05 · The complete inventory
99 requirements.
Already handled.
The full checklist of security, compliance, legal, accessibility, LMS, payments, and institutional work Voshi manages for every app. You build the product. We handle the rest.
1–16
Compliance and security
- 01SOC 2 Type II
- 02Penetration testing
- 03Vulnerability management
- 04Encryption at rest
- 05Encryption in transit
- 06MFA enforcement
- 07Audit logging
- 08Access control review
- 09Personnel controls
- 10Disaster recovery
- 11Business continuity
- 12US-only data residency
- 13Uptime SLA
- 14Status page
- 15Incident response plan
- 16Change management
17–41
Procurement and vendor review
- 17HECVAT Full
- 18HECVAT Lite
- 19Campus questionnaires
- 20SIG
- 21CAIQ
- 22COI — cyber liability
- 23COI — errors and omissions
- 24COI — general liability
- 25W-9
- 26Jaggaer registration
- 27PaymentWorks onboarding
- 28Ariba registration
- 29Ownership disclosures
- 30Diversity disclosures
- 31Banking and remittance
- 32MSA negotiation
- 33Indemnification terms
- 34Limitation of liability
- 35Choice of law and venue
- 36Public records clauses
- 37Sovereign immunity review
- 38Annual vendor reassessment
- 39SOC 2 re-audit
- 40HECVAT refresh
- 41Pen test refresh
42–52
Accessibility
- 42VPAT / ACR authoring
- 43WCAG 2.1 AA
- 44WCAG 2.2 AA
- 45JAWS testing
- 46NVDA testing
- 47VoiceOver testing
- 48Keyboard navigation testing
- 49Color contrast audit
- 50Automated scanning
- 51Remediation roadmap
- 52Third-party audit letter
53–64
Legal, privacy, regulatory
- 53FERPA compliance
- 54Data processing agreements
- 55Subprocessor disclosure
- 56GDPR and UK GDPR
- 57CCPA / CPRA
- 58State privacy laws
- 59AI attestations
- 60Model transparency
- 61Breach notification
- 62Retention and deletion
- 63DMCA posture
- 64Content licensing
65–86
LTI and LMS integration
- 65LTI Advantage certification
- 66Deep Linking
- 67Names and Role Provisioning
- 68Assignment and Grade Services
- 69Dynamic registration
- 70Manual key exchange
- 71LTI 1.1 legacy support
- 72Canvas behavior
- 73Blackboard / Anthology behavior
- 74Moodle behavior
- 75D2L Brightspace behavior
- 76Sakai behavior
- 77Instructure partner program
- 78Anthology partner program
- 79D2L partner program
- 80Course copying
- 81Term rollover
- 82Cross-listed sections
- 83Gradebook column creation
- 84Regrades
- 85Late and excused submissions
- 86Points vs percentage
87–97
Payments and commerce
- 87PCI compliance
- 88Sales tax remittance
- 89Tax exemption certificates
- 90Student-pay billing
- 91Institution-pay billing
- 92Purchase orders
- 93Invoicing with net terms
- 94Refunds on drop/add
- 95Chargebacks and disputes
- 96Revenue recognition
- 97Royalty payouts
98–99
Support and relationships
- 98Tier-1 student support
- 99Signed school agreements
You build the app.
We handle everything on this list.
Voshi is onboarding in small groups so every product gets a real technical review. Join the waitlist and we’ll talk through what your app needs.