Software Approval: Three‑Part Process

OIT Technology Review & Approval

Beginning June 16, 2025, all new technology purchases—whether paid or free—must be reviewed and approved by the Office of Information Technology (OIT). This process ensures that each tool aligns with university systems, meets accessibility and security requirements, and supports efficient use of resources. As part of this effort, OIT is also reviewing existing tools to identify and eliminate duplicates or inefficient systems.

Required for:

All software (including SaaS, renewals, mobile applications, free tools, etc.)

Submission link:

Software Approval Form

Purpose:

Technical review and alignment with enterprise systems

Exception: 

Faculty purchasing specialized software for teaching or research won't need prior approval, but OIT will still review those purchases to identify cost-saving opportunities.

Software Approval Form

Assistance

For assistance, contact: 

EAAMSupport@uta.edu

Technology Approval Resources

For assistance with completing the review or understanding requirements, contact:

ISO Risk Assessment Support: Information Security Office: security@uta.edu

TAPREQ Accessibility & Technology Approval

At UTA, all technology—whether free or purchased—must go through the Technology Approval Process Request (TAPREQ) before it can be implemented, accessed, or recommended for use. This includes software, web services, online tools, and vendor-provided electronic deliverables. The TAPREQ process ensures that every technology meets UTA’s standards for accessibility, security, and usability, keeping our digital environment equitable and compliant. In short — if it’s tech and it touches UTA, it needs TAPREQ.

A Software Approval Form (Step 1) must be completed prior to submitting a TAPREQ.

Required for:

Any Electronic and Information Resource (web services, online resources, software, related vendor services, electronic deliverables, etc.)

Submission link:

TAPREQ FormLinks to an external site.

Purpose:

Accessibility compliance review

For assistance, contact: 

accessibility@uta.edu

TAPREQ Form

ISO Security Risk Assessment Process

When purchasing software or a cloud-based resource, it’s important to complete an Information Security Risk Assessment. The Information Security Office (ISO) conducts these evaluations to identify potential risks, protect University data, and inform application or data owners of any security concerns.

To begin the process, submit a request through the ServiceNow Self-Service Ticket System. This submission allows ISO to properly assess security risks associated with the tool or resource.

After the initial assessment and purchase, follow-up evaluations are required on a regular schedule:

  • Annually for applications that handle confidential data (see: ISO Confidential Data ListLinks to an external site.)
  • Annually for applications deemed mission critical to UTA’s core business operations
  • Every two years for cloud-based applications that do not involve confidential data

Completing this process ensures compliance with University security policies and helps safeguard sensitive information and essential services. Always complete the required form before purchasing or implementing new technology.

Required for:

Cloud-based tools involve confidential or controlled data

Submission link:

SN Self Service TicketLinks to an external site.

Purpose:

Information security risk evaluation

For assistance, contact: 

security@uta.edu

Application Security Risk Assessment Request