Skip to main content

What to do when a device compliance check isn't pulling the right data

How to switch from a failing automated device test to a manual evidence upload when your integration can't pull antivirus, encryption, or screen lock data correctly.

Written by Upendra Varma

Sometimes an integration can't reliably pull device compliance data — for example, your antivirus tool may not report correctly through your MDM, or encryption status may not sync as expected. In these cases, you can deactivate the failing automated test and switch to a manual document test instead, where you upload evidence directly.

This works for any device check: antivirus/malware, disk encryption, screen lock, and similar controls.

Step 1: Deactivate the failing automated test

Go to Organisation → Devices.

Click the menu in the top-right corner of the Devices page and select Manage Linked Tests.

In the Linked Device Tests modal, search for the check that isn't working — for example, type malware to find antivirus-related tests, or encryption for disk encryption tests. You'll see all linked tests that match.

Select the test that is failing (the one tied to the integration that isn't pulling data correctly), then click Deactivate in the toolbar that appears.

Step 2: Activate the manual document test

Now go to Tests in the left sidebar. Click the Excluded tab, then search for the same keyword (e.g., malware).

You'll see one or more document-type tests in the Excluded list — these are the manual alternatives for that control.

Select the document test you want to use, then click Activate in the toolbar.

Once activated, the test will move out of Excluded and you'll be able to upload evidence. You can sample a few employee devices and upload a screenshot or export showing that the relevant software (e.g., antivirus, disk encryption) is properly deployed. This evidence is what the auditor will review.

What to expect after

After completing this, you may notice that the original device check (e.g., Anti-Virus) still shows No in the Devices table for some devices. This is expected and okay — that column reflects what the integration was able to sync automatically, not the manual evidence you've uploaded.

Your overall compliance progress will still go up once the manual test is marked as passing. This will be visible on the Tasks and Tests pages.

If you're unsure which manual test to activate, or if you can't find a document test in the Excluded tab for your control, reach out to us at [email protected] and we'll help you identify the right one.

Did this answer your question?