Every service's devices under one console, with data kept in your region
A council's devices are spread across services and sites: social workers' laptops, housing officers' tablets, libraries' public PCs and the civic centre's desks. Purple MDM gives each service its group and its role inside the council's baselines, keeps data in your region, and produces the evidence auditors ask for.
Security baseline · Office PCs
- BitLocker with key escrowOn
- Windows LAPSOn
- Defender and firewall baselineOn
- Screen lock after 5 minutesOn
- Local admin rights time-limitedOn
- Developer modeBlocked
Meets the baseline
OFFICE-PC-014OFFICE-PC-022OFFICE-PC-031Still missing
OFFICE-PC-009: BitLocker offWhat you are up against
Many services, one accountable officer
Devices in the field
Social workers' and housing officers' laptops hold sensitive data and live in cars and homes, not the office.Services that run themselves
Each service has its own devices and its own habits, and central IT is accountable for all of them.Procurement and evidence
Where data is held, who can see it and who did what are procurement questions before they are IT questions.
How Purple MDM is set up
How Purple MDM is set up for a council
- A group and a role per serviceEach service's devices as a group inside the council's baselines, with the Helpdesk role for service-based technicians and the Admin role held centrally.
- Field devices encrypted and recoverableFileVault and BitLocker with keys escrowed, lost mode with location, lock and wipe from the console, with a second admin's approval for a wipe if required.
- Data in your regionEvery customer's data apart at the database level, kept in Europe or the United States, keys held in a cloud key management service, export or deletion on request.
- Evidence for the auditorCompliance reports over time per service, Read-only access for audit, and an audit log of every admin action and command.
See everything Purple MDM doesLocal government WiFi on Purple Access
- Staff MacsIn compliancemacOS 15, EAP-TLS WiFi, FileVault
- Frontline iPadsPreviewing changeSupervised, shared, Return to ServiceRoll-outTest groupRolled outWhole groupWaiting for you
- Office PCsIn complianceWindows 11, BitLocker, LAPS
Revisions
The fleet
The council's fleet
- Field laptopsEncryption with key escrow, company sign-in, lost mode and wipe.
- Officers' tablets and phonesFully managed, or a work area on a personal phone.
- Library public PCsLocked to their job, reset between users, updated out of hours.
- Civic centre desksBitLocker, LAPS, update rings and a Defender baseline.
- Schools the council supportsChromebooks and iPads through each school's Google Admin and Apple School Manager.
- The auditorRead-only access, reports over time and the audit log.
FAQ
Questions we hear from teams like yours
Where is the council's data held?
In its region, Europe or the United States, apart from every other customer's at the database level, with keys held in a cloud key management service. Everyone signs in at one address and is taken to their own region.
Can each service manage its own devices?
Yes, inside the council's baselines, with the Helpdesk role (lock and fix, no wipe, no recovery keys) for service technicians and every action logged.
Can we support the schools we run from the same console?
Yes. Each school's Chromebooks connect through its own Google Admin and its iPads through Apple School Manager, as groups of their own.
Is Purple MDM certified?
Purple MDM does not advertise certifications until each one is confirmed. Ask the Purple team for the current position before you rely on one in a procurement.
Other industries
Charities
Staff laptops encrypted and patched, volunteers' own phones with a work area and nothing more.Managed service providers
Many customers, one partner portal, each action logged in the customer's account.Schools
Carts, classroom iPads and staff laptops in one console, with the school year built in.
See every device in one console, on your own fleet
Tell us which devices you run, how many, and what you manage them with today. The Purple team shows you Purple MDM on a fleet like yours: zero-touch enrolment, a change previewed and undone, a failed check explained in a sentence, and a device moved off the network and back. Already a Purple customer? Sign in to the app with your Purple account.
- We map your fleetA Purple expert maps your platforms, your groups and how devices arrive today, and answers your questions on enrolment, data regions, roles and migration.
- You see it on devices like yoursA demo of zero-touch enrolment, a previewed change, a failed check explained in plain English and, with Purple Access, a device moved off the network and back.
- You get your quotePriced per device, per month, for the platforms you run, direct or through your Purple partner, with a move in waves planned if you are coming from another MDM.
Your demo
Tell us your fleet. We show you Purple MDM running it.
A Purple expert comes back to book a demo on devices like yours, from the team behind Purple WiFi and Purple Access.