Educause HECVAT Vendor Assessment Tool Gets an Upgrade

Educause has announced HECVAT 4, the latest update to its Higher Education Community Vendor Assessment Toolkit.

HECVAT is a community-driven tool designed to help institutions evaluate solution providers against an institution's policies and appetite for risk, Educause explained in a news announcement. Version 4 was developed with extensive community feedback via surveys, conferences, and user testing.

Among the new features, Educause said:

  • A new set of questions evaluating solution providers' privacy practices and compliance, created by volunteers from Educause's Chief Privacy Officers Community Group;
  • A tab for a privacy analyst to provide input on a completed HECVAT;
  • New AI-specific questions developed by community volunteers;
  • The ability for institutions to customize their HECVAT review based on their individual requirements;
  • The HECVAT Full, Lite, and On-Prem versions have been combined in one file that guides solution providers on which questions apply to their offering;
  • Institutional Evaluation tabs allow users to select categories to include in a solution's score;
  • Institutions can mark items as "non-negotiable" and view those criteria in a new tab; and
  • A "high risk" score provides a lightweight solution evaluation.

Educause has launched a new HECVAT website in conjunction with the update, which offers improved training materials for both solution providers and institutions.

About the Author

Rhea Kelly is editor in chief for Campus Technology, THE Journal, and Spaces4Learning. She can be reached at [email protected].

Featured

  • man viewing holographic display of data and code

    Why Cross-Skilling Is the Smartest Investment a Campus IT Team Can Make

    Higher education IT teams are being asked to keep pace with AI, cloud, and cybersecurity on flat budgets, and hiring a specialist for every new need can no longer keep up. Building adjacent skills across the people already on staff creates more agile, resilient teams that move faster and retain talent without adding headcount. Pluralsight makes the strategy work through skill assessments, tailored learning paths, hands-on labs and sandboxes, and microlearning that fits into the flow of work.

  • Glowing digital padlock breaking into tiny cubic fragments over complex circuit board background

    Report: Basic Security Failures Continue to Fuel Enterprise Breaches

    Despite years of investment in cybersecurity technologies, many enterprise breaches still begin with familiar weaknesses, according to a new report from SonicWall.

  • VSLive! session

    VSLive! San Diego 2026 Puts AI at the Core of the Campus IT Stack

    For higher education IT teams working through AI pilots, ERP integrations, student-facing apps, analytics projects, and mounting security concerns, Visual Studio Live! San Diego 2026 offers a look at the development practices that are shaping the campus technology landscape.

  • A glowing digital brain with neural connections and light trails

    AI Giants Warn It May Be Time to Slow Down

    For years, leaders in the artificial intelligence industry have warned that increasingly capable AI systems could eventually become dangerous, all the while continuing to race to build them. Now, their sentiments have changed.