HECVAT412.xlsx

	A	B	C	D	E	F	G
2	HECVAT™ Solution Provider Response - Start Here					Version 4.1.2
3	Date Completed		5/7/2026
4	Instructions for Solution Providers
5	1. Complete the "Start Here" tab and review the "Required Questions" guidance to find the other sections are required for your product or service.
6	2. Complete the "Organization" tab and the applicable questions in each of the next 5 tabs (Product through Privacy) that apply, based on your answers to the "Required Questions."
7	3. Guidance in column E may change based on your answers to prompt details in "Additional Information." If leaving an answer blank, you must also state why in "Additional Information".
8	4. DO NOT complete any fields in the "Evaluation" sheets or the "Analyst Notes" column.
9	5. Return the completed file to institutions.
10	* Denotes critical questions. Critical questions are those deemed most important to institutions by higher education volunteers.
11	For full instructions, please visit educause.edu/HECVAT
12	General Information
13	GNRL-01	Solution Provider Name	Practivated Inc.
14	GNRL-02	Solution Name	Practivated
15	GNRL-03	Solution Description	Practivated is the first AI-powered fundraising coach and donor conversation simulator built specifically for fundraisers. It gives you a private, judgment-free space to practice high-stakes conversations, get real-time coaching, and build confidence, so you’re always ready when it counts. Whether you’re a solo fundraiser, part of a large development team, or leading a university advancement shop, Practivated is designed for you. It supports individuals and teams across nonprofits, higher ed, and healthcare who want to strengthen donor relationships and improve fundraising outcomes.
16	GNRL-04	Solution Provider Contact Name	John Karlo Torres
17	GNRL-05	Solution Provider Contact Title	Managing Director
18	GNRL-06	Solution Provider Contact Email	johnkarlo@practivated.com
19	GNRL-07	Solution Provider Contact Phone Number	(415) 917-1197
20	GNRL-08	Country of Company Headquarters	USA
21	GNRL-09	Employee Work Locations (all)	Practivated is a fully remote 9-person team. Internal employees are US-based. Engineering capacity is supplemented by contract software engineers placed via US-incorporated staffing companies (Inbar LLC DBA TechTeems and Tecla); some contract engineers are located outside the US. All contractors are subject to written confidentiality agreements, role-based access controls, audit logging, and security training. Specific country locations may change as staffing changes; current locations available upon request.
22	Company Information		Answer	Additional Information	Guidance	Analyst Notes
23	COMP-01	Do you have a dedicated software and system development team(s) (e.g., customer support, implementation, product management, etc.)?*	Yes	Yes. Practivated has a dedicated software development organization that handles engineering, product development, and platform operations. Our core development function is led by our Chief Technology Officer, who oversees application engineering, infrastructure, security, and release management. The engineering team includes full-stack developers responsible for feature development, integration work, and system maintenance. We maintain dedicated roles for product management and customer support, ensuring that feature planning, onboarding, and customer needs are managed separately from core engineering work. While lean in structure, the team operates with clear ownership boundaries and a modern SaaS development workflow, including CI/CD, automated testing, and structured release processes.	Describe the structure and size of your software and system development teams. (e.g., customer support, implementation, product management, etc.).
24	COMP-02	Describe your organization’s business background and ownership structure, including all parent and subsidiary relationships.	Practivated Inc. is a Delaware C-Corporation incorporated February 2025. Headquartered at 1319 Ward Street, Berkeley, California 94702, United States. Fully remote 9-person internal team (US-based). Engineering capacity is supplemented by contract software engineers placed via US-incorporated staffing companies (Inbar LLC DBA TechTeems and Tecla); some contract engineers are located outside the US. Independent corporation with no parent or subsidiary relationships.		Include circumstances that may involve offshoring or multinational agreements.
25	COMP-03	Have you operated without unplanned disruptions to this solution in the past 12 months?	Yes
26	COMP-04	Do you have a dedicated information security staff or office?	Yes	Practivated’s information security function is led by our Chief Technology Officer, who serves as the organization’s dedicated security lead. While we do not maintain a separate information security office, the CTO oversees all aspects of security, including infrastructure protection, access control, secure development practices, vendor management, incident response, and compliance planning. Royi Haddad, our CTO, brings deep experience in cloud engineering, application security, and scalable SaaS architecture. He is responsible for establishing and maintaining security controls, reviewing third-party services, and guiding the implementation of security best practices across the engineering team.	Describe your information security office, including size, talents, resources, etc.
27	COMP-05	Use this area to share information about your environment that will assist those who are assessing your company's data security program.	Practivated’s information security program is overseen by our Chief Technology Officer, who serves as the organization’s designated security lead. The CTO is responsible for security strategy, data protection controls, vendor and infrastructure oversight, and ongoing compliance activities. Security practices are integrated into our engineering and product development workflows, including access controls, data handling standards, and routine monitoring of our cloud environment. While we do not maintain a standalone security office, all security functions are centralized under the CTO to ensure consistent governance and clear accountability.		Share any details that would help information security analysts assess your solution.		End Table Data
28	Required Questions		Answer	Additional Information	Guidance	Analyst Notes
29	REQU-01	Are you offering a cloud-based product?	Yes		DO complete the Product and Infrastructure worksheets
30	REQU-02	Does your product or service have an interface?	Yes		DO complete the IT Accessibility worksheet.
31	REQU-03	Are you providing consulting services?	No		DO NOT complete the Consulting section in the Case-Specific worksheet
32	REQU-04	Does your solution have AI features, or are there plans to implement AI features in the next 12 months?	Yes		DO complete the Artificial Intelligence (AI) worksheet
33	REQU-05	Does your solution process protected health information (PHI) or any data covered by the Health Insurance Portability and Accountability Act (HIPAA)?	No		DO NOT complete the HIPAA section in the Case-Specific worksheet
34	REQU-06	Is the solution designed to process, store, or transmit credit card information?	No	Practivated does not process, store, or transmit credit card data. All payment information is entered directly into Stripe’s PCI-compliant platform and never passes through our systems.	DO NOT complete the PCI-DSS section in the Case-Specific worksheet
35	REQU-07	Does operating your solution require the institution to operate a physical or virtual appliance in their own environment or to provide inbound firewall exceptions to allow your employees to remotely administer systems in the institution's environment?	No		DO NOT complete the On-Prem section in the Case-Specific worksheet
36	REQU-08	Does your solution have access to personal or institutional data?	Yes	Yes — the platform stores basic user profile information and AI-generated conversation transcripts. We do not handle sensitive or regulated data such as financial account numbers, government IDs, or protected health information. Organizational standards uploaded by clients are stored only for the purpose of generating aligned coaching feedback.	DO complete the Privacy tab		End Table Data
37	Note: The "Organization" tab is required for ALL products and services.
38	Copyright © 2025 EDUCAUSE
40
41
42
43
44
45
46
47
48
49
50
51
52
53
54
55
56
57
58
59
60
61
62
63
64
65
66
67
68
69
70
71
72
73
76
77
78
79
80
81
82
83
84
85
86
87
88
89
90
91
92
93
94
95
96
97
98
99
100
101
102
103
104