More

IT or technology related contracts and agreements

As part of UAB’s contract review process, UAB IT is responsible for reviewing any University contract that includes an IT or technology related component prior to contract execution. We review security protocols in the system or solution as well as identify IT resources needed for the purchase, such as single sign-on, installation, etc.

Get Started

1. Confirm

1. Confirm

Please confirm you have the required documents listed below. 

2. IT Request

2. IT Request

Fill out the product/contract review form to send your request to IT.

3. Final Submission

3. Final Submission

Once the contract has been approved by IT, submit your contract through UAB's Contract Management System for legal review. (Note: You will need your ServiceNow RITM number (EX. RITM01000000) to submit the contract.) 

Required Documents for a Product/Contract Review

  • Approval from your data steward (not sure who your data steward is, please see here)
  • Data Security Risk Assessment (HECVAT Full) - Restricted and Sensitive Data
    If the data that your tool will store or connect with is Restricted and/or Sensitive, use the full version of the Data Security Risk Assessment form.
  • Data Security Risk Assessment (HECVAT Lite) - Sensitive Data Only
    If the data that your tool will store or connect with is Sensitive, you can use the lite version of the Data Security Risk Assessment form. This form is not approved for Restricted data.
  • Use Case Scenario

Estimated Turnaround Time

Turnaround Time is determined by the type of data that will be stored or used in any IT-Related contract and all required documentation has been provided. Our Enterprise Information Security Office will review contracts with data identified as Sensitive and Restricted. Below are the estimated turnaround times: 

  • Public Data - 1-2 business days 
  • Sensitive Data - 5-7 business days 
  • Restricted/PHI Data* - Dependent on vendor 

*Reviewed by UAB Health System Information Services. 

Additional resources

  • Tips for Contract Success
  • Addendums
    • Basic - No hosting of data or web development/hosting
    • Hosting - Includes additional language when UAB data is being hosted/transmitted/processed by a third party
    • Web - Includes additional language for web site branding, technical requirements and 508 compliance
    • Full - Includes both hosting and web language