IT asset management for mid-market IT teams
Know what you own, and what it's costing you
OnTrackio keeps one register of every device, licence and contract: who holds it, what it costs, and when it expires. The same register produces the NIS2 Article 21 evidence pack when an auditor asks.
16 of 16 rows shown
| PVL-0022 | Dell XPS 15 9530Dell | Sarah Clarke | Vilnius HQ | 2028-10-11 2y | seen 09:41enrolling | Assigned | 7HK4Q23 | yes | 2026-08-02 | TA-0118 | n/a |
|---|---|---|---|---|---|---|---|---|---|---|---|
| PVL-0023 | Apple MacBook Air 13 M3Apple | Aleksandr Volkov | Vilnius HQ | 2027-05-11 7mo | seen 08:57enrolling | Assigned | K4M9X2L7PQ | yes | 2026-08-02 | TA-0119 | n/a |
| PVL-0024 | Apple MacBook Air 13 M3Apple | Aleksandr Volkov | Warsaw office | 2028-07-11 1y 9mo | seen 09:12enrolling | Assigned | K4M9X2L8RT | yes | 2026-07-21 | TA-0120 | n/a |
| PVL-0021 | Lenovo ThinkPad T14s Gen 4Lenovo | Sarah Clarke | Remote (EU) | 2027-11-11 1y 1mo | seen 07:30enrolling | Assigned | PF3TX8QM | yes | 2026-08-02 | TA-0117 | n/a |
| PVL-0008 | Apple MacBook Pro 16 M3 ProApple | Daniel Brown | Warsaw office | 2028-02-11 1y 4mo | seen 09:03enrolling | Assigned | H2N7V4C1WD | yes | 2026-07-21 | TA-0102 | n/a |
| PVL-0009 | Dell XPS 15 9530Dell | Daniel Brown | Vilnius HQ | 2026-08-11 expired | seen 08:48enrolling | Assigned | 3JD8R61 | yes | 2026-08-02 | TA-0103 | n/a |
| PVL-0010 | Lenovo ThinkPad X1 Carbon Gen 11Lenovo | Sofia Müller | Vilnius HQ | 2028-03-11 1y 5mo | seen 09:20enrolling | Assigned | PF2WK5RB | yes | 2026-08-02 | TA-0104 | n/a |
| PVL-0012 | Apple MacBook Air 13 M3Apple | Ana Costa | Warsaw office | 2028-12-11 2y 2mo | seen 08:15enrolling | Assigned | K4M9X2M3ZA | yes | 2026-07-21 | TA-0106 | n/a |
| PVL-0013 | Dell Latitude 7440Dell | Lars Nilsson | Vilnius HQ | 2027-03-11 5mo | seen 09:35enrolling | Assigned | 9BQ2M57 | yes | 2026-08-02 | TA-0107 | n/a |
| PVL-0030 | Dell Latitude 7450Dell | unassigned | Vilnius HQ, stockroom | 2029-06-30 2y 9mo | never | Available | 5CT1N84 | yes | never | none | n/a |
| PVL-0031 | Dell Latitude 7450Dell | unassigned | Vilnius HQ, stockroom | 2029-06-30 2y 9mo | never | Available | 5CT1N85 | yes | never | none | n/a |
| PVL-0032 | Dell UltraSharp U2723QEDell | unassigned | Warsaw office, stockroom | 2029-01-15 2y 3mo | never | Available | CN0F2R7L | yes | never | none | n/a |
| PVL-0015 | Lenovo ThinkPad T14 Gen 3Lenovo | unassigned | Vilnius HQ, repair shelf | 2026-11-20 1mo | seen 07:02enrolling | In repair | PF1RD2VX | yes | 2026-09-10 | none | n/a |
| PVL-0017 | Apple MacBook Pro 14 M2 ProApple | Maya Patel | Vilnius HQ | 2026-10-11 17d | seen 09:27enrolling | Assigned | G8P3T6D9YK | yes | 2026-08-02 | TA-0110 | n/a |
| PVL-0005 | Dell Latitude 7430Dell | Jonas Petrauskas | Remote (EU) | 2026-12-14 2mo | seen 2026-06-02enrolling | Assigned | 2FW6L39 | yes | 2026-05-19 | TA-0094 | n/a |
| PVL-0019 | Lenovo ThinkPad X1 Carbon Gen 10Lenovo | Emma Laurent | Warsaw office | 2027-09-02 11mo | seen 2026-06-17enrolling | Assigned | PF0HN7CJ | yes | 2026-07-21 | TA-0112 | n/a |
| 16 of 16 with category and owner · 0 missing serial · 12 verified within 90 days · 4 unverified ISO/IEC 27001 A.8 pack · SOC 2 CC6.1 pack · NIS2 21(2)(i) ITAM hygiene floor | |||||||||||
16 of 16 match
Sort any column; the filters mirror the product.
