Last Updated January 9, 2023
This Vendor Services Privacy Policy ("Privacy Policy") is designed to inform you about how Epic Systems Corporation ("Epic") collects and uses information you provide when you create a user account with Vendor Services ("User Account"). Epic may update this Privacy Policy or other privacy notices established for other Epic websites at any time, and future updates to the Privacy Policy will be effective as soon as they are posted on this page. If you are interested, you should check back from time to time and make sure that you have reviewed the most current version of this Privacy Policy.
Epic created Vendor Services to provide other vendors with support services, online documentation, testing tools, and other information that may assist vendors to integrate their products with Epic software. In order to provide you with access to Vendor Services, Epic may collect and use your personal information as described in this Privacy Policy.
If you use your Vendor Services account to access the Vendor Services Developer Forums or Sherlock, please review the UserWeb Privacy Policy for information related to your use of the forums and Sherlock. The Vendor Services Developer Forums and Sherlock are UserWeb-Connected Sites and may process your information differently than the rest of the Vendor Services web resources.
We collect your personal information in order to set up a User Account, and you send this information to Epic when you request your account. Specifically, Epic may collect the following information:
Additionally, you have the option of contacting Epic via the Vendor Services email address (vendorservices@epic.com). You may also contact Epic via other email addresses, phone, mail, or other methods, and we may keep a record of your communication to help answer or resolve the matter you contacted us about. You can decide how much additional information you want to share with us in those cases.
You may also log into Vendor Services using your credentials for Epic's UserWeb, if applicable. If you do so, your contact information from the UserWeb will automatically be added to your User Account. Please review the UserWeb Privacy Policy for more information related to the UserWeb and UserWeb-Connected Sites, including the Vendor Services Developer Forums.
If you make a payment to Epic via Vendor Services, Epic may store your payment method information or tracking information related to electronic payments.
When you communicate with us or access Vendor Services through a browser, application, or other client, our servers automatically collect and record information. In most cases, this information is generated by various tracking technologies, such as "cookies," "flash LSOs," "web beacons" or "clear GIFs." You can read more about how we use cookies below.
Your browser or device may tell us:
Your browser may also tell us information such as:
Like many websites, we use cookies to recognize you and collect information about your access to and use of Our Website. Cookies are small data files that are placed on your computer when you visit a website. Cookies are widely used by many website owners to make their websites work, operate more efficiently, and collect information. We use cookies to help operate Our Website, and we specifically use Google Analytics cookies. Our use of the Google Analytics cookie enables us to collect certain data about your visits to Our Website, including:
You have the right to decide whether to accept or reject certain cookies. You can exercise your cookie rights by adjusting cookie usage in your browser settings. You may also prevent the Google Analytics cookie from being placed in your browser by clicking "Decline" on the cookie banner at the button of this webpage. You may also change your decision to accept or decline cookies by visiting your cookie settings. Google's ability to share and use your information collected via Google Analytics is restricted by the commitments made in the Google Analytics Terms of Service and the Google Privacy Policy.
Some web browsers and operating systems include a Do-Not-Track (DNT) setting that you can activate to signal your preference not to have information about your online activities monitored. There is currently no uniform standard for recognizing and implementing DNT signals. As a result, Vendor Services does not respond to DNT signals. If a standard for recognizing DNT signals is adopted in the future and we follow that standard, we will inform you about our approach in an update to this Privacy Policy.
The information that you directly provide us, whether through the creation of a User Account or in other ways as you use Vendor Services, will be processed by Epic for as long as you are enrolled in, and after you cease using, Vendor Services. We will use your information for purposes such as:
For users of Vendor Services based in Europe, Epic has a legitimate interest in processing your data in order to allow you to use Vendor Services.
When you provide your information to Epic via Vendor Services, your information will be accessed by Epic staff, and your contact information may be made available to Epic's customers. The Epic staff that will regularly access your information is limited to those that provide technical or operational support for Vendor Services, those that develop Vendor Services, and Epic's information technology and operations teams.
Epic will retain your information for as long as it makes use of such information as a part of your continued use of Vendor Services and to carry out Epic's legitimate business or legal purposes. By creating a User Account, you agree to allow us to retain your information in accordance with this policy.
If you are a data subject as defined by the General Data Protection Regulation, (EU) 2016/679, you have a number of rights and can do any of the following by contacting Epic at EUPrivacyInquiries@epic.com:
Please note that if you contact us to assist you, for your safety and ours, we may need to authenticate your identity before fulfilling your request.
We use a combination of process, technology, and physical security controls to help protect your information from unauthorized access, use, or disclosure, but remember that no method of transmission over the Internet, or method of storage, is 100% secure.
When we collect your information through operation of Vendor Services, that information is encrypted and transmitted to us in a secure way. You can verify this by looking for a closed lock icon at the top or bottom of your web browser, or looking for "https" at the beginning of the URL address of the web page. Employees or partners of Epic who have access to your personal information in connection with providing Vendor Services are required to keep the information confidential and are not permitted to use your information for any purpose other than carrying out the services they are performing.
Vendor Services may contain links to other websites beyond the control of Epic. Epic is not responsible for the content or privacy practices of those websites. We encourage you to be aware when you leave Epic's websites and to read the privacy statements of any other website that collects your information.
If you are a California resident, California law may provide you with additional rights regarding our use of your personal information. To learn more about your California privacy rights, visit our CCPA privacy notice for California residents.
If you have questions or concerns about this privacy policy, please contact us at PrivacyInquiries@epic.com. When you contact us please include the website or reason that led you to contact us.
If you need to contact Epic's Data Protection Officer or EU Representative as defined by the General Data Protection Regulation, (EU) 2016/679, please email EUPrivacyInquiries@epic.com or call +1 608-271-9000.
We use cookies to improve our website. By accepting, you will receive these cookies from Vendor Services. Decline if you wish to use Vendor Services without these cookies. Read our privacy policy here.
open.epic APIs
Interoperability Request Form
