Written and maintained by CASRAI Editorial Board
Last updated
A medical-supply distributor’s product page shows a “BBB Accredited Business” seal and a 4.7-star Google rating next to hundreds of reviews. Both look like evidence the vendor is trustworthy — and in a narrow sense, they are. Neither one, on its own, tells you anything about whether the vendor’s products are compliant with the regulations that apply to what you’re buying, whether its shipments arrive on time, or whether its quality documentation will survive an audit. Third-party ratings and documented compliance credentials answer different questions. This guide separates the two, so a procurement evaluator can weight each signal correctly instead of treating a rating badge as a substitute for the verification work it wasn’t designed to do.
What a BBB Rating Actually Measures
BBB (Better Business Bureau) accreditation is a paid membership program, not a free or automatic designation. To qualify, a business generally must have been operating for a minimum period, hold the licenses its industry requires, have no unresolved government actions suggesting an ethics violation, and agree to uphold BBB’s eight Standards for Trust (build trust, advertise honestly, tell the truth, be transparent, honor promises, be responsive, safeguard privacy, and embody integrity) — plus, BBB requires accredited businesses to maintain at least a B rating at every company-owned location and headquarters.
The letter-grade rating (A+ through F) itself is a separate mechanism from accreditation, and BBB assigns ratings to accredited and non-accredited businesses alike. In practice, the rating is driven substantially by a business’s complaint history relative to its size and time in business, and — critically — by whether the business responds to and resolves the complaints filed against it through BBB’s own dispute-resolution process. A business can rack up complaints and still hold a high rating if it consistently resolves them; a business with few complaints but no response pattern established yet may rate differently.
What a BBB rating is not: it is not a product-quality inspection, not a certification of regulatory compliance (FDA registration, state pharmacy/wholesale distributor licensure, ISO certification), and not a technical evaluation of whether a specific product meets a specification. It measures how the business handles its customer-facing disputes and whether it operates within BBB’s ethical standards — a real but narrow slice of vendor trustworthiness.
What a Google Reviews Aggregate Score Actually Measures
A Google Business Profile’s star rating is a simple average of individually submitted 1-to-5-star ratings from anyone who chooses to leave one. Google’s review policies prohibit fake, incentivized, or otherwise manipulated reviews, and the platform does moderate and remove reviews that violate those policies — but that moderation targets manipulation, not accuracy. Google does not independently verify that a reviewer actually transacted with the business, and it does not fact-check the substance of what a genuine reviewer claims.
The aggregate number is also shaped by dynamics that have nothing to do with the vendor’s regulatory standing or product quality: review volume (a handful of reviews is statistically noisy in a way hundreds are not), selection bias (customers with an unusually good or unusually bad experience are more likely to leave a review than a satisfied-but-neutral one), and how recently reviews were left relative to any operational changes at the vendor. A 4.7-star average built on reviews about responsive account managers and easy returns says little about whether the vendor’s lot-traceability records would hold up in an audit.
What a Google Reviews score is not: it is not a verification of regulatory compliance, certification validity, or whether the specific product line you need meets spec. It is self-reported customer satisfaction, aggregated with no independent check on the underlying claims.
Reputation Signals vs. Documented Compliance Signals
The useful distinction here is the same one CASRAI’s own reference content draws elsewhere when a vendor’s marketing describes itself as “HIPAA aware” rather than confirming it will actually sign a business associate agreement: a self-described or reputation-based claim and a documented, independently verifiable one are not interchangeable, even when they sound similar. “Highly rated” and “compliant” belong to different categories of evidence:
- Reputation-based signals (BBB rating, Google Reviews, similar aggregate-review platforms) describe how a business has handled its customer relationships and public complaints. They are self-reported or crowd-reported, unaudited against any technical standard, and about the seller’s general conduct — not about any specific product’s regulatory status.
- Documented compliance signals (an ISO 13485 certificate issued by an accredited certification body, an FDA establishment registration and device listing, a state wholesale distributor license, a current Certificate of Analysis) are issued by, or verifiable directly against, a named regulatory or standards authority. They describe the product’s or facility’s regulatory status, not the seller’s customer-service reputation.
A vendor can be genuinely well-regarded by customers and still be selling a product with a lapsed registration, or vice versa — the two facts are simply uncorrelated, because nothing about a BBB rating or a Google star average checks for the second one.