as of 2026-09-24
The platform
Three problems, one platform
Most IT teams can't say exactly what they own, what's going unused, or what's about to renew. OnTrackio starts with one live inventory of every device, app, licence, and contract, then turns it into reclaimed spend, renewals you control, and audit evidence on demand.
Know what you actually own
A lightweight agent enrols every Mac and Windows device in minutes and builds one live inventory: hardware, installed software, licences, and contracts in a single place.
Stop paying for what you don't use
The agent reports which apps actually get opened. Match that against your licence counts and finance gets a clear list of idle seats to reclaim before the next renewal lands.
Stay ahead of renewals and audits
Every warranty and licence feeds one expiry calendar, and your live asset state exports straight into GDPR and NIS2 evidence. No spreadsheet scramble the week before a deadline.
Illustrative data from OnTrackio's demo workspace.
NIS2 Article 21
What an asset register can evidence for NIS2, and what it cannot
Native evidence for three sub-controls, a baseline for four, a proxy metric for two, nothing useful for one.
- ITAM-native evidence
- ITAM hygiene floor
- ITAM proxy
- Outside ITAM scope
21(2)(a) Risk analysis and information system security policies
ITAM hygiene floor
What the law asks
A risk analysis grounded in what you actually run, plus board-approved security policies.
What OnTrackio contributes
The asset register with categorization and serial tracking: the population a real risk analysis starts from.
21(2)(b) Incident handling
ITAM-native evidence
What the law asks
Incident handling internally, and Article 23 notifications to your CSIRT on 24-hour, 72-hour, and one-month clocks.
What OnTrackio contributes
The regulator-facing half natively: an Article 23 workflow with the 24h early warning, 72h notification, and final-report deadlines computed from detection time, plus a structured CSIRT mailable.
21(2)(c) Business continuity and crisis management
Outside ITAM scope
What the law asks
Continuity of your own operations: backups, disaster recovery, and crisis management for the systems you run.
What OnTrackio contributes
Honestly: little. Our own SaaS backups protect the register itself, not your production systems. No ITAM tool can evidence your BCP.
21(2)(d) Supply chain security
ITAM hygiene floor
What the law asks
A supplier security programme: policy, selection criteria, contract clauses, and per-supplier risk assessment (Article 21(3)).
What OnTrackio contributes
The vendor inventory: every software and hardware supplier with active licence counts, which is the population your supplier risk assessment covers.
21(2)(e) Security in acquisition, development and maintenance
ITAM proxy
What the law asks
Secure development, change management, vulnerability handling, patching, and security testing across the lifecycle.
What OnTrackio contributes
A procurement-record proxy: purchase dates, invoices, transfer agreements at handover, wipe certificates at disposal. Useful records, but not the SDLC and vulnerability-management evidence the control is really about.
21(2)(f) Effectiveness assessment
ITAM-native evidence
What the law asks
Policies and procedures to assess whether your risk-management measures actually work: measurable indicators, not assertions.
What OnTrackio contributes
A native implementation of the CIR section 7 requirements: a documented policy with a tamper check, cadenced metric snapshots computed from live asset and user data, and a quarterly review workflow with management sign-off.
21(2)(g) Cyber hygiene and training
ITAM hygiene floor
What the law asks
Basic hygiene practices plus a real awareness-training programme with records.
