Skip to main content

Vendor and Sub-Processor List (GDPR)

K
Written by Kailey Buxbaum

RapidRatings International Inc. (“RapidRatings”) engages vendors to fulfil operational requirements in the domains of software services, technical infrastructure services, security services, facilities management, human resources services, financial ERP services, legal services, etc.

This document outlines what vendors RapidRatings utilizes in the fulfilment of our service to clients and other stakeholders. In line with RapidRatings Vendor Risk Management policy, all key vendors are assessed in detail to ensure that they meet the high standards of information security, privacy, and compliance to industry, legal, and regulatory frameworks. This list is accurate as of the date of renewal with the vendor. RapidRatings is under no obligation to update more frequently.

Core Service Providers

We require the use of the following core service providers to fulfil our services to clients and members.

Vendor

Feature/Function

PII Description

Data location

Vendor requires access to data

Vendor request access

AI Type

AWS

IaaS, PaaS

No PII

USA

N

N

Gen

Atlassian

Ticket management

Client contact details

USA

N

N

Gen

Office 365

Email, intranet, document repository, collaboration

Client or member email from direct correspondence

USA

N

N

ML, Gen

Salesforce

Sales, leads, opportunities

Client contact details: name, email, phone number

USA

N

Y

None

Churn Zero

Client engagement management

Client end user contact details: name and email

USA

N

N

Gen

Gong.io

Client engagement management

Call recording, client email

USA

N

N

Gen

LinkSquares

Client contract management

Contract PII

USA

N

N

ML, Gen

Outreach.io

Member contact management

Member name, email.

USA

N

N

Gen

Highspot

Prospect Management

Prospect/Client contact details

USA

N

N

Gen

Docusign

Client Contract Management

Contract PII

USA

N

N

None

Intercom

Client Service desk (pending)

Client contact details

USA

N

N

Gen

Validis

Member financial interface

Member financial data

USA

N

N

None

Anthropic Claude

Data Analysis, product feedback processing

Email, name

USA

N

N

Gen

CreditSafe

RiskPulse Data and functionality

None

USA

Y

Y

None

FrontEgg

Identity provider

Client and member username, email

USA

Y

Y

None

Technical Providers

RapidRatings requires the use of the following services for various technical service management functions. The services below are managed in-house but reside on external vendors platforms.

Vendor

Feature/Function

PII Description*

Data location

Vendor requires access to data

Vendor may request access to data

AI type

Alert Logic

Security services, IDS, logging

Log data

USA

Y

Y

ML

DataDog

Application and system logging

Log data

USA

N

N

ML

Mailgun

Outbound Email infrastructure

Log data

USA

N

Y

None

SentryIO

Application Event Management

Log data

USA

N

Y

None

Stripe

Payment Processor

No PII

USA

N

Y

None

heap.io

Usage analytics

No PII

USA

N

Y

None

Serper.dev

Company name matching

No PII

UK

N

N

None

Anthropic

Data analysis, R & D

No PII

USA

N

N

Gen

Google Gemini

Data analysis, R & D

No PII

USA

N

N

Gen

*Note that log data may contain PII such as user ID or email.

Use of Artificial Intelligence

While RapidRatings does not explicitly choose vendors for their artificial intelligence capability, vendors may employ artificial intelligence technology in the fulfillment of the service to RapidRatings. RapidRatings provides third party vendor transparency around AI technology to our knowledge, for ease of reference.

In the event that generative AI (“Gen”) is used, responsibility for the quality and accuracy of content created rests with the user, not with the AI. Also, is it forbidden to use client data to train the AI.

Machine Learning (“ML”) technology is permitted in all tools, including Core Service Providers and Technical Providers required for the fulfillment of the service.

Updates to the Vendor and Sub-Processor List

All vendors are assessed in detail at the onset of an engagement to ensure that they meet the high standards of information security, privacy, and compliance to industry, legal, and regulatory frameworks.

RapidRatings periodically assesses whether each vendor is the best fit for RapidRatings as well as for our clients and FHR Exchange members' needs. If a change needs to be made, RapidRatings will post the updated Vendor and Sub-Processor list periodically.

Updated: Wednesday June 10th, 2026

Did this answer your question?