SECURITY, PRIVACY & ACCESSIBILITY
Confidence for your
institution’s review.
Explore accessibility, payment security, privacy, identity integration, and hosting resources for your procurement team.
01WCAG accessibility
Timely’s accessibility documentation covers WCAG 2.1 Level AA and Section 508 conformance. Review the current VPAT / Accessibility Conformance Report for the workflows in your evaluation.
Read the accessibility statement ↗Request WCAG / VPAT documentation ↗02Security & privacy compliance
Review Timely’s privacy policy and request information about data protection, encryption, access controls, and applicable privacy obligations. A Data Processing Agreement is available for review.
Read the privacy policy ↗Discuss security & privacy requirements ↗03PCI DSS payment security
Timely supports payments through PCI DSS-certified processors. Request the applicable PCI SAQ attestation and confirm the payment security scope for your proposed configuration.
Request PCI documentation ↗04HECVAT for higher education
Support your university or college’s cloud vendor assessment with Timely’s completed HECVAT Full and Lite questionnaires, available by request.
Request HECVAT materials ↗05Single sign-on with SAML 2.0
Integrate Timely with your institution’s identity provider through SAML 2.0 single sign-on. Our team coordinates setup and reviews your authentication requirements.
Discuss SSO integration ↗06Regional hosting & data residency
Bring your regional hosting and data residency requirements into the evaluation. Our team will confirm available hosting options and the contractual scope for your deployment.
Discuss regional hosting ↗07SIP2 integration for libraries
Let patrons sign in with their library card and PIN/password through a compatible Integrated Library System (ILS). SIP2 supports patron identity and credential validation, with connection setup coordinated by Timely.
Explore library use cases ↗Discuss SIP2 integration ↗08Security review & continuity
Request security and architecture information, network security policies, and disaster recovery documentation. Include any additional questionnaires your reviewers need.
Request security review materials ↗