---
title: "Security & Privacy Overview"
slug: "security-privacy-overview"
updated: 2026-08-25T16:33:16Z
published: 2026-08-25T16:33:16Z
canonical: "knowledge.technolutions.net/security-privacy-overview"
---

> ## Documentation Index
> Fetch the complete documentation index at: https://knowledge.technolutions.net/llms.txt
> Use this file to discover all available pages before exploring further.

# Security & Privacy Overview

The resources in this section help you secure access to Slate, monitor connections and activity, and protect stored data.

## HECVAT, SOC 2, VPAT, and more

Find our security and compliance documentation in [Slate Security Profile and Documentation](/v1/docs/slate-security-profile-and-documentation), which includes the following attachments:

- ASV Report
- AWS SOC 2 Report and AWS SOC Continued Operations Letter
- College Board Confidentiality Form
- HECVAT
- Nessus Report
- Network Diagram
- PCI Attestation of Compliance (AOC)
- PCI DSS Responsibility Matrix
- SSL Server Test
- Technolutions Extension of Practices
- VPAT or Accessibility Conformance Report (ACR)

The article also provides further detail on our security practices.

> [!NOTE]
> 💡 This article prompts you to sign in with your Slate credentials.

## Managing sign-in and access

[Require VPN Access for Administrative Users](/v1/docs/require-vpn-access-for-administrative-users) explains how to limit administrative access to approved campus networks or a campus VPN.

[Single Sign-On (SSO) and Other Login Troubleshooting](/v1/docs/single-sign-on-sso-and-other-login-troubleshooting) identifies common login errors and the steps for investigating them.

[Updating SSO Certificates](/v1/docs/updating-sso-certificates) explains how Slate reads certificate changes from your identity provider's metadata.

[Configuring Entra ID for Slate](/v1/docs/configuring-entra-id-for-slate) covers setting up and testing SAML single sign-on with Microsoft Entra ID.

[Multi-Factor Authentication (MFA)](/v1/docs/multi-factor-authentication-mfa) covers configuring, enabling, managing, and testing MFA in Slate.

[Slate Authentication Service](/v1/docs/slate-authentication-service) explains how an external site can use Slate as an identity provider through supported CAS or REST authentication options.

[Session Expiration](/v1/docs/session-expiration-troubleshooting) explains Slate session timeouts and troubleshooting for unexpected expiration messages.

[Temporarily Blocked Accounts](/v1/docs/temporarily-blocked-accounts) explains account lockouts caused by repeated failed login attempts.

## Securing devices and network connections

[Mobile Device Security](/v1/docs/mobile-device-security) outlines security considerations for accessing Slate from mobile devices.

[Outbound Networks](/v1/docs/outbound-networks) lists the network addresses used when Slate connects to remote SFTP, LDAP, and web services.

## Monitoring and auditing access

[Auditing External Access](/v1/docs/auditing-external-access) provides a central inventory of external access routes to your database.

[Direct SQL Logging](/v1/docs/direct-sql-logging) explains the activity recorded for direct database access and where to review the log.

[SFTP Logging](/v1/docs/sftp-logging) explains the activity recorded for SFTP access and file operations.

[Restricting access to race and other fields](/v1/docs/restricting-access-to-race-and-other-fields) (article requires login).

[Fraud Identification and Analysis Reports](/v1/docs/fraud-identification-and-analysis-reports) (article requires login).

## Preserving data and meeting privacy requirements

[Preserve Your Database with Hold Snapshots or Downloadable Backups](/v1/docs/database-backups-and-litigation-holds) compares hold snapshots, hold environments, and downloadable database backups.

[GDPR Resource Guide](/v1/docs/gdpr-resource-guide) brings together Technolutions resources and considerations for supporting GDPR obligations in Slate.

[GDPR: Right to Erasure or "Right to be Forgotten" Process and Considerations](/v1/docs/gdpr-right-to-erasure-or-right-to-be-forgotten-process-and-considerations) describes options for anonymizing or deleting data when responding to an erasure request.

[PCI 4.0 and Slate](/v1/docs/pci-40-and-slate) explains how PCI DSS 4.0 requirements affect payment pages and scripts in Slate.