What Reputation Signals Are Genuinely Useful For
None of the above means these signals are worthless — they answer a real, if narrow, question well:
- Customer-service and dispute-handling culture. A pattern of unresolved complaints about billing, returns, or unresponsive account management is a legitimate red flag for how a vendor will behave when something goes wrong on your order — a genuinely useful thing to know before committing to a supply relationship, even though it says nothing about product compliance.
- A baseline legitimacy check. BBB accreditation at minimum confirms a business has been operating for a documented minimum period, holds applicable licenses, and voluntarily submitted to an ongoing standards program it can lose for violations. That’s a floor, not a ceiling, but it’s not nothing — particularly for ruling out a shell operation or a fly-by-night reseller.
- Directional signal from repeated, specific themes. Individual review scores are unverified, but a consistent, specific pattern across many reviews (repeated mentions of late shipments, repeated praise for a particular support process) is more informative than the star average alone. Read the actual text, not just the number.
Harder Evidence to Weight More Heavily
For anything that actually depends on regulatory status, product quality, or operational reliability, weight these above reputation scores:
- Documented certifications, verified independently. Don’t take a vendor’s claim of “ISO 13485 certified” at face value — ask for the certificate and confirm it’s current and was issued by an accredited certification body, the same discipline that applies to verifying an A2LA-accredited lab’s actual scope of accreditation rather than assuming the logo alone covers what you need.
- Direct references from comparable buyers. A reference call to another institutional buyer — ideally one purchasing comparable volume in a comparable setting — surfaces operational detail (delivery reliability, how backorders are communicated, how quality issues get resolved) that no rating platform captures.
- Documented delivery and quality track record. On-time delivery percentage, lot-traceability practices, and a defined complaint/corrective-action process, requested and reviewed directly rather than inferred from sentiment.
- Contractual terms in writing. Warranty language, return/RMA policy, and service-level commitments as actual contract terms, not as a theme extracted from review text.
A Simple Weighting Framework
| Signal | What it actually verifies | How much weight to give it |
|---|---|---|
| BBB accreditation / rating | Business ethics standards adherence and complaint-resolution track record | Low-to-moderate — a baseline legitimacy check, not a compliance check |
| Google Reviews aggregate score | Self-reported, unverified customer satisfaction | Low — directional only; read the actual review text, not the star average |
| Documented certifications (ISO, FDA registration, state licensure) | Regulatory/quality-system compliance status, independently issued | High — verify directly against the issuing body, don’t rely on a vendor’s self-description |
| References from comparable institutional buyers | Real-world delivery and service performance in a setting like yours | High |
| Written contract terms (warranty, RMA, SLAs) | Enforceable commitments, not sentiment | High |
Frequently Asked Questions
Does BBB accreditation mean a vendor is regulatory compliant?
No. BBB accreditation reflects adherence to BBB’s own ethical standards for business conduct and a track record of resolving customer complaints. It does not assess, and was never designed to assess, whether a vendor’s products meet FDA, state licensure, or ISO requirements. Those are separate, independently verifiable credentials.
Can a business simply pay for a good BBB rating?
Accreditation itself is paid, but the letter-grade rating is a separate mechanism driven by complaint volume and resolution history, and BBB assigns ratings to non-accredited businesses too. Paying the accreditation fee does not itself produce a high letter grade — a business still has to maintain a track record that earns it.
Are Google reviews verified purchases?
Not inherently. Google prohibits fake and incentivized reviews and removes ones that violate its policies, but it does not verify that every reviewer actually transacted with the business, nor does it fact-check the substance of a genuine review.
How much weight should reputation scores get in a formal vendor scorecard?
Treat them as one input among several, weighted toward customer-service and dispute-handling fit rather than product compliance or quality. For anything regulatory or quality-related, weight documented certifications, direct references, and written contract terms more heavily — see the framework above.
Related CASRAI Resources
- Laboratory Accreditation Bodies: Who Accredits Medical Laboratories, Compared — the formal, technical accreditation side of this distinction (ISO 15189, CLIA, A2LA), as opposed to the reputation-based ratings covered here.
- A2LA Accreditation: What It Covers and How to Evaluate an A2LA-Accredited Supplier — how to verify a documented technical accreditation rather than take a vendor’s claim at face value.
- Used Lab Equipment Dealers: How to Evaluate a Reseller Before You Buy — a related checklist for a specific high-risk vendor category, where business-legitimacy checks like BBB standing are one item among several.
- Total Cost of Ownership (TCO) in Medical Equipment Purchasing — for weighing a vendor decision on cost fundamentals beyond the initial quote.
- Laboratory Equipment & Instrumentation — the full hub for equipment selection, verification, and maintenance guidance.
