Skip to main content

Vendor and Sub-Processor List (GDPR)

K
Written by Kailey Buxbaum
Updated over 2 weeks ago

RapidRatings engages vendors to fulfil operational requirements in the domains of software services, technical infrastructure services, security services, facilities management, human resources services, financial ERP services, and legal services, etc. This document outlines the vendors we use to deliver our services to clients and members.

In line with RapidRatings' Vendor Risk Management policy, all key vendors are assessed in detail to ensure they meet our high privacy and information security standards. In addition, they all must be in compliance with industry, legal, and regulatory frameworks. This list is accurate as of the date of renewal with the vendor. RapidRatings is under no obligation to update this list more frequently. All vendors house data in the United States of America.

Core Service Providers

We require the use of the following core service providers to fulfil our services to clients and members. All data is localized within the USA.

Technical Providers

We require the use of the following services for various technical service management functions. The services below are managed in-house but reside on external vendor platforms.

*Note that log data may contain PII such as user ID or email.

Use of Artificial Intelligence

While RapidRatings does not explicitly choose vendors for their artificial intelligence capabilities, vendors may employ artificial intelligence technology in the fulfillment of the service to RapidRatings. RapidRatings provides third-party vendor transparency around AI technology to our knowledge for ease of reference.

In the event that generative AI (โ€œGenโ€) is used, responsibility for the quality and accuracy of content created rests with the user, not with the AI. Also, is it forbidden to use client data to train the AI. Machine Learning (โ€œMLโ€) technology is permitted in all tools, including Core Service Providers and Technical Providers required for the fulfillment of the service.

Updates to the Vendor and Sub-Processor List

All vendors are assessed in detail at the onset of an engagement to ensure that they meet the high standards of information security, privacy, and compliance to industry, legal, and regulatory frameworks.

RapidRatings periodically assesses whether each vendor is the best fit for RapidRatings as well as for our clients and FHR Exchange members' needs. If a change needs to be made, RapidRatings will post the updated Vendor and Sub-Processor list periodically.

Updated: Monday, September 8, 2025

Did this answer your question?