Data Security & Business Terms
There are two important aspects of software purchasing: Data security and business terms. Both are required for any software purchase! Download the flowchart linked below to help you navigate the software purchasing process.
Step 1: Data security
- Check the UC ANR Portal for a listing of software that have passed Vendor Risk Assessments (VRA).
- If you see the software/app you'd like to purchase on that list, note the Agreement Number (and Reassessment Date), and proceed to Step 2: Business Terms.
- If there's no Agreement Number on the VRA list, search for the Purchase Agreement in Aggie Enterprise Procurement.
- If you don't see the software/app you'd like to purchase on that list, fill out the VRA Request Form. Depending on the case, IT may require an additional data security appendix, called an Appendix DS.
- If UC ANR IT does not approve the VRA for the software/app, follow their instructions or select a different software/app.
Step 2: Business Terms
- Download (or take screenshots of) Terms & Conditions or Terms of Service. Do not accept any Terms & Conditions on your own, even when using your P-Card!
- Submit a Purchase Request Form to BOC via email. Also include the following, based on the security protection level indicated on the VRA:
P1 or P2
For new software:
- Approved VRA and its expiration date
- Software Related Services Form
If repurchasing software (w/ active VRA):
a. Note that the VRA is active and include expiration date.
b. Software Related Services Form
If repurchasing software (w/ expired VRA):
a. Renewed VRA and its expiration date
b. Software Related Services Form
P3 or P4
For new software:
a. Approved VRA and its expiration date
b. Software Related Services Form
c. Vendor Terms & Conditions
(download or screenshot - do not accept the Terms & Conditions)
If repurchasing software (w/ active VRA):
a. Note that the VRA is active and include expiration date.
b. Software Related Services Form
c. Vendor Terms & Conditions
(download or screenshot - do not accept the Terms & Conditions)
If repurchasing software (w/ expired VRA):
a. Renewed VRA and its expiration date
b. Software Related Services Form
c. Vendor Terms & Conditions: (download or screenshot - do not accept the Terms & Conditions)
3. BOC will route the purchase request and a PO/No-Cost Agreement form to UC Davis Supply Chain Management.
4. UC Davis signs off on the Terms & Conditions for your software/app and fills out a Purchase Order (PO). BOC will follow up with you once we hear back from UC Davis.
Note: If UC Davis does not approve the software/app, follow BOC's instructions, or select a different software/app.
For questions regarding the purchase of computer software/apps please contact the Business Operations Center.