Higher Education Community Vendor Assessment Toolkit (Free Template) | UpGuard

This document is a HECVAT 4 vendor security questionnaire for a higher-education-focused SaaS platform that outlines the provider's security program, compliance certifications (SOC 2, ISO 27001), data protection measures (encryption, KMS, private subnets), identity and access controls (SSO, MFA, RBAC), incident response and vulnerability management processes, third-party management, and AI/privacy practices. It provides assurances and references to artifacts available under NDA but contains no incident details, exploitation evidence, or technical indicators.