R-010-001 Suppliers evaluation 22_001
- Governed by GP-010 Purchases and suppliers evaluation
- Comes from template T-010-001
| Written by | Reviewed by |
|---|---|
E-Signature (Appfire integration):  Taig Mac Carthy 2A21910238D5D2AFF9D3BFA2919BDBF4 Signer name: Taig Mac Carthy Signing time: Sat, 10 Sep 2022 13:57:34 GMT Reason: Creation of document | E-Signature (Appfire integration): Alfonso Medela F777E10BCA710C748E44E7F531DA03BE Signer name: Alfonso Medela Signing time: Sun, 11 Sep 2022 13:56:42 GMT Reason: Reviewed |
| Quality manager (QM) | Technical manager (PRRC) |
Supplier verification
| # | Code | Name | Type | Score | Required score | Approve |
|---|---|---|---|---|---|---|
| 1 | S-AMA | Amazon Web Services | Critical supplier | 13 | 8 | TRUE |
| 2 | S-ATL | Atlassian | Critical supplier | 11 | 8 | TRUE |
| 3 | S-GOO | Google Workspace | Non-critical supplier | 12 | 6 | TRUE |
| 4 | S-PSC | PS Consulting | Non-critical supplier | 8 | 6 | TRUE |
| 5 | S-AUD | Audens | Non-critical supplier | 7 | 6 | TRUE |
| 6 | S-STR | Stripe | Critical supplier | 12 | 8 | TRUE |
| 6 | S-HUB | Hubspot | Non-critical supplier | 9 | 6 | TRUE |
| 7 | S-BER | Berba Translation | Non-critical supplier | 9 | 6 | TRUE |
S-AMA
- Name Amazon Web Services
- Type Critical supplier
- Final score: 13
| Criteria | Parameters | Value | Score | Comments |
|---|---|---|---|---|
| Quality of services | Prior experience with this supplier Customer reviews in Trustpilot.com Market penetration | 7 | 1 | Prior experience with this supplier shows a high degree of quality of the supplier. However, the supplier has a poor rating on Trustpilot. Still, AWS is the leading cloud supplier worldwide and its trusted by the majority of the consumers. |
| QMS Certification | Obverved by looking at the supplier's claims and the mention of the QMS in the license of use. | TRUE | 2 | The presence of a certificated quality manage system is evidenced in the supplier's website and also in the constract of license of use in force between. |
| ISMS Certification | Obverved by looking at the supplier's claims and the mention of the QMS in the license of use. | TRUE | 2 | The vendor provided an ISO 27001 certificate, that is attached as evidence to this record as S-AMA-ISMS Certification. |
| Affordable price | Compared to competitors and considering special discounts we may enjoy | 9 | 2 | It's quite afforable by all standards, plus they offer un free credits for being an innovative startup |
| Technical capacity | Capability to provide the services | 8 | 2 | They have a wide range of services, including elastic balancing, as well as instances for different processing activities. |
| Experience | Knowledge and domain on their activity | 10 | 2 | They practically invented modern cloud infrastructure services. |
| International | Presence in the whole world | 10 | 2 | They operate in all continents. |
S-ATL
- Name Atlassian
- Type Critical supplier
- Final score: 11
| Criteria | Parameters | Value | Score | Comments |
|---|---|---|---|---|
| Quality of services | Prior experience with this supplier Customer reviews in Trustpilot.com Market penetration | 5 | 1 | Prior experience with this supplier shows a high degree of quality of the supplier. However, the supplier has a very bad rating on Trustpilot. Still, Atlassian is of the major project management softwares. |
| QMS Certification | Obverved by looking at the supplier's claims and the mention of the QMS in the license of use. | FALSE | 0 | They don't seem to have an ISO 9001 certification. |
| ISMS Certification | Obverved by looking at the supplier's claims and the mention of the QMS in the license of use. | TRUE | 2 | They do have ISO 27001 certification. |
| Affordable price | Compared to competitors and considering special discounts we may enjoy | 10 | 2 | We are using the free version and it's enough. When scaling to the paid version, it is still affordable. |
| Technical capacity | Capability to provide the services | 10 | 2 | Atlassian is the only one providing, in the same ecosystem, a task manager, a knowledgebase and a git code repository. This makes it perfect to manage all the lifecycle: requirements (in Confluence), activities (in Jira) and deliverables (in Bitbucket). |
| Experience | Knowledge and domain on their activity | 10 | 2 | They are a long-lived company, one of the most in this space. |
| International | Presence in the whole world | 10 | 2 | They operate in all continents. |
S-GOO
- Name Google Workspace
- Type Non-critical supplier
- Final score: 12
| Criteria | Parameters | Value | Score | Comments |
