Documentation
HECVAT Full v3.0.6
Application/Service Security
APPL-08

Question APPL-08

Does your application require access to location or GPS data?

Weight25
High RiskYes
RequiredYes
Compliant AnswerNo

Standard Guidance

EDUCAUSE provides no guidance here

Answering "NO"

Please indicate any future plans that would require access to this data

Answering "YES"

Please describe the reasons why in detail and state if that access can be limited to while your app is running.

Reason for Question

Sharing location data significantly increases risk factors for users. It's important to understand if this is required.

Follow-Up Inquiries

Ask the vendor about the need for this requirement, and understand any mitigation strategies that may be possible.

HECVAT Pro Advice

[Add expert insights and best practices]

Implementation Tips

[Add practical steps for SME SaaS vendors]

FAQ

[Add common questions related to this HECVAT item]

Resources

[Add links to relevant articles or tools]