University IT
VLRE Policy for the School of Medicine
As of July 31, 2026, all VLRE users with a School of Medicine (SoM) affiliation must enroll/register a device in Microsoft Intune and authenticate through Microsoft Entra ID to access SoM/Stanford Health Care (SHC) resources in the Microsoft environment, including email and OneDrive, to meet HIPAA requirements and Stanford Administrative Guide 1.6.2 expectations.
This applies to institution- and personally-owned devices, remote and local access, and all user roles including contractors and affiliates. Non-compliant devices or accounts will be denied access until brought into compliance.
If a legitimate operational or technical need prevents compliance, the exemption request should be routed to the Stanford Medicine Technology and Digital Solutions (TDS) team for review.
Acceptable reasons for exemption are limited to non-personal, non-privacy-based issues such as validated technical incompatibility, a legacy device or application that cannot support enrollment, or a short-term transition period while remediation is completed.
TDS will determine whether compensating controls and a time-limited exception are appropriate. Until an exception is approved, users and devices must remain compliant to retain access to SHC resources.
