Skip to content
XFA
Sign inStart for free

Their device.
Your security standard.

Every sign-in to your work apps checks the laptop, personal or contractor. The owner fixes what needs fixing, with the Fix button or by hand, and nothing changes without their OK. XFA collects nothing personal.

Start for freeTalk to us

Free to start for your whole team: 4 device checks at every sign-in, and people are guided to fix issues themselves, automatically or by hand.

Working on a laptop at a dining table at home

Less guessing.
More clarity.

Today

  1. You email every new contractor about their laptop. You get a thumbs up back.
  2. You have a BYOD policy. Whether anyone meets it is a guess.
  3. You hope contractor laptops are encrypted. Nobody checks.

With XFA

  1. Their first sign-in checks the laptop. You see which settings pass and which fail.
  2. Each sign-in shows whether the laptop meets your BYOD policy.
  3. XFA checks that encryption is on. It does not collect the files.

Checked at sign-in.
Fixed by its owner.

Set your rules once, and choose per check whether a laptop is warned or blocked. Each laptop is checked when its owner signs in. A failed check gets fixed without you sending a message.

One standard,
whoever owns the laptop.

Employees bring the laptop they prefer, and contractors bring their own. Each one meets the same rules before a work app opens.

How XFA handles privacy

How the first
contractor joins.

  1. Add them to your identity provider.

    Give the contractor an account in the group XFA checks, as you would for any work app.

  2. They sign in and install the app.

    The sign-in page says what XFA checks and what it never collects. The app installs in about a minute, without admin rights.

  3. Every sign-in checks again.

    If a setting is wrong, they fix it with the Fix button or a guide.

  4. When the work ends, remove them.

    Take them out of your identity provider. After a while, XFA removes their device by itself.

Byteflies

Byteflies hands out laptops it does not manage, and people use their own phones and tablets.

“They can install and do whatever they want on their devices, which provides the most flexibility for them to do their job. However, it makes securing our devices challenging. A classical managed device strategy wouldn’t work for us.”

“We had this ‘bring your own device’ strategy even before XFA was available, so we were early adopters when XFA was released.”

Roel Buyzen, Chief Delivery Officer, BytefliesRoel BuyzenChief Delivery Officer, BytefliesRead the Byteflies story

Before you invite
the team.

Compare plans
A hand closing a laptop on a wooden table, garden outside the window
Is XFA for us?

Yes, if people work on laptops you do not own, they sign in through your identity provider (Google Workspace, Microsoft Entra ID, Okta, OneLogin, Ping Identity, or Keycloak), and you want those laptops checked without taking control of them. No, if you need control of the laptop itself, for example to wipe it remotely.

XFA for agencies
Do people need to give XFA admin rights?

No. People install XFA themselves without admin rights, and XFA never takes control of the laptop. They choose whether to run a fix or make the change by hand. Nothing changes without their OK.

Does everyone need to install the app?

Yes, for the full check. Each person installs the XFA app once, with steps on screen, the first time they open a work app.

Will XFA block people on their first day?

Only if you set a check to block from the start. A warning still lets people sign in. You choose which checks block, and after how many days.

What happens when a contractor leaves?

Remove them from your identity provider, as you would anyway. They can no longer sign in to your work apps, so there is nothing left to check. XFA never had control of their laptop, so there is nothing to undo on it.

Their privacy stays theirs.

XFA checks security settings and nothing else. Nothing on the laptop changes unless its owner says yes.

Visit our Trust Center (opens in a new tab)

Your organization sees

  • Security check results
  • Device name, model, and operating system
  • When the device last checked in
  • The work email it’s linked to

XFA never collects

  • Private messages or emails
  • Personal files or content
  • Browsing history
  • Screen recordings or screenshots
  • Passwords or login credentials
  • Location data
  • ISO 27001 certified
  • GDPR compliant
  • Made in Belgium
  • Encrypted at rest and in transit

Say yes to the laptop
they already have.

Try it first from your own personal laptop. You will see what a contractor sees.

Start for freeTalk to us
On the sofa with a phone in hand and a laptop covered in stickers