|---|---|---|---|---|
| Quality of services | Prior experience with this supplier Customer reviews in Trustpilot.com Market penetration | 7 | 1 | Prior experience with this supplier shows a high degree of quality of the supplier. However, the supplier has a poor rating on Trustpilot. Still, AWS is the leading cloud supplier worldwide and its trusted by the majority of the consumers. |
| QMS Certification | Obverved by looking at the supplier's claims and the mention of the QMS in the license of use. | TRUE | 2 | Google Cloud Platform is certified as ISO 9001 compliant after undergoing an audit by an independent third party. |
| ISMS Certification | Obverved by looking at the supplier's claims and the mention of the QMS in the license of use. | TRUE | 2 | They do have ISO 27001 certification. |
| Affordable price | Compared to competitors and considering special discounts we may enjoy | 7 | 1 | It's not expensive and it includes services that, if hired separately from different companies, would add up to triple the price. |
| Technical capacity | Capability to provide the services | 8 | 2 | They have a wide range of services, including elastic balancing, as well as instances for different processing activities. |
| Experience | Knowledge and domain on their activity | 10 | 2 | They practically invented modern cloud infrastructure services. |
| International | Presence in the whole world | 10 | 2 | They operate in all continents. |
S-PSC
- Name PS Consulting
- Type Non-critical supplier
- Final score 8
| Criteria | Parameters | Value | Score | Comments |
|---|---|---|---|---|
| Quality of services | Prior experience with this supplier Customer reviews in Trustpilot.com Market penetration | 8 | 2 | Prior experience with this supplier shows a high degree of quality of the supplier. The don't have reviews in Trustpilot, but the reviews from companies we know were good. They don't have a huge market penetration, which is expected. |
| QMS Certification | Obverved by looking at the supplier's claims and the mention of the QMS in the license of use. | FALSE | 0 | They do not have ISO 13485 certification but are in the process of ataining it. |
| ISMS Certification | Obverved by looking at the supplier's claims and the mention of the QMS in the license of use. | FALSE | 0 | They do not have ISO 27001 certification. |
| Affordable price | Compared to competitors and considering special discounts we may enjoy | 6 | 1 | It's not expensive and it includes services that, if hired separately from different companies, would add up to triple the price. |
| Technical capacity | Capability to provide the services | 8 | 2 | They have a wide range of services, including elastic balancing, as well as instances for different processing activities. |
| Experience | Knowledge and domain on their activity | 9 | 2 | They practically invented modern cloud infrastructure services. |
| International | Presence in the whole world | 5 | 1 | The operate in Spain only, but they provide services for both FDA and CE Marking |
S-AUD
- Name Audens
- Type Non-critical supplier
- Final score 7
| Criteria | Parameters | Value | Score | Comments |
|---|---|---|---|---|
| Quality of services | Prior experience with this supplier Customer reviews in Trustpilot.com Market penetration | 8 | 2 | Prior experience with this supplier shows a high degree of quality of the supplier. The don't have reviews in Trustpilot, but the reviews from companies we know were good. They don't have a huge market penetration, which is expected. |
| QMS Certification | Obverved by looking at the supplier's claims and the mention of the QMS in the license of use. | FALSE | 0 | They do not have ISO 13485 certification but are in the process of ataining it. |
| ISMS Certification | Obverved by looking at the supplier's claims and the mention of the QMS in the license of use. | FALSE | 0 | They do not have ISO 27001 certification. |
| Affordable price | Compared to competitors and considering special discounts we may enjoy | 6 | 1 | It's not expensive and it includes services that, if hired separately from different companies, would add up to triple the price. |
| Technical capacity | Capability to provide the services | 8 | 2 | They have a wide range of services, including elastic balancing, as well as instances for different processing activities. |
| Experience | Knowledge and domain on their activity | 9 | 2 | They are specialised in new technologies, both for GDPR and also other contractual matters. |
| International | Presence in the whole world | 4 | 0 | The operate in Spain only, but most of it applies to the whole EU. |
