 27001 certification.
Affordable price	Compared to competitors and considering special discounts we may enjoy	4	0	The price is the most expensive in comparison with their competitors, but they offer faster terms.
Technical capacity	Capability to provide the services	8	2	The European Commission has notified that BSI, Notified Body number : 2797, has the technical capacity to provide the services that we require.
Experience	Knowledge and domain on their activity	10	2	They are accredited by different international bodies as: American National Standards Institute - American Society for Quality National Accreditation Board LLC (ANAB); China National Accreditation Service for Conformity Assessment (CNAS); Raad voor Accreditatie (RvA) in the Netherlands; United Kingdom Accreditation Service (UKAS).
International	Presence in the whole world	9	2	They are worldwide recognized as Notified Body

S-MIC

Name: Microsoft
Type: Critial supplier
Final score 13

Criteria	Parameters	Value	Score	Comments
Quality of services	Prior experience with this supplier Customer reviews in Trustpilot.com Market penetration	6	1	We do not have previous experience with this supplier yet. Despite the supplier has a poor rating on Trustpilot, it is worldwide recognized. They have a huge market penetration
QMS Certification	Observed by looking at the supplier's claims and the mention of the QMS in the license of use.	TRUE	2	They have ISO 9001 certification
ISMS Certification	Observed by looking at the supplier's claims and the mention of the QMS in the license of use.	TRUE	2	They do have ISO 27001 and ISO 27018 certifications, and they are SOC 1, SOC 2 and SOC 3 compliant
Affordable price	Compared to competitors and considering special discounts we may enjoy	9	2	We are using the free version and it's enough. When scaling to the paid version, we will review this section.
Technical capacity	Capability to provide the services	9	2	Microsoft GitHub is the only one providing a git code repository that includes a verified signature choice for the commits performed compliant with the 21 CFR part 11. This makes it perfect to manage the QMS documents and records.
Experience	Knowledge and domain on their activity	10	2	They are a long-lived company.
International	Presence in the whole world	9	2	They operate in all continents.

S-THA

Name: Amazon Web Services
Type: Controlled Impact Vendor (CIV)
Final score: 10

Criteria	Parameters	Value	Score	Comments
Quality of services	Prior experience with this supplier Customer reviews in Trustpilot.com Market penetration	7	1	We do not have previous experience with this supplier yet, however the references we got from very reliable sources are very encouraging.
QMS Certification	Observed by looking at the supplier's claims and the mention of the QMS in the license of use.	TRUE	2	It is subjected to external audits and evaluations of third parties in accordance with international quality management regulations (ISO9001, ISO17025, 17065, EFQM) and customer audits periodically.
ISMS Certification	Observed by looking at the supplier's claims and the mention of the QMS in the license of use.	FALSE	0	We could not find ISO 27001 certification or equivalent.
Affordable price	Compared to competitors and considering special discounts we may enjoy	9	2	We have closed a long-term contract, with a lower price than other providers such as AWS for better service (more computing capacity).
Technical capacity	Capability to provide the services	8	2	They provide servers dedicated exclusively to us with plenty of power, plus dedicated support staff.
Experience	Knowledge and domain on their activity	8	2	They are suppliers of Skymedic, an aesthetic medicine company, providing them the same services that we have contracted.
International	Presence in the whole world	6	1	They do not yet have international presence, but their supplier Leitat also colaborates with the worlwide recognized company HP

S-INT

Name: Intel Corporation
Type: Controlled Impact Vendor (CIV)
Final score: 13

Criteria	Parameters	Value	Score	Comments
Quality of services	Prior experience with this supplier Customer reviews in Trustpilot.com Market penetration	4	1	Low score on Trustpilot, specially regarding customer support.
QMS Certification	Observed by looking at the supplier's claims and the mention of the QMS in the license of use.	TRUE	2	The presence of a certificated quality management system is evidenced in the supplier's website.
ISMS Certification	Observed by looking at the supplier's claims and the mention of the QMS in the license of use.	TRUE	2	They do have ISO 27001 certification and it is available on their website.
Affordable price	Compared to competitors and considering special discounts we may enjoy	10	2	It is free.
Technical capacity	Capability to provide the services	10	2	Intel offers a wide range of hardware and software solutions that can support the development and deployment of computer vision applications.
Experience	Knowledge and domain on their activity	9	2	Founded in 1968, Intel has been a key player in the development of semiconductor technology for over five decades.
International	Presence in the whole world	9	2	They operate in all continents.

Record signature meaning

Author: JD-003 María Diez
Reviewer: JD-005 Alfonso Medela
Approver: JD-001 Andy Aguilar

Supplier verification
- S-AMA
- S-ATL
- S-GOO
- S-PSC
- S-AUD
- S-STR
- S-BER
- S-LAW
- S-HUB
- S-HOL
- S-FAC
- S-SLA
- S-APO
- S-BSI
- S-MIC
- S-THA
- S-INT
Record signature meaning