The resources in this section help you secure access to Slate, monitor connections and activity, and protect stored data.
HECVAT, SOC 2, VPAT, and more
Find our security and compliance documentation in Slate Security Profile and Documentation, which includes the following attachments:
ASV Report
AWS SOC 2 Report and AWS SOC Continued Operations Letter
College Board Confidentiality Form
HECVAT
Nessus Report
Network Diagram
PCI Attestation of Compliance (AOC)
PCI DSS Responsibility Matrix
SSL Server Test
Technolutions Extension of Practices
VPAT or Accessibility Conformance Report (ACR)
The article also provides further detail on our security practices.
💡 This article prompts you to sign in with your Slate credentials.
Managing sign-in and access
Require VPN Access for Administrative Users explains how to limit administrative access to approved campus networks or a campus VPN.
Single Sign-On (SSO) and Other Login Troubleshooting identifies common login errors and the steps for investigating them.
Updating SSO Certificates explains how Slate reads certificate changes from your identity provider's metadata.
Configuring Entra ID for Slate covers setting up and testing SAML single sign-on with Microsoft Entra ID.
Multi-Factor Authentication (MFA) covers configuring, enabling, managing, and testing MFA in Slate.
Slate Authentication Service explains how an external site can use Slate as an identity provider through supported CAS or REST authentication options.
Session Expiration explains Slate session timeouts and troubleshooting for unexpected expiration messages.
Temporarily Blocked Accounts explains account lockouts caused by repeated failed login attempts.
Securing devices and network connections
Mobile Device Security outlines security considerations for accessing Slate from mobile devices.
Outbound Networks lists the network addresses used when Slate connects to remote SFTP, LDAP, and web services.
Monitoring and auditing access
Auditing External Access provides a central inventory of external access routes to your database.
Direct SQL Logging explains the activity recorded for direct database access and where to review the log.
SFTP Logging explains the activity recorded for SFTP access and file operations.
Restricting access to race and other fields (article requires login).
Fraud Identification and Analysis Reports (article requires login).
Preserving data and meeting privacy requirements
Preserve Your Database with Hold Snapshots or Downloadable Backups compares hold snapshots, hold environments, and downloadable database backups.
GDPR Resource Guide brings together Technolutions resources and considerations for supporting GDPR obligations in Slate.
GDPR: Right to Erasure or "Right to be Forgotten" Process and Considerations describes options for anonymizing or deleting data when responding to an erasure request.
PCI 4.0 and Slate explains how PCI DSS 4.0 requirements affect payment pages and scripts in Slate.