S-STR
- Name Stripe
- Type Critical supplier
- Final score 12
| Criteria | Parameters | Value | Score | Comments |
|---|---|---|---|---|
| Quality of services | Prior experience with this supplier Customer reviews in Trustpilot.com Market penetration | 8 | 2 | Prior experience with this supplier shows a high degree of quality of the supplier. The don't have reviews in Trustpilot, but the reviews from companies we know were good. They don't have a huge market penetration, which is expected. |
| QMS Certification | Obverved by looking at the supplier's claims and the mention of the QMS in the license of use. | FALSE | 0 | They do not have ISO 13485 certification but are in the process of ataining it. |
| ISMS Certification | Obverved by looking at the supplier's claims and the mention of the QMS in the license of use. | TRUE | 2 | They have an equivalent to ISO 27001 certification, called Payment Card Industry (PCI) Data Security Standard. |
| Affordable price | Compared to competitors and considering special discounts we may enjoy | 6 | 2 | It's one of the most afforable solutions, much more than Paypal. |
| Technical capacity | Capability to provide the services | 8 | 2 | They have a wide range of services, including the possibility to allow care providers to charge patients through us. |
| Experience | Knowledge and domain on their activity | 9 | 2 | They are specialised and have years of experience. |
| International | Presence in the whole world | 10 | 2 | They are the payment processor with the largest geographic coverage. |
S-HUB
- Name Hubspot
- Type Non-critical supplier
- Final score: 9
| Criteria | Parameters | Value | Score | Comments |
|---|---|---|---|---|
| Quality of services | Prior experience with this supplier Customer reviews in Trustpilot.com Market penetration | 9 | 2 | Prior experience with this supplier shows a high degree of quality of the supplier. In addition, the supplier has a good rating on Trustpilot and it is of the major CRM softwares. |
| QMS Certification | Obverved by looking at the supplier's claims and the mention of the QMS in the license of use. | FALSE | 0 | They don't seem to have an ISO 9001 certification. |
| ISMS Certification | Obverved by looking at the supplier's claims and the mention of the QMS in the license of use. | TRUE | 2 | They do have ISO 27001 certification. |
| Affordable price | Compared to competitors and considering special discounts we may enjoy | 7 | 1 | We are using the free version and it's enough. When scaling to paid version it becomes really expensive. |
| Technical capacity | Capability to provide the services | 6 | 1 | Hubsport provides the neccesary features in the free version, however, it is a bit limited when in comes to advanced features |
| Experience | Knowledge and domain on their activity | 7 | 1 | Founded in 2006, it is a company with experience but less than competitors like Salesforce. |
| International | Presence in the whole world | 10 | 2 | They operate in all continents. |
S-BER
- Name Berba Translation
- Type Non-critical supplier
- Final score 9
| Criteria | Parameters | Value | Score | Comments |
|---|---|---|---|---|
| Quality of services | Prior experience with this supplier Customer reviews in Trustpilot.com Market penetration | 8 | 2 | Prior experience with this supplier shows a high degree of quality of the supplier. The don't have reviews in Trustpilot, but the reviews from companies we know were good. They don't have a huge market penetration, which is expected. |
| QMS Certification | Obverved by looking at the supplier's claims and the mention of the QMS in the license of use. | FALSE | 0 | They do not have ISO 13485 certification but are in the process of ataining it. |
| ISMS Certification | Obverved by looking at the supplier's claims and the mention of the QMS in the license of use. | FALSE | 0 | They do not have ISO 27001 certification. |
| Affordable price | Compared to competitors and considering special discounts we may enjoy | 6 | 1 | It's not expensive and it includes services that, if hired separately from different companies, would add up to triple the price. |
| Technical capacity | Capability to provide the services | 8 | 2 | They have a wide range of services, including elastic balancing, as well as instances for different processing activities. |
| Experience | Knowledge and domain on their activity | 9 | 2 | They are specialised in new technologies, both for GDPR and also other contractual matters. |
| International | Presence in the whole world | 8 | 2 | They support more than 12 languages. |