Purdue Global - HECVAT.xlsx

	A	B	C	D	E	F	G
2	HECVAT™ Solution Provider Response - Start Here					Version 4.1.4
3	Date Completed
4	Instructions for Solution Providers
5	1. Complete the "Start Here" tab and review the "Required Questions" guidance to find the other sections are required for your product or service.
6	2. Complete the "Organization" tab and the applicable questions in each of the next 5 tabs (Product through Privacy) that apply, based on your answers to the "Required Questions."
7	3. Guidance in column E may change based on your answers to prompt details in "Additional Information." If leaving an answer blank, you must also state why in "Additional Information".
8	4. DO NOT complete any fields in the "Evaluation" sheets or the "Analyst Notes" column.
9	5. Return the completed file to institutions.
10	* Denotes critical questions. Critical questions are those deemed most important to institutions by higher education volunteers.
11	For full instructions, please visit educause.edu/HECVAT
12	General Information
13	GNRL-01	Solution Provider Name
14	GNRL-02	Solution Name
15	GNRL-03	Solution Description
16	GNRL-04	Solution Provider Contact Name
17	GNRL-05	Solution Provider Contact Title
18	GNRL-06	Solution Provider Contact Email
19	GNRL-07	Solution Provider Contact Phone Number
20	GNRL-08	Country of Company Headquarters
21	GNRL-09	Employee Work Locations (all)
22	Company Information		Answer	Additional Information	Guidance	Analyst Notes
23	COMP-01	Do you have a dedicated software and system development team(s) (e.g., customer support, implementation, product management, etc.)?*
24	COMP-02	Describe your organization’s business background and ownership structure, including all parent and subsidiary relationships.			Include circumstances that may involve offshoring or multinational agreements.
25	COMP-03	Have you operated without unplanned disruptions to this solution in the past 12 months?
26	COMP-04	Do you have a dedicated information security staff or office?
27	COMP-05	Use this area to share information about your environment that will assist those who are assessing your company's data security program.			Share any details that would help information security analysts assess your solution.		End Table Data
28	Required Questions		Answer	Additional Information	Guidance	Analyst Notes
29	REQU-01	Are you offering a cloud-based product?			If you are only offering a service, or are offering a product that is not cloud-based, answer "no".
30	REQU-02	Does your product or service have an interface?			This includes any interface for end users and interfaces used by administrators at the institution.
31	REQU-03	Are you providing consulting services?
32	REQU-04	Does your solution have AI features, or are there plans to implement AI features in the next 12 months?
33	REQU-05	Does your solution process protected health information (PHI) or any data covered by the Health Insurance Portability and Accountability Act (HIPAA)?			Answer "yes" if your solution handles personal health information (PHI), either directly or via a third party.
34	REQU-06	Is the solution designed to process, store, or transmit credit card information?			Answer yes if your solution handles PCI (credit card) information, either directly or via a third party.
35	REQU-07	Does operating your solution require the institution to operate a physical or virtual appliance in their own environment or to provide inbound firewall exceptions to allow your employees to remotely administer systems in the institution's environment?
36	REQU-08	Does your solution have access to personal or institutional data?			This includes patient data, student data, employment data, human research data, financial data, etc.		End Table Data
37	Note: The "Organization" tab is required for ALL products and services.
38	Copyright © 2025 EDUCAUSE
40
41
42
43
44
45
46
47
48
49
50
51
52
53
54
55
56
57
58
59
60
61
62
63
64
65
66
67
68
69
70
71
72
73
76
77
78
79
80
81
82
83
84
85
86
87
88
89
90
91
92
93
94
95
96
97
98
99
100
101
102
103
104