What OnTrackio contributes
The hygiene half of the numbers: MFA and passkey enrolment percentages and the org-wide enforcement policy state. MFA is one hygiene practice; it is not a training programme.
21(2)(h) Cryptography
ITAM proxy
What the law asks
A cryptography policy and key management covering your estate, not just your vendors' platforms.
What OnTrackio contributes
A coverage proxy: the share of endpoints reporting through the agent. Knowing 80 percent of endpoints are managed says nothing about whether their disks are encrypted, so the evidence pack never grades this above partial.
21(2)(i) HR security, access control and asset management
ITAM hygiene floor
What the law asks
Three areas in one clause: personnel security, access-control policies, and asset management.
What OnTrackio contributes
The asset-management third is where we go deepest: the inventory itself, plus the metric assessors reach for before anything else, offboarded people still holding assets. Role-based access and scoped, expiring API tokens cover our own surface.
21(2)(j) MFA, continuous authentication and secure communications
ITAM-native evidence
What the law asks
Multi-factor or continuous authentication, and secured emergency communications for when the primary channel is down.
What OnTrackio contributes
The MFA half natively: TOTP and phishing-resistant passkey enrolment percentages, org-wide policy enforcement across password, Google, Microsoft, and SAML sign-in paths, and the agent's signed request protocol.
Pricing
Per-asset pricing, public
A base allowance per tier, a published rate per additional asset, and a hard cap. Raising the cap is a conversation, not a meter.
Onboarding
Onboarding, in the order it happens
No services engagement and no consultant. Install the agent and the picture builds itself.
Import a CSV, or use the importer presets for Snipe-IT, Lansweeper, ServiceNow, InvGate, Freshservice and GLPI.
What to look at
The data is OnTrackio's own demo workspace, illustrative, not a customer.
Push our signed macOS and Windows installers through Intune, Jamf, or Munki. Devices enrol themselves in minutes. We collect installed apps and daily usage only, never keystrokes, window titles, or file contents.
Illustrative values from the demo workspace, not a customer.
Record · The agent · stop 02
- Hostname
- PVL-0022.corp
- OS version
- Windows 11 23H2
- Serial
- 7HK4Q23
- Installed apps
- 142
- Opened yesterday
- Slack, Figma, Chrome, Outlook
- Heartbeat
- 2026-09-24 09:41
Within a day your dashboard shows every device, every installed app, every license, and which seats were used the day before.
What to look at
The data is OnTrackio's own demo workspace, illustrative, not a customer.
See which seats sit unused, catch renewals before they auto-charge.
Illustrative values from the demo workspace, not a customer.
Record · Usage · stop 04
- App
- Slack Business+
- Last used yesterday
- 102 people
- Seats assigned
- 140
- Seats used
- 102 of 140
Export the audit-ready evidence pack when legal or a regulator asks. The timestamp is printed at the top.
Illustrative values from the demo workspace, not a customer.
Record · Evidence · stop 05
- Pack
- NIS2 Article 21(2) evidence pack
- Sub-controls
- 10, (a) to (j)
- ITAM-native evidence
- 3 of 10
- ITAM hygiene floor
- 4 of 10
- ITAM proxy
- 2 of 10
- Outside ITAM scope
- 1 of 10
- Generated
- 2026-09-24 09:52, printed at the top of page 1
Reclaim the unused seats. Schedule renewals with finance before they auto-charge. The dormant-seat number arrives after the agent has run for one to two weeks; we do not show it from a cold import.
Illustrative values from the demo workspace, not a customer.
Record · Reclaim · stop 06
- Dormant seats
- 38 of 140, not opened in 90 days
- Cost per seat
- Per licence terms
- Reclaim action
- Revokes the seat and decrements the licence count
Onboarding is self-serve once you are a customer; hands-on onboarding is a paid add-on.
Start here
Start with the work, not a sales call
Next step
Book the 30 minutes
A founder walks you through OnTrackio on a live demo workspace: how it tracks assets, surfaces idle seats, and produces NIS2 evidence. No prep needed, and onboarding is self-serve when you're ready.
or email sales@ontrackio.com