Compliance and Certifications
You deserve the certainty that you're working with a competent and honest partner.
PCI Compliance
Attestation of Compliance - AlumnIQ Platform
AlumnIQ maintains documentation on PCI 4.0 SAQ-D for Service Providers. While we do not store (nor transit) payment information across our services, we document compliance with this more thorough standard. Our next PCI AOC update will be February 2025.
AOC - AlumnIQ Platform
Attestation of Compliance - AlumnIQ Signature Events Service
AlumnIQ maintains documentation on PCI 4.0 SAQ-D for Service Providers. While we do not store (nor transit) payment information across our services, we document compliance with this more thorough standard. Our next PCI AOC update will be February 2025.
AOC - AlumnIQ Signature
SOC 2 Type 2
SOC 2 Type 2 Report
Our first ever SOC 2 Type 2 audit covered the period October-December 2023 and measured against the Security and Privacy TSCs. Our next audit is expected to be complete in February 2025 and cover the entirety of calendar year 2024.
Our 4Q23 audit report can be shared following the signing of a mutual NDA.
Email our security team to initiate the process.
VPAT/HECVAT
VPAT
The Voluntary Product Accessibility Template is a convenient way to document compliance with human-centric standards for web products serving diverse audiences.
AlumnIQ sets WCAG 2.0 Level AA as our minimum standard and attempts to meet Level AAA standards whenever possible for all public interfaces.
VPAT
HECVAT
The Higher Education Community Vendor Assessment Toolkit is a massive time saver for institutional IT and advancement services teams responsible for vendor vetting.
Our HECVAT 3.06 spreadsheet can be shared following the signing of a mutual NDA.
Email our security team to initiate the process.
Privacy Policies
General Privacy
AlumnIQ's general privacy policy governs use of this website, our online documentation, and participation in any training sessions.
As we have no interest in gathering personal information to share with anyone outside of our team, the policy makes it clear we do no such thing.
General Privacy Policy
GDPR Data Protection Addendum
This document includes our contract addendum for any services agreement put in effect by AlumnIQ and a customer related to GDPR compliance including standard contract terms.
GDPR DPA and SCC
AlumnIQ Platform Privacy
The AlumnIQ Platform captures and processes constituent information necessary to register for events, make gifts, purchase memberships, and pass on address updates (among other uses).
None of this data belongs to AlumnIQ but we do hold the protection of this information as a critical task. Our subprocessors will use certain data elements to deliver key functions of our system, and none retain the data for their own use. Nor do we.
Platform Privacy Policy
AlumnIQ Signature Events Privacy
The AlumnIQ signature events system captures and processes constituent information necessary to register for major university events, (optionally) make gifts, and pass on address updates.
None of this data (nor the data we generate) belongs to AlumnIQ but we do hold the protection of this information as a critical task. Our subprocessors will use certain data elements to deliver key functions of our system, and none retain the data for their own use. Nor do we.
Signature Events Privacy Policy