Introduction
The HP Workforce Experience Platform (WXP) is a cloud-based enterprise solution that monitors device health, enhance security, proactively resolve device issues, provides centralized visibility and management of an organization’s PC fleet, such as desktops, laptops, and other connected assets.
This document provides an overview of WXP security and privacy, including how data is collected, transmitted, stored and protected. It also describes the security controls, operational practices, and compliance standards that support the platform.
The intended audience are IT administrators, service providers, and security reviewers who evaluate WXP security and data handling practices.
Security at a glance
WXP uses security controls throughout the platform architecture, data lifecycle, software development process, and operational environment.
Key ares include:
Security architecture: Protects devices, platform services, communications, identities, and customer data.
Data protection: Protects data during collection, transmission, storage, and processing.
Operational security: Applies security controls to the WXP infrastructure and communications between platform components.
Compliance: Supports internationally recognized security and privacy standards through certifications and independent assessments.
Security architecture
WXP is a cloud-based platform that collects and analyzes device telemetry, supports device management and reporting, and integrates with third-party services.
Security controls are applied across the WXP architecture, including:
Device enrollment and authenticaation
Identity and access management
Data isolation between customer tenants
Data encryption
Secure communication between devices and WXP services
Third-party integrations
Data protection
WXP protects customer and device data throughout the data lifecycle. Data is collected from enrolled devices, transmitted to WXP services, and stored in regional data centers or analytics environments.
Security controls include encryption for data at rest and in transit, tenant-level data isolation, and access controls that restrict data based on user roles and tenant permissions.
WXP also defines which data is collected and how personal data is handled as part of its data protection and privacy practices.
Operational security
WXP applies security controls across its cloud infrastructure, communications, and operational environment.
WXP is hosted on Amazon Web Services (AWS) across regional environments is the United States, European Union, and Australia.
Customer data is stored according to the applicable regional data-storage requirements.
WXP uses security controls for infrastructure protection, data encryption, network security, availability, and access management.
Compliance
WXP maintains security and privacy controls that align with internationally recognized standards and compliance frameworks.
The WXP security program includes certifications and attestations such as:
Standards or Assessment | Description |
|---|---|
ISO/IEC 27001:2022 | Information security management |
ISO/IEC 27001:2019 | Privacy information management |
ISO/IEC 27017:2015 | Cloud security controls |
SOC 2 Type 2 | Security, availability, and confidentiality controls |
Customers can request applicable certificates, reports, and assessment information from HP.
Related resources
For more information about WXP security, see:
Conclusion
HP recognizes that the threat landscape changes rapidly. The evolution of cyberattacks began with file deletion and website defacement in the late 1990s, then moved into the monetization stage with stolen credentials and ransomware. Most recently attacks are being waged by nation-states that are extremely well funded and intent on bringing down power grids and rendering tens of thousands of computers and mobile devices inoperable.
Addressing these risks is a mission HP embarked on more than forty years ago. HP’s legacy of innovation in security threat detection and protection, along with ongoing security-focused investments, informs the design of applications such as WXP. The result is a secure, cloud-based IT management solution built on an integrated security platform that spans the application, physical data center, and end-user access.
With built-in security features, WXP offers organizations a trusted tool to simplify the daily management of devices, data, and users through multiple robust layers of security.
Contact Us
For any assistance, create a support case or email support@wxp.hp.com.