When a customer’s questionnaire asks about your laptops, you have the answer. XFA checks each laptop at every sign-in, and the person using it fixes what is off.
Free to start for your whole team: 4 device checks at every sign-in, and people are guided to fix issues themselves, automatically or by hand.
A customer sent a security questionnaire. Section 4 is about laptops.
Our device policy is a document everyone signed once.
Half of us work on our own laptops. Nobody has checked them.
SOC 2 is on the roadmap. The laptops are nobody’s job.
Sooner or later a customer sends a spreadsheet with a section on laptops. These are the usual questions, answered with what XFA checks.
Running without an IT teamVendor security questionnaire
Section 4: Endpoint security
Is full disk encryption on for every device with company data?
XFA checks disk encryption on every laptop at each sign-in to our work apps. If it is off, the owner sees it in the XFA app and turns it on.
Are operating systems kept up to date?
XFA checks the operating system version at every sign-in. An out of date laptop shows in its owner’s XFA app with an Update button.
Do devices lock when left unattended?
XFA checks screen lock at each sign-in. If it is off, the owner switches it on.
Is antimalware active on all devices?
XFA checks antimalware at every sign-in. A laptop without it stays flagged until its owner turns it back on.
Are devices centrally managed (MDM)?
We do not use an MDM. XFA checks every laptop used for work at sign-in, company issued or personal. It does not manage them.
Is multi-factor authentication required for work apps?
Sign-in to our work apps uses phishing-resistant MFA through XFA’s Built-in Passkey. The XFA app on the laptop answers it, with nothing to type.
An audit wants evidence. XFA’s dashboard lists every laptop and what still needs fixing, and the same data exports to Vanta or Drata.
Set the rules once. From then on XFA checks each laptop at sign-in, the owner fixes what is off, and XFA sends the invites and reminders.
A fully remote team of full-time contractors that needed SOC 2 and ISO compliance without an MDM.
“The main focus was that it has to be an alternative to an MDM. We were looking for something that would cover the security checks required for compliance, but not something that would require our employees to install an MDM to fully track their laptops.”
Alina VoroninaBusiness Assistant, FilmustageRead the Filmustage storyXFA checks security settings and nothing else. Nothing on the laptop changes unless its owner says yes.
Visit our Trust Center (opens in a new tab)
ISO 27001 certified
GDPR compliant
Whoever signs up. Connect your identity provider, then try XFA on your own laptop first. Everyone else sets up the XFA app at their next sign-in, without admin rights.
Running without an IT teamThe usual ones, yes. XFA checks disk encryption, the operating system version, screen lock, and antimalware at every sign-in. You can turn on more checks later.
Yes. Built-in Passkey gives your work apps phishing-resistant MFA, answered by the XFA app on the laptop, with nothing to type.
Only if you set a check to block straight away. A check can warn first and block after the number of days you choose, or only ever warn.
They do different jobs. Vanta collects the evidence for your audit. XFA checks each laptop at sign-in and has its owner fix what is off. XFA’s device data can go to Vanta as evidence.
How XFA and Vanta fit togetherStart with your own laptop today. Everyone else follows at their next sign-in.
