Your assistant has the keys to your company. Do you know whose laptop they're using?
Offshore EAs, virtual assistants and remote contractors are a huge advantage – but most work on personal computers you've never seen, can't manage and can't wipe.
The risk isn't where they work. It's what they work on.
Your team members in Manila, Bogotá or down the street are rarely the problem. The problem is company data being opened, downloaded and saved on devices your company doesn't control.
One unmanaged laptop can hold your email, client files, bank logins and saved passwords – and keep all of it when the contractor leaves.
Book a free 30-minute Remote Team Security Review
We'll look at who has access to what, from which devices, and show you the fastest way to close the gaps. No pressure, no jargon.
This isn't hypothetical
of ransomware attacks that reached encryption used an unmanaged device to get in or to encrypt data remotely.
Microsoft Digital Defense Report 2024of infected computers holding stolen corporate logins were non-managed personal devices.
Verizon 2025 Data Breach Investigations ReportWhat's at stake
One personal laptop. All of this on it.
A typical executive assistant can reach almost everything – from a computer that may be shared with family and has never been checked.
What your assistant can reach
What may be on that laptop
And when they leave?
You can shut off their email. You can't reach into their laptop and delete two years of downloaded files – or the passwords saved in their browser. Those stay with them.
"Our staffing agency handles security."
Maybe. Many VA and offshore firms put cybersecurity back on the client – their contracts cover the worker, not your data. Ask what happens to your files when an assistant leaves, and who can prove it.
60-second gut check
Can you answer "yes" to all five?
If not, your company data is probably exposed right now.
Book a Free Remote Team Security Review →- 1Do you know every device your contractors use for company email and files?
- 2Can you block company email from opening on a personal computer?
- 3Can you stop a contractor from downloading your entire shared drive?
- 4If a contractor left today, could you remove company data from their computer?
- 5Would you know if their laptop got infected with malware?
How Tech Plus closes the gap
From exposed to protected
There's no single right answer. We combine three approaches based on how many contractors you have, what they touch, and whether you want to ship them a computer.
Unmanaged laptop
Personal device you've never seen and can't wipe
Data exposed
Email, client files, bank logins and saved passwords – downloaded and kept
Tech Plus fixes
Data protected
Company data stays in places you control. Offboarding takes minutes.
How Tech Plus can help
Three ways to protect your data
Most clients combine them.
1. Lock the front door
Microsoft 365 & Google WorkspaceThe fastest win. Company data opens only on approved, secure devices and apps.
- Block sign-ins from unmanaged PCs
- Browser-only access: no downloads, syncing or printing
- MFA on every contractor account
- Limit sign-ins by country, network or device health
- Alerts for unusual sign-ins and mass downloads
- Separate contractor accounts – no shared CEO logins
2. Secure virtual workspace
No company laptop neededThey log into a company-controlled desktop from their own computer. Your data never lands on their laptop.
- Files, email and apps stay in the cloud
- Turn off downloads, copy-paste out and printing
- Screenshot protection and watermarking discourage and trace capture
- Works from Windows or Mac
- Offboarding in seconds – access and data gone
3. Manage the device (MDM)
Best for full-time EAsFor your most sensitive roles: a company-managed computer, shipped anywhere ready to work.
- Enrolled in device management from day one
- Encryption, auto-updates and endpoint protection
- Remote lock and wipe if lost or not returned
- Personal devices: app-level protection only – we never see personal photos, messages or browsing
Some controls depend on your license tier (for example, Microsoft 365 Business Premium or a Google Workspace Enterprise edition). We'll tell you exactly what you need – and what you don't.
Clean onboarding & offboarding
Security fails most at the beginning and the end. We automate onboarding and offboarding – including Rippling and Gusto – with role-based access, same-day removal, a password manager for shared logins, and a written checklist for your cyber insurance carrier.
Contractor policy & training
A short, clear policy for remote contractors – approved devices, where files can be saved, handling client data and AI tools – plus phishing and account-security training.
Compare
Which approach is right for you?
| Access Controls M365 / Google | Secure Virtual Workspace | Managed Device MDM | |
|---|---|---|---|
| Best for | Every business – the baseline | Contractors on personal computers | Full-time EAs and high-sensitivity roles |
| Keeps data off their computer | Partially (browser-only, no downloads) | Yes | Data is on a device you control |
| Needs a company laptop | No | No | Yes (or app-level controls on personal devices) |
| Offboarding | Instant account cut-off | Instant – data never left | Remote wipe and device return |
| Setup effort | Low | Medium | Medium (plus hardware cost) |
How it works
Five steps, minimal disruption
Discover
Inventory every contractor, account, device and the data they can reach.
Assess
Show where data is exposed today, in plain English, ranked by risk.
Design
Pick the right mix of controls, workspaces and devices for your budget.
Deploy
Roll it out and get your contractors set up.
Maintain
Monitor sign-ins and devices, handle on/offboarding, keep controls current.
What you receive
Depending on your needs, a Secure Remote Access engagement may include:
- Contractor access and device inventory
- Risk report showing where data is exposed
- M365 or Google Workspace access policies, tested
- Secure virtual workspaces
- Managed laptops shipped to key team members
- Endpoint protection and patching
- Automated onboarding and offboarding
- Company password manager
- Written contractor security policy
- Security awareness training
- Documentation for your cyber insurance carrier
FAQ
Frequently asked questions
Is multi-factor authentication (MFA) enough?
No. MFA stops someone from logging in with a stolen password, but it does nothing about files already downloaded to a personal laptop, or malware on that laptop stealing an active session. You need to control the device or keep the data off it.
Do my contractors have to install software on their personal computers?
Not always. Browser-only access and some virtual workspaces need nothing more than a web browser. Other options use a small app. We'll pick the least intrusive approach that still protects your data.
Can you see my contractor's personal files or browsing?
No. On personal devices, we protect company data and apps only. We can't see personal photos, messages, email or browsing history.
Our VA agency says they handle security. Isn't that enough?
Usually not. Agencies typically vet and manage the person, not your data or the device it lives on. Ask your agency what happens to your files when an assistant leaves. If they can't show you, that risk is yours.
Will this slow my assistant down?
It shouldn't. Most contractors keep working in the same email, calendar and apps they use today. The difference is that company data stays in approved, secure places.
We use Google Workspace, not Microsoft 365. Can you help?
Yes. We support both. Some advanced access controls require a higher Google Workspace or Microsoft 365 license tier, and we'll tell you up front if an upgrade is actually worth it.
What happens when a contractor leaves?
We remove their access to email, files, apps and shared passwords the same day. With a virtual workspace, the data never left your environment. With a managed laptop, we can lock or wipe it remotely and arrange its return.
How quickly can we get protected?
Front-door access controls can often be in place within days. Virtual workspaces and managed laptops take longer depending on team size. Your free review will include a realistic timeline.
Keep the talent. Lose the risk.
Remote assistants let you grow without adding overhead. Tech Plus helps Bay Area businesses with 20–100 employees work with remote teams securely – so you don't have to choose between flexibility and safe data.
Don't wait until a contractor leaves with your data.
Book a Free Remote Team Security Review →