Vendor Services Privacy Policy

Last Updated January 9, 2023


This Vendor Services Privacy Policy ("Privacy Policy") is designed to inform you about how Epic Systems Corporation ("Epic") collects and uses information you provide when you create a user account with Vendor Services ("User Account"). Epic may update this Privacy Policy or other privacy notices established for other Epic websites at any time, and future updates to the Privacy Policy will be effective as soon as they are posted on this page. If you are interested, you should check back from time to time and make sure that you have reviewed the most current version of this Privacy Policy.

Vendor Services

Epic created Vendor Services to provide other vendors with support services, online documentation, testing tools, and other information that may assist vendors to integrate their products with Epic software. In order to provide you with access to Vendor Services, Epic may collect and use your personal information as described in this Privacy Policy.

If you use your Vendor Services account to access the Vendor Services Developer Forums or Sherlock, please review the UserWeb Privacy Policy for information related to your use of the forums and Sherlock. The Vendor Services Developer Forums and Sherlock are UserWeb-Connected Sites and may process your information differently than the rest of the Vendor Services web resources.

Information You Provide to Vendor Services

Information That You Give Us

We collect your personal information in order to set up a User Account, and you send this information to Epic when you request your account. Specifically, Epic may collect the following information:

  • Name;
  • Business legal name, email, address, incorporated state or country, and website URL;
  • Phone number;
  • A security question and corresponding answer to assist with account information retrieval and password resets; and
  • Information about your business’s products.

Additionally, you have the option of contacting Epic via the Vendor Services email address ( You may also contact Epic via other email addresses, phone, mail, or other methods, and we may keep a record of your communication to help answer or resolve the matter you contacted us about. You can decide how much additional information you want to share with us in those cases.

You may also log into Vendor Services using your credentials for Epic's UserWeb, if applicable. If you do so, your contact information from the UserWeb will automatically be added to your User Account. Please review the UserWeb Privacy Policy for more information related to the UserWeb and UserWeb-Connected Sites, including the Vendor Services Developer Forums.

If you make a payment to Epic via Vendor Services, Epic may store your payment method information or tracking information related to electronic payments.

Our Website and Servers, Your Use of Browsers

When you communicate with us or access Vendor Services through a browser, application, or other client, our servers automatically collect and record information. In most cases, this information is generated by various tracking technologies, such as "cookies," "flash LSOs," "web beacons" or "clear GIFs." You can read more about how we use cookies below.

Your browser or device may tell us:

  • Your browser type;
  • Language preference;
  • The Internet Protocol (IP) address (which may tell us generally where you are located); and
  • The type of device or system you used.

Your browser may also tell us information such as:

  • The time and date of your request;
  • The page that led you to Vendor Services; and
  • The search terms you typed into a search engine that led you to Vendor Services, if applicable.


Like many websites, we use cookies to recognize you and collect information about your access to and use of Our Website. Cookies are small data files that are placed on your computer when you visit a website. Cookies are widely used by many website owners to make their websites work, operate more efficiently, and collect information. We use cookies to help operate Our Website, and we specifically use Google Analytics cookies. Our use of the Google Analytics cookie enables us to collect certain data about your visits to Our Website, including:

  • Your IP address;
  • The pages of our site that you visit;
  • The time and date of your visit;
  • The time you spend on certain pages on our site; and
  • Various other statistics.

You have the right to decide whether to accept or reject certain cookies. You can exercise your cookie rights by adjusting cookie usage in your browser settings. You may also prevent the Google Analytics cookie from being placed in your browser by clicking "Decline" on the cookie banner at the button of this webpage. You may also change your decision to accept or decline cookies by visiting your cookie settings. Google's ability to share and use your information collected via Google Analytics is restricted by the commitments made in the Google Analytics Terms of Service and the Google Privacy Policy.


Some web browsers and operating systems include a Do-Not-Track (DNT) setting that you can activate to signal your preference not to have information about your online activities monitored. There is currently no uniform standard for recognizing and implementing DNT signals. As a result, Vendor Services does not respond to DNT signals. If a standard for recognizing DNT signals is adopted in the future and we follow that standard, we will inform you about our approach in an update to this Privacy Policy.

How Do We Use Your Information?

The information that you directly provide us, whether through the creation of a User Account or in other ways as you use Vendor Services, will be processed by Epic for as long as you are enrolled in, and after you cease using, Vendor Services. We will use your information for purposes such as:

  • Providing you access to Vendor Services;
  • Creating and managing your User Account;
  • Contacting you to resolve any technical difficulty, if needed;
  • Providing your contact information to Epic customers that use, or are interested in, your listed application;
  • Processing and storing your data for Epic's internal tracking metrics;
  • Improving Vendor Services; and
  • Provisioning access to the Vendor Services Developer Forums, Sherlock, or other UserWeb-Connected Sites, as appropriate (if you use your Vendor Services account to access the Vendor Services Developer Forums or other UserWeb-Connected Sites, Epic will use the information from your Vendor Services account to create a UserWeb account for you. Please review the UserWeb Privacy Policy for more information).

For users of Vendor Services based in Europe, Epic has a legitimate interest in processing your data in order to allow you to use Vendor Services.

Who Has Access to Your Information?

When you provide your information to Epic via Vendor Services, your information will be accessed by Epic staff, and your contact information may be made available to Epic's customers. The Epic staff that will regularly access your information is limited to those that provide technical or operational support for Vendor Services, those that develop Vendor Services, and Epic's information technology and operations teams.

How Long Does Epic Keep Your Information?

Epic will retain your information for as long as it makes use of such information as a part of your continued use of Vendor Services and to carry out Epic's legitimate business or legal purposes. By creating a User Account, you agree to allow us to retain your information in accordance with this policy.

If you are a data subject as defined by the General Data Protection Regulation, (EU) 2016/679, you have a number of rights and can do any of the following by contacting Epic at

  • Request a copy your data Epic has received about you;
  • Request that Epic changes incorrect or incomplete data we have about you;
  • Request that Epic delete or stop processing your data; and
  • Express any concerns or objections you have about Epic's use of your data.

Please note that if you contact us to assist you, for your safety and ours, we may need to authenticate your identity before fulfilling your request.

How We Protect Your Information

We use a combination of process, technology, and physical security controls to help protect your information from unauthorized access, use, or disclosure, but remember that no method of transmission over the Internet, or method of storage, is 100% secure.

When we collect your information through operation of Vendor Services, that information is encrypted and transmitted to us in a secure way. You can verify this by looking for a closed lock icon at the top or bottom of your web browser, or looking for "https" at the beginning of the URL address of the web page. Employees or partners of Epic who have access to your personal information in connection with providing Vendor Services are required to keep the information confidential and are not permitted to use your information for any purpose other than carrying out the services they are performing.

Links to Other Sites

Vendor Services may contain links to other websites beyond the control of Epic. Epic is not responsible for the content or privacy practices of those websites. We encourage you to be aware when you leave Epic's websites and to read the privacy statements of any other website that collects your information.

Your California Privacy Rights

If you are a California resident, California law may provide you with additional rights regarding our use of your personal information. To learn more about your California privacy rights, visit our CCPA privacy notice for California residents.

Contact Epic

If you have questions or concerns about this privacy policy, please contact us at When you contact us please include the website or reason that led you to contact us.

If you need to contact Epic's Data Protection Officer or EU Representative as defined by the General Data Protection Regulation, (EU) 2016/679, please email or call +1 608-271-9000.

Your Cookie Settings