How XFA helps Gateway.fm secure devices with a privacy-first solution

Gateway.fm, a distributed Web3 infrastructure provider, faced a critical challenge: they needed to prepare for SOC 2 and ISO 27001 certification without compromising the privacy of their remote team with a high number of contractors.

For a company operating in the decentralized space, maintaining a flexible "Bring Your Own Device" (BYOD) policy was of high importance. However, in order to pass the audits, they needed visibility into the security posture of every device accessing their data.

The Challenge: Security vs. Privacy

Gateway.fm's team includes contractors using personal devices. Traditional Mobile Device Management (MDM) solutions were not an option because they required too much invasive control.

"We have contractors who work on personal devices, which means we cannot install full-blown device management and control their devices because it's a kind of privacy invasion." — Alex Ulyanov, Head of Security at Gateway.fm

They needed a solution that could verify security settings, like encryption and anti-malware status, without overstepping boundaries or monitoring user activity.

The Solution: Device Verification with XFA

XFA offered the perfect balance: device visibility for the security team with zero privacy intrusion for the end user.

"I first installed it on my device to see how it works. When I verified that actually it is what it claims (that there is no privacy invasion) it was easier to be an ambassador and explain it to everyone in the team."

By using XFA, Gateway.fm could prove to their auditors that devices were compliant without needing to lock them down.

Seamless Vanta Integration

One of the main reasons for adopting XFA was Gateway.fm's need to satisfy Vanta controls for their upcoming audits. The integration was immediate and effective, automatically exporting device health data into their compliance platform.

With XFA, Gateway.fm was able to:

• Protect Privacy: Secure personal and contractor devices without invasion.
• Automate Compliance: Export device security data directly into Vanta.
• Build a Partnership: Rely on a support team that listens and adapts features based on real user feedback.

A Partnership, Not Just a Vendor

Beyond the technology, Gateway.fm valued the responsiveness of the XFA team. In the fast-moving Web3 space, having a partner that iterates quickly on feedback is invaluable.

"We want to have not a transactional-based relationship but rather a partnership... The feedback loop is great, features are coming in, and you are oriented on helping companies actually solve the MDM gap."

For companies with a distributed, privacy-conscious workforce, XFA provides a path to compliance that respects user autonomy.

"If people want to have a device security solution in place but have concerns about privacy, XFA is great."