General & privacy

The SecureSlate Device Agent is a lightweight app for macOS and Windows. It checks an employee's
own device for five security controls (disk encryption, screen lock, password policy,
antivirus/endpoint protection, and firewall) and reports the results to SecureSlate as
compliance evidence. Once signed in, it runs in the background and needs no ongoing action
from the employee.

What it does and doesn't do

The Agent only reads whether those controls are in place. It never changes a setting on
your device. If a check fails, it points you to the place in your system settings where you
can fix it yourself.

The Agent is not a Mobile Device Management (MDM) tool. It cannot enforce policy, install
or remove software, or remotely lock or wipe a device. If your company also uses an MDM, the
two serve different purposes: the MDM can enforce settings; the Agent reports on the
resulting state.

Privacy

Collection is limited to what's needed to report those results:

• Pass/fail for the five checks above
• Basic device identity, used to match results to the correct asset in SecureSlate

For the full list of checks and identity fields, see
Data collection.

The Agent does not collect personal files, browsing history, keystrokes, screen contents,
or other application data.

Results are sent to SecureSlate over an encrypted connection and stored securely. Your
organization's SecureSlate administrators can see them, the same as other compliance
evidence in your workspace.

If you need to troubleshoot the Agent itself, see
Troubleshooting.