ECNO Security Solutions · VASP
Terms of Service
Last updated: 2026-09-29
Stratum is provided by ECNO Security Solutions as part of ECNO’s Vetting of Applications for Security and Privacy (VASP) service. These terms explain the conditions for using the platform and its review resources.
The service and your organization
Stratum supports application and vendor reviews, questionnaires, evidence management, security and privacy assessments, risk findings, and access to published reports. Access is provided to authorized ECNO personnel, participating organizations, and other approved users. Using the service means you agree to these terms and your organization’s applicable rules. Any separate VASP, membership, or service agreement with ECNO takes precedence if there is a conflict.
Authorized access and account security
Use only your assigned account and the information and functions you are authorized to access. Keep your credentials secure, do not share accounts, and promptly report suspected unauthorized access to ECNO or your organization’s administrator. Signing in through an identity provider does not, by itself, grant access to reviews or reports.
Responsible use
Use the platform for legitimate review, governance, and related service activities. Do not attempt to bypass permissions, disrupt the service, introduce malicious files, access another organization’s restricted information, or copy or distribute material without authorization. Submit only information you have authority to provide. Remove unnecessary personal information, especially identifiable student information, from documents and requests.
Submitted content and confidentiality
You and the relevant rights holders retain ownership of the material you submit. You authorize ECNO and its service providers to store, process, reproduce, and make that material available as needed to deliver the service, according to the applicable agreement and access permissions. You remain responsible for the accuracy, legality, and appropriate classification of your submissions.
Treat non-public reviews, vendor information, evidence, and reports as confidential. Share them only as permitted by ECNO, the applicable VASP agreement, your organization’s rules, and any third-party restrictions. Publishing a report within the service does not make it freely available for public redistribution. Personal information is handled as described in the Privacy Policy.
Reviews support your decisions
Reviews and risk findings reflect the information available and the scope of the assessment at the time. They support professional judgment; they are not legal advice, a certification, or a guarantee that an application is secure, compliant, or suitable for every use. Each participating organization remains responsible for its own approvals, legal obligations, risk acceptance, and implementation decisions.
Where enabled, Sera provides AI-assisted analysis, summaries, and answers within the user’s authorized scope. AI output can be incomplete or incorrect. Verify material findings and source references before relying on them. Human reviewers and your organization retain decision-making responsibility.
Platform and report rights
ECNO and its licensors retain their rights in the platform, branding, methodologies, and materials they provide. Your access permits use for the purposes allowed by your service arrangements; it does not transfer ownership or permit resale or unrestricted republication. Rights in vendor and other third-party materials remain with their respective owners.
Availability, beta features, and suspension
The service may include beta features and may change as it develops. Maintenance, provider outages, or security incidents may interrupt access. ECNO may restrict or suspend access to address misuse, security concerns, the end of an organization’s entitlement, or legal requirements, subject to any applicable service agreement.
Except as provided in an applicable agreement or required by law, the service and review materials are provided as available, without a promise of uninterrupted operation, complete accuracy, or fitness for a particular purpose. Any limits on liability in your organization’s agreement continue to apply. These terms do not exclude rights or obligations that cannot lawfully be excluded.
Updates and applicable law
ECNO may update these terms by posting a revised version with a new date and will communicate material changes through the service or the organization’s service contacts. Unless your agreement specifies otherwise, these terms are governed by the laws of Ontario and the applicable federal laws of Canada. Contact ECNO if you have questions before continuing to use the service.
Questions and requests
For questions about these terms, privacy, or your Stratum account, contact ECNO and identify your organization. Please do not include passwords, student records, or other sensitive documents in your initial email.
office@ecno.org