VettEDApplication Library Working prototype · V1
← Back to catalog

Blackbaud Financial Edge NXT

Blackbaud, Inc.
Round 2

At a glance

Category
ERP & Finance Operations
Subject
Cross-curricular
Age range
Staff only — no student users
Status
Round 2
Used by
Group office
Licences / seats
Tracked at intake
Vendor trust page
https://www.blackbaud.com/security

A cloud-based fund accounting and financial management platform designed for nonprofits and independent schools, used by finance and operations staff to manage general ledger, accounts payable/receivable, budgeting, and financial reporting.

Category (override):

Administrative details

Application type
Web (SaaS)
MFA / SSO
Confirmed at intake
Schools using
1
Group pricing
Available
Pricing tier
Tier 1 (<$1k)
User type
Staff only
Account manager
Priya Nair
Customer success
Blackbaud, Inc. Customer Success

Illustrative admin fields — real values load from contracts / vendor records in production.

Round 1 · Privacy Triage

Insufficient — Request Data-Processing Agreement
📄 Looks like a website privacy policy, not a data-processing agreement. This reads as a general website privacy policy, not a data-processing agreement: 11 of 16 questions are simply not addressed. That's a wrong-document signal, not a vendor judgment — the 52.0% reflects silence, not bad practice. Enterprise vendors' real assurance lives in their DPA, a security cert (e.g. ISO 27001), or a completed questionnaire. Request those and assess in Round 2.
Addresses only 5 of 5 of the student-data checklist — the score reflects silence, not the vendor's posture. Request the DPA + ISO 27001 and assess in Round 2 (deep review).
Re-vet from the live policy (re-reads the vendor's published policy set now — privacy policy plus the security, sub-processor and terms pages it links to — and re-runs Round 1. The current verdict stays until the new one lands; a partial or blocked page never replaces it.)
View full cited report ↗

Round 2 · Vendor-supplied documents

What the vendor sent you — a data-processing agreement, a completed security questionnaire, a SOC 2 or ISO summary, a contract. Stored with this record. Every re-vet and every Drift Sentinel scan reads these first, ahead of the public pages, and quotes from them carry evidence tier T2 (contractual) instead of T3 (public claim).

No vendor documents on file. Round 1 reads the public policy set only.
Add a document (PDF, DOCX, TXT or MD, up to 25 MB — or paste the text). It re-vets the vendor as soon as it is stored.
…or paste the document text
Demo: — labelled as a sample, not from the vendor.

Safeguarding summary

Round 1 privacy triage runs from the vendor's policy page.

Vetting queued — automated review pending.