Check a contractor's laptop without monitoring what they do on it.
The contractor keeps control of the laptop.
What information does PosturePass collect?
PosturePass collects information about the device's security settings and the operation of the app. It does not collect personal files or monitor how the contractor uses the laptop.
Information we collect
- Disk encryption status
- Antivirus and firewall status
- Operating system and update status
- Screen-lock and password compliance
- Results of configured remote-access-tool checks
- App version, installation status and diagnostic information
Information we don't collect
- Personal files or their contents
- Email contents
- Browsing history or activity
- Keystrokes
- Screenshots or screen activity
- Personal content stored on the device
Your organization chooses which supported security requirements contractors need to meet.
See how the security checks workContractors keep control of their laptops.
Contractors install PosturePass once. The app runs in the background without requiring administrator rights or enrollment in your device management.
Your organization cannot use PosturePass to:
- Remotely control the laptop
- Lock or wipe the device
- Install or remove software
- Change the contractor's settings
If a security check fails, PosturePass shows the contractor what needs fixing. The contractor makes the change themselves.
What can your team see?
Your team can review whether a contractor's device meets your security requirements.
Each device check creates a record showing the user and device, which requirements were checked, when the check took place, whether it passed and whether a failed requirement was fixed.
PosturePass also reports the device's compliance status to Microsoft Entra through Microsoft Graph. You continue using your existing Conditional Access rules to control access.
Your team receives security results and check records, not access to the contractor's personal activity.
How PosturePass works with Microsoft EntraHow do we protect and store the information?
Data protection
We encrypt information in transit using TLS. We restrict administrative access, require multifactor authentication for our administrative portals, and use audit logging and security monitoring.
Where we store data
We store and process service information in the United States. PosturePass uses infrastructure and security operations shared with AlertSec.
How long we keep it
Your organization determines how long device-security information and operational data are retained through its configuration.
Ensure Endpoint processes device-check information on behalf of your organization.
For more information about our data practices, website data and privacy rights, read our Privacy Policy.
Security assessments and certifications
vBSIMM-assessed development
Our secure development practices have been assessed using vBSIMM.
ISO 9001-certified support
Our shared support operation is ISO 9001 certified. This certification covers quality management, not product security.
See what PosturePass checks and what your team receives.
We'll show you the security checks, the information your team can review and how PosturePass works with Microsoft Entra.