When requesting a VPAT and HECVAT from a vendor, you can use this template to explain your needs when contacting them.
See Cybersecurity (HECVAT) and Accessibility (VPAT) Requirements for Technology Purchases for more information.
Vendor VPAT and HECVAT request template
Copy/paste the following text, and replace [NAME OF PRODUCT] with the name of the specific product that you are planning to purchase:
The University of Arkansas requires both a cybersecurity review and an accessibility review for technology purchases. The Higher Education Community Vendor Assessment Toolkit (HECVAT) is used for the cybersecurity review, and the Voluntary Product Assessment Template (VPAT) is used for the accessibility review.
I would like to purchase [NAME OF PRODUCT], but the university does not have a current VPAT or HECVAT for this product. Please send me a copy of the VPAT and HECVAT for this product.
If you do not currently have a VPAT or HECVAT for this product, please have your security team complete the HECVAT and have your development team complete the VPAT for [NAME OF PRODUCT] and send the VPAT and HECVAT to me. The templates can be found here: