Procurement
Last updated: November 1, 2026
Holon is bought the way it's sold: the price is published, the trial is free, and you pay once a year. There's no quote to request and no demo to sit through. This page holds everything your purchasing, IT security and accessibility offices usually ask for, so your review can run without waiting on us.
1. Documents
HECVAT 4.1.6
The full Higher Education Community Vendor Assessment Toolkit, completed for Holon Admin and the Holon Hub.
Download (.xlsx)Security overview
Covers storage, sub-processors, encryption, retention, backups, incident notification, and known limitations.
Read the security pageData Processing Addendum
Covers FERPA school-official terms, the processing scope, sub-processors, breach notification, and deletion at term end.
Read the DPAPrivacy policy
Explains what personal data Holon collects, why, and how long it keeps it.
Read the privacy policyAccessibility (VPAT / ACR)
The VPAT® 2.5 report for Holon Admin, tested against WCAG 2.2 AA on all 39 screens. Automated and scripted testing is complete. The final report will be posted here after the manual screen-reader review; the current draft is available now.
Request the current draftW-9
For your supplier record. Holon Technology LLC is a Florida limited liability company.
Request a W-92. How to buy
- Card: choose your band on the pricing page and pay online. Your licence is issued right away. This fits most P-card purchases.
- Purchase order / invoice: email your PO to support@holontechnology.com. Your licence is issued when the PO arrives. The invoice is due net 30, payable by the method shown on it.
- Term: annual. There is no multi-year commitment.
- Trial first: a 15-day free trial in your own Canvas. No card required.
- Tax-exempt institutions: send your exemption certificate along with your PO.
- Supplier registration: if your institution uses a supplier portal, send us the invitation and we'll complete it.
3. Security review: quick answers
- Hosting: DigitalOcean, United States only (New York compute, San Francisco encrypted backups).
- Integration: an LTI 1.3 / LTI 1.1 tool inside Canvas. Admin functions check the user's Canvas account-admin role against Canvas itself.
- Student data: read from Canvas when a tool runs. No coursework, grades or submissions are stored. Launch sessions are purged after 30 days.
- AI: off by default. It runs only with your institution's own API key.
- Breach notification: within 72 hours.
- Certifications: Holon has not completed a SOC 2 audit. The security page describes what is in place.
4. Agreement
The Terms of Service and the DPA are the agreement. Nothing separate needs to be signed to buy. Public institutions are also covered automatically by the Public Institution Addendum for their state, which applies your state's law, removes arbitration, and removes any indemnity owed by the institution. If your institution still requires its standard vendor or public-entity addendum, email it to support@holontechnology.com and we'll review it.
5. Contact
Holon Technology LLC
A Florida limited liability company · Florida Document No. L26000526857
Mailing address: 10020 Coconut Rd, Ste 138 #5032, Estero, FL 34135, United States
support@holontechnology.com