Security.
Our Commitment to You.
We never take a lighthearted tone when it comes to security. We understand that you’re the steward of a wealth of sensitive information, from student records to research data and financial information. The responsibility to protect this information is significant, and at Kuali, we understand the weight of this responsibility. Our security measures are designed to ensure that the data you store on our platform are fully protected.
SOC 2 Type 2 Compliant
We’re proud of having achieved SOC 2 Type 2 compliance. We view it as more than just a badge. It represents our commitment to security, privacy, and data protection. By meeting these high standards, we offer our partners in higher ed a trusted platform, certified by a proven framework for managing and securing data.
HECVAT Full v4.x
Kuali has completed the Higher Education Community Vendor Assessment Toolkit (HECVAT) Full v4.x, the latest version of the higher ed security assessment framework developed by EDUCAUSE, Internet2, and REN-ISAC.
The HECVAT helps institutions evaluate a vendor’s information security, privacy, and compliance posture consistently and transparently. Our completed HECVAT demonstrates Kuali’s ongoing commitment to safeguarding institutional and student data while supporting the rigorous standards of higher education IT.
The HECVAT Full report for Kuali is available under NDA upon request.
TX-RAMP Authorized
Kuali is proud to be authorized under the Texas Risk and Authorization Management Program (TX-RAMP). This state-level certification affirms that Kuali meets the rigorous security and compliance standards required for cloud services used by Texas state agencies and public institutions of higher education.
The TX-RAMP program, developed and managed by the Texas Department of Information Resources (DIR), standardizes the security assessment and authorization process for cloud technologies to reduce risk and increase efficiency across the state.
By achieving TX-RAMP authorization, Kuali reaffirms its commitment to the data privacy, security, and compliance needs of our Texas-based partners and demonstrates our dedication to supporting secure, scalable, and compliant solutions in higher education.
For more information on TX-RAMP, visit the Texas DIR website.
Our Approach
Security isn’t a one-time event for us. It’s a continuous process of improvement and vigilance. Here are the key steps we take to ensure the security and integrity of our products:
- Data Encryption: We employ strong encryption protocols for data at rest and in transit, providing robust protection against unauthorized access and ensuring that your data remains secure and confidential.
- Access Control and Authentication: We make sure that access to sensitive information is tightly controlled, with strong authentication measures in place to ensure that only authorized personnel can access critical data, based on their specific roles and responsibilities.
- Regular Security Training: Our team receives ongoing training in the latest security practices and threats. This culture of security awareness ensures that everyone at Kuali is equipped to contribute to our secure operating environment.
- Vulnerability Scanning: We regularly use 3rd-party services to scan our source code, our dependencies and our systems. Found issues are categorized by severity and risk and addressed accordingly.
- Backup: All system data and system components are backed up to remote locations in encrypted locations. We regularly test and validate our backup and restore processes.
- Availability: We have redundancy built in at each system layer. We also have disaster recovery plans in place which are tested at least annually.
Our Promise
From our years working closely with higher ed, we understand the challenges you face. We’re dedicated to offering you peace of mind through a platform built on a foundation of security. Experience the difference with Kuali. Let us help you navigate the complexities of higher education administration with confidence and security.