Software as a Service (SaaS)

What is a SaaS?

Software as a Service (SaaS) is software that’s delivered online rather than installed on University systems. In simple terms:

  • It’s cloud-based and hosted by an external supplier
  • There’s nothing for the University to install or host on campus
  • The supplier manages and maintains the software, including updates and fixes
  • The same software is used by multiple organisations, but each organisation can only access its own data

If you’re unsure whether your request falls into these categories, please see What is not considered a SaaS.

Next steps

All SaaS requests are reviewed to help ensure safe and secure access to University data. Please follow the steps below to submit an enquiry about your request.

You will need to repeat the submission of the Software Risk Assessment (SRA) form at contract renewal time.

1. Check Approved Software

Is there a similar approved SaaS available?

Check the list of approved SaaS applications used at Loughborough University.

Search by Software name or by Category.

If the type of software with a close match to the functionality you are looking for is available, click the Enquiry button next to the software details. This will open a Microsoft Form with a few questions about users, data, and purchasing requirements.

SaaS list

2. New Software Requests

Query for a new SaaS

Please make sure you’ve completed Step 1 first.

If the software is not listed, simply complete the short form below. This will help determine whether approval is needed to use or purchase a new SaaS application.

After submitting the form, you’ll receive an email outlining any next steps. The message will come from an external account (Gecko Forms).

Based on the number of users and the type of data involved, your SaaS request may need to go through the Software Risk Assessment process (SRA).

Important

It is essential to ask the supplier if the proposed SaaS provides Multi Factor Authentication (MFA), and what type of MFA is supported. SaaS products which do not support MFA will not be approved as it is a requirement of the Cyber Essentials certification.