Standard build

• Approved models and OS versions (Windows/macOS/iOS/Android).
• Encryption on by default, auto‑patching, basic EDR/AV.
• Wi‑Fi/VPN profiles and required apps.

MDM readiness

• Intune, Apple Business Manager/DEP, and JAMF — when you enable them.
• Serial capture, user assignment, CSV exports for bulk import.
• Return & wipe workflow with evidence.

Chain‑of‑custody

• Who had what, when; signatures and timestamps.
• Loaners tracked during repair; lost/stolen flow.