(UB)
Office of the VPCIO
University at Buffalo (UB)
Office of the VPCIO
UB Information Technology
MyUB / HUB
UBmail
Help

Software and Web-based Services Review

Learn more about the review process:  what it is, how to request a review and how to use the Software Catalog.

On this page:

About

UB's Software and Web-based Services Review is required to comply with federal and state regulations, SUNY and UB (University at Buffalo) policies, and industry best practice.

The goal is to identify potential problems before software is acquired or used to avoid serious consequences.

Our team of experts stay current on compliance requirements for accessibility, data security and business impact. The team consists of members from VPCIO staff and the Electronic and Information Technology Accessibility Officer.

What kind of software requires a review?

  • Desktop applications
  • Third party add-ins/plug-ins
  • Web-based services (hosted software)
  • Server-based software requiring installation on UB servers
  • Any service or software accessed by students or the public via UB or third-party websites
  • Any software that contains or exchanges Personal Identifiers (PID) or HIPAA data
  • Any upgrade from current on-premises to cloud-based services or software
  • Open source, freeware, shareware, and no-charge products

Note: This review process applies to software with an expected value of less than $150,000 (calculated over the full term of the contract), regardless of funding source. Software acquisitions that will be competitively bid, or that have an expected value of $150,000 or greater, should be coordinated through Procurement. In these cases, software review requirements are addressed as part of the procurement process

When to initiate a software review

 A software review can be initiated at any time:

  • When a faculty or staff person identifies a software need.
  • When a department is ready to move forward with a purchase or renewal.
  • When several products are being considered and a review could potentially help determine which product meets the data security and accessibility requirements.
Questions?

Contact vpcio-software-review@buffalo.edu