HECVAT Category

Privacy

How personal data is processed and protected. Covers GDPR, CCPA, FERPA and other frameworks, plus data residency, privacy notices and third-party data handling.

Categories

Explore the categories within the Privacy tab

Instructions for Solution Providers

Instructions for Solution Providers covers controls and questions related to that domain.

It outlines expectations institutions typically require from vendors.

The category helps assess risk posture and operational maturity.

It provides structure for consistent evaluation during security reviews.

Data Privacy

Data Privacy covers controls and questions related to that domain.

It outlines expectations institutions typically require from vendors.

The category helps assess risk posture and operational maturity.

It provides structure for consistent evaluation during security reviews.

General Information

General Information covers controls and questions related to that domain.

It outlines expectations institutions typically require from vendors.

The category helps assess risk posture and operational maturity.

It provides structure for consistent evaluation during security reviews.

Privacy of Sensitive Data

Privacy of Sensitive Data covers controls and questions related to that domain.

It outlines expectations institutions typically require from vendors.

The category helps assess risk posture and operational maturity.

It provides structure for consistent evaluation during security reviews.

Privacy of Third Parties

Privacy of Third Parties covers controls and questions related to that domain.

It outlines expectations institutions typically require from vendors.

The category helps assess risk posture and operational maturity.

It provides structure for consistent evaluation during security reviews.

International Privacy

International Privacy covers controls and questions related to that domain.

It outlines expectations institutions typically require from vendors.

The category helps assess risk posture and operational maturity.

It provides structure for consistent evaluation during security reviews.

Privacy Change Management

Privacy Change Management covers controls and questions related to that domain.

It outlines expectations institutions typically require from vendors.

The category helps assess risk posture and operational maturity.

It provides structure for consistent evaluation during security reviews.

Date Completed

Date Completed covers controls and questions related to that domain.

It outlines expectations institutions typically require from vendors.

The category helps assess risk posture and operational maturity.

It provides structure for consistent evaluation during security reviews.

Privacy Policies and Procedures

Privacy Policies and Procedures covers controls and questions related to that domain.

It outlines expectations institutions typically require from vendors.

The category helps assess risk posture and operational maturity.

It provides structure for consistent evaluation during security reviews.

General Privacy

General Privacy covers controls and questions related to that domain.

It outlines expectations institutions typically require from vendors.

The category helps assess risk posture and operational maturity.

It provides structure for consistent evaluation during security reviews.

Privacy and AI

Privacy and AI covers controls and questions related to that domain.

It outlines expectations institutions typically require from vendors.

The category helps assess risk posture and operational maturity.

It provides structure for consistent evaluation during security reviews.

Required Questions

Required Questions covers controls and questions related to that domain.

It outlines expectations institutions typically require from vendors.

The category helps assess risk posture and operational maturity.

It provides structure for consistent evaluation during security reviews.

ResponseHub is the product I wish I had when I was a CTO

Previously I was co-founder and CTO of Progression, a VC backed HR-tech startup used by some of the biggest names in tech.

As our sales grew, security questionnaires quickly became one of my biggest pain-points. They were confusing, hard to delegate and arrived like London busses - 3 at a time!

I'm building ResponseHub so that other teams don't have to go through this. Leave the security questionnaires to us so you can get back to closing deals, shipping product and building your team.

Signature
Neil Cameron
Founder, ResponseHub
Neil Cameron