Trust Center
HECVAT Lite, published and ready for your review.
Start institutional security review with a published questionnaire and a clear path to the supporting documents.
What is HECVAT, and why do institutions ask for it?
The Higher Education Community Vendor Assessment Toolkit helps institutions assess the security and privacy of services they are considering. It gives procurement, IT and privacy teams a common set of questions instead of starting each vendor review from scratch.
A questionnaire is a starting point for due diligence, not a certification or a substitute for the institution's own assessment. Review the answers against the proposed exam workflow, the information collected and your requirements for access and retention.
Where is the ScreenComply HECVAT Lite published?
ScreenComply's HECVAT Lite is published to the EDUCAUSE Cloud Broker Index. It supports an initial review of our application and data handling, alongside a discussion of the deployment your institution is considering.
Ask for the current questionnaire and supporting documentation before relying on an earlier copy. Your reviewers can raise follow-up questions with our team and identify any requirements that need to be addressed in the agreed deployment.
How do you request the full questionnaire?
Contact our team with your institution's review requirements and the assessment workflow you are evaluating. Tell us whether your process calls for HECVAT Full, the complete published Lite questionnaire or a separate institution-specific questionnaire.
The published document is HECVAT Lite. Do not assume that a completed HECVAT Full is available; our team will confirm the requested document and scope with you.
What else belongs in your review?
The Trust Center connects security posture, student data handling, responsible AI and accessibility information. Consider these together with your own policies for student notice, accommodations, access to evidence and appeals.
Security documentation and the VPAT provide complementary information. Ask for the current versions and a data processing agreement so your review reflects the intended deployment rather than a generic product description.
Frequently Asked Questions
Is the HECVAT Full available?
The published questionnaire is HECVAT Lite. Contact our team if your review requires HECVAT Full so we can confirm availability and the work needed; publication of Lite does not imply Full has been completed.
Do you complete institution-specific security questionnaires?
Bring your institution-specific questionnaire to our team. We can review its scope with your security and procurement contacts and agree how to address the requested information.
How current is it?
Request the current version for your evaluation or renewal. Our team can confirm the questionnaire version and explain relevant changes to the product or data handling rather than asking you to rely on an undated copy.
Who do we contact?
Use the contact page or email security@screencomply.ai with your questionnaire request. Include the assessment workflow and the documents your reviewers need so the response can address your review.
Documentation. Context. Human Review.
Bring your review requirements to the conversation.
Discuss the assessment workflow, data handling and documentation your team needs to make an informed decision.