We use JAMF to manage all workstations and ensure that security policies are properly enforced, the latest updates are installed, and devices remain compliant with Elevo’s security standards.
All employee computers are encrypted, configured with a minimum prompt lock, and protected by a strong, unique password that also encrypts the disk.
Workstations are protected by the built-in security mechanisms included in the latest version of macOS (see Apple macOS Security), Sandbox and Gatekeeper.
In addition, our application installation policy emphasizes caution and best practices when installing third-party applications.
All workstations are encrypted with FileVault 2 without exception (see Apple macOS Security).
All workstations purchased by Elevo after February 1, 2019, include the Apple T2 Security Chip (introduced in 2018).
Secure Boot ensures that Elevo computers run only valid, Apple-signed versions of macOS (see Apple Support documentation).
A firewall is enabled by default on all Elevo workstations (see Apple Support documentation).