The Validated Report Agreement (VRA) is the contractual document between your organization and HITRUST that authorizes HITRUST to issue the validated report and, if applicable, the certification. Since HITRUST’s countersignature process can take up to two weeks—and we cannot submit until the VRA is fully executed—it’s critical to complete this step at the start of fieldwork to avoid timeline delays later in the certification process.
Navigate into your assessment from the myCSF homepage.
Scroll down the left-side menu to Validated Report Agreement.
Fill out the fields in the form.
myCSF will email the designated signatory to complete the signature process.