Device checks

A device check is one small thing XFA looks at on your device, like whether your disk is encrypted or whether your operating system is up to date. Your organization decides which checks apply to you.

The pages below explain the checks about apps: which apps are installed, and whether your device checks apps before they open.

Check	What it looks at
Application safety	Whether your apps carry a valid signature from their maker.
Install protection	Whether your device checks apps before they open.
Risky app categories	Whether you have apps in categories that do not belong on a work device.

What XFA can and cannot see

XFA does not take over your device. It cannot see your files, your messages, or the sites you visit, and it changes nothing on your device unless you ask it to.

For the two checks that look at your installed apps, your organization only ever sees counts, for example "this device has two apps in a risky category". The names of your apps stay on your device and are shown to you only. For install protection, it sees only the state of the setting, for example whether it is on or off.

If a check does not pass, XFA tells you what to do. For these checks you can also start the change from the XFA app, such as removing an app or turning install protection back on. It happens only after you confirm it. When the change needs administrator rights, your Mac asks for your administrator password, and Windows asks for your permission.