INSIGHTS

Field notes, not thought leadership.

Everything here comes from work we actually did — building, hosting, and securing software for education and human services programs.

SECURITY & COMPLIANCE · JULY 2026

How to fill out the HECVAT as a small vendor

Field notes from a solo founder who answered 300+ higher-ed security questions without a compliance team — which controls matter, how to answer honestly for what you don't have, and what reviewers actually look for.

Read the guide
More field notes coming — the admin-burden math of paper-based programs, and AI workflows for nonprofit teams. Follow along on X.