"We were looking for a simple solution that was non-intrusive but would allow us to check the boxes."
Gus FuneChief Technology Officer, BÆRSkinRead the BÆRSkin story
Device checks at sign-in, sent to TrustCloud.
Keep TrustCloud. XFA checks each device when someone signs in and sends the results to TrustCloud about twice an hour.
What TrustCloud does
TrustCloud tracks your compliance controls and the evidence your auditor reviews. That stays as it is.
Adds to TrustCloud
What XFA adds
- Checks each device at every sign-in
- Covers contractors and personal laptops too
- People fix problems themselves in the XFA app
- Can block sign-in until a problem is fixed
How XFA works with TrustCloud
1. Connect XFA to TrustCloud
Connect your identity provider to XFA. Then connect XFA to TrustCloud and confirm the connection in TrustCloud.
2. People check their device at sign-in
On their first sign-in, XFA walks each person through installing the XFA app. When a check fails, they fix it from the app.
3. Results arrive in TrustCloud
XFA sends each device’s results to TrustCloud about twice an hour. Your audit stays in TrustCloud.
Questions about XFA and TrustCloud
Do I need a paid plan to send results to TrustCloud?
Yes. Sending results to TrustCloud is part of every paid plan. XFA is free to start, with no cap on people, four checks at every sign-in, and the Fix button.
See pricingDo XFA’s results count for TrustCloud’s device tests?
XFA sends each device’s results to TrustCloud about twice an hour. Which TrustCloud tests they count for depends on your TrustCloud setup. Check that in your account before you remove any other tool.
Which checks does XFA run?
XFA starts with four: the operating system version, disk encryption, screen lock, and antimalware. You can add more as you grow, such as automatic updates, browser version, password manager, firewall, and recent reboot, up to 34 checks in all.
Does XFA block a device that fails a check?
Only if you set it to. You decide per check whether a device that fails gets a warning or is blocked, and after how many days. Either way, the person sees what to fix.
What does XFA see on a contractor’s own laptop?
Only the security settings it checks, such as the operating system version, disk encryption, and screen lock. XFA does not collect browsing history, personal files, or location data. The app installs without admin rights.
How XFA worksDoes XFA work with Vanta and Drata too?
Yes. XFA also sends device results to Vanta, Drata, and Thoropass.
All integrationsKeep TrustCloud. Start checking devices.
Try it on your own laptop first, then bring in the team. Connect TrustCloud when you are ready.
