What is HECVAT and Why is it Important?
Anyone who works in higher education, or for a solution provider that serves colleges and universities, may have heard the term HECVAT…
Read More
Compliance & Security
Kivuto puts education first. We understand the information-security needs of academic institutions and their external clients and suppliers. Data privacy and security are infused in everything we do, and ensuring the confidentiality, integrity, and accessibility of information is a primary focus of our business.
Certifications
Microsoft Gold-Certified Partner
As a Microsoft Gold-Certified Partner, Kivuto employs application developers and information technology specialists who are certified in the use of the latest Microsoft technologies.
QAS International ISO/IEC 27001:2013
ISO 27001 certification demonstrates Kivuto’s commitment to secure data management and adherence to best practices for monitoring and continuously improving information security. We are audited for compliance annually by International Management Systems Marketing (IMSM).
Microsoft Cloud Solution Provider
As a Microsoft Cloud Solution Provider, Kivuto can engage closely with customers to create integrated cloud offerings tailored to their unique requirements, complete with full support and lifecycle management.
PCI DSS Certified
As a PCI DSS-compliant company, Kivuto handles credit card information in accordance with the strict security standards set by the PCI Standards Council. We are audited quarterly and comply with PCI-DSS Level 3 D-MERCH Version 3.2.1r1.0.
WCAG AA Compliant
Kivuto is committed to ensuring everyone can use our products and services. We are continually enhancing and improving our platform and websites to ensure we meet or exceed WCAG AA accessibility standards.
HECVAT
The Higher Education Community Vendor Assessment Tool (HECVAT) is a resource that helps academic institutions assess the ability of third-party vendors to protect their data and personally identifiable information. You can request a copy of Kivuto’s HECVAT here.
Keeping Your Information Secure
Privacy is a fundamental human right, and the security of your data is our top priority. Our policies, procedures, and technical solutions comply with the General Data Protection Regulation (GDPR), the Children’s Online Privacy Protection Act (COPPA), Canada’s Anti-Spam Legislation (CASL), and the CAN-SPAM Act of 2003.
