Coming Soon: The Next Generation
of VASP – Bigger, Better, Stronger!

ECNO is transforming the VASP service to help Ontario school boards navigate evolving privacy, security, risk, and compliance requirements with greater confidence.

VASP 2.0 will introduce a suite of new tools and services, including Stratum, a next-generation PISA (and more!) platform designed specifically for Ontario's K-12 sector. These innovations will deliver streamlined application vetting, continuous risk management, AI-assisted reviews, and enhanced compliance support designed to help boards address emerging EDSTA Reg. 52 requirements, VASP 2.0 will make managing privacy and security obligations more efficient than ever.

Why go it alone when you can join ECNO’s programs built exclusively for Ontario’s K-12 sector? Stay tuned this fall for previews, training opportunities, and launch announcements.

You won't want to miss what's coming next!

Evolving VASP: Transforming Application Vetting and Meeting EDSTA Reg. 52 with Stratum

Web Posted by:

Chris Dale

||

When Ontario school boards evaluate new digital tools, they face a constantly shifting landscape of privacy, security, and legal obligations. To meet these escalating demands, ECNO is actively evolving the Vetting of Applications for Security and Privacy (VASP) service—shifting from traditional, point-in-time reviews to a dynamic, continuous, and highly structured risk-management model.

At the heart of this evolution is Stratum, a next-generation platform being custom built by ECNO for Ontario’s K–12 sector. Stratum serves as the foundational engine powering the new VASP service, transforming complex vetting requirements into a streamlined, centralized workflow.

The Compliance Catalyst: Ontario’s EDSTA Reg. 52

This evolution arrives at a critical moment. Under the Enhancing Digital Security and Trust Act, 2024 (EDSTA), O. Reg. 52/26 (Digital Technology Affecting Individuals Under Age 18) places strict new transparency and reporting mandates on Ontario school boards.

Boards must now provide written notices to parents and students detailing the exact personal digital information (PII) disclosed to third-party software applications. Manually gathering, mapping, and tracking this information for dozens of applications is a massive administrative challenge.

The Solution: A Modernized Platform & The Privacy Artifact Catalogue

By anchoring the evolved VASP service on the Stratum platform, ECNO is providing school boards with a unified command center to manage overall security risk while simultaneously launching targeted features to solve the Reg. 52 compliance burden.

Stratum delivers immediate value and regulatory support through:

  • The Privacy Artifact Catalogue: A centralized library mapping the specific Personally Identifiable Information (PII) collected by software applications. By extracting data from previously assessed VASP applications, the catalogue will provide a searchable database of exactly what student and staff information is disclosed to third-party vendors—allowing boards to quickly generate accurate Reg. 52 disclosure notices.
  • A Unified Command Center: A single, centralized location for all assessment information, supporting evidence, reviewer decisions, and risk tracking.
  • Structured Vetting & Reassessments: A standardized, reliable methodology to easily track, update, and repeat evaluations as software products and security requirements change over time.
  • AI-Driven Efficiency: Access to Sera (Secure Evaluation and Risk Assistant), a built-in AI assistant designed to simplify complex reviews and save valuable administrative time.

Built for the Future of K–12 Privacy

The evolution of VASP represents ECNO’s ongoing commitment to supporting our members as regulatory requirements change. With Stratum as our foundation and the Privacy Artifact Catalogue actively in development, we are building a proactive, data-driven ecosystem that keeps Ontario’s classrooms secure, transparent, and fully compliant.

Stay Tuned! We are actively developing these features within Stratum to align with upcoming regulatory deadlines. Keep an eye on our upcoming communications for release dates, sneak peeks, and platform training opportunities.