IT asset management for mid-market IT teams
Know what you own, and what it's costing you
OnTrackio keeps one register of every device, licence and contract: who holds it, what it costs, and when it expires. The same register produces the NIS2 Article 21 evidence pack when an auditor asks.
16 of 16 rows shown
| PVL-0020 | Apple MacBook Air 13 M3Apple | Tomas Petrauskas | Vilnius HQ | 2028-04-05 1y 5mo | seen 09:41enrolling | Assigned | L7D2QK9XWM | yes | 2026-08-02 | TA-0123 | n/a |
|---|---|---|---|---|---|---|---|---|---|---|---|
| PVL-0004 | Apple MacBook Air 13 M3Apple | Agnė Vaitkutė | Vilnius HQ | 2029-03-05 2y 4mo | seen 08:57enrolling | Assigned | H9T4WQ2LMX | yes | 2026-08-02 | TA-0098 | n/a |
| PVL-0002 | Apple MacBook Pro 14 M3Apple | Eglė Stankevičienė | Vilnius HQ | 2027-12-05 1y 1mo | seen 09:12enrolling | Assigned | F3XN8K2QVD | yes | 2026-07-21 | TA-0096 | n/a |
| PVL-0009 | Dell Latitude 7440Dell | Maya Patel | Vilnius HQ | 2028-01-05 1y 2mo | seen 07:30enrolling | Assigned | 4KQ7M93 | yes | 2026-08-02 | TA-0103 | n/a |
| PVM-0001 | Dell UltraSharp U2723QEDell | Eglė Stankevičienė | Vilnius HQ | 2027-06-05 7mo | never | Assigned | CN0F2R7M | yes | 2026-07-21 | none | n/a |
| PVM-0002 | LG UltraFine 32UN880LG | Mantas Kazlauskas | Vilnius HQ | 2027-09-05 10mo | never | Assigned | 310NTPC7Q154 | yes | never | none | n/a |
| PVM-0003 | Dell UltraSharp U2723QEDell | Agnė Vaitkutė | Vilnius HQ | 2026-10-04 expired | never | Assigned | CN0F2R7N | yes | 2026-08-02 | none | n/a |
| PVL-0013 | Apple MacBook Pro 16 M3 ProApple | Aleksandr Volkov | Vilnius HQ | 2028-07-05 1y 8mo | seen 09:03enrolling | Assigned | M2V8KQ4XTD | yes | 2026-07-21 | TA-0107 | n/a |
| PVM-0004 | LG UltraFine 32UN880LG | Daniel Brown | Vilnius HQ | 2028-07-05 1y 8mo | never | Assigned | 310NTPC7Q187 | yes | never | none | n/a |
| PVL-0030 | Dell Latitude 7450Dell | unassigned | Vilnius HQ, stockroom | 2029-06-30 2y 8mo | never | Available | 5CT1N84 | yes | never | none | n/a |
| PVL-0031 | Dell Latitude 7450Dell | unassigned | Vilnius HQ, stockroom | 2029-06-30 2y 8mo | never | Available | 5CT1N85 | yes | never | none | n/a |
| PVM-0013 | Dell UltraSharp U2723QEDell | unassigned | Warsaw office, stockroom | 2029-01-15 2y 2mo | never | Available | CN0F2R7L | yes | never | none | n/a |
| PVL-0026 | Lenovo ThinkPad T14 Gen 3Lenovo | unassigned | Vilnius HQ, repair shelf | 2026-11-20 1mo | seen 07:02enrolling | In repair | PF1RD2VX | yes | 2026-09-10 | none | n/a |
| PVL-0027 | Apple MacBook Pro 14 M2 ProApple | Nora Lindqvist | Vilnius HQ | 2026-11-03 17d | seen 09:27enrolling | Assigned | G8P3T6D9YK | yes | 2026-08-02 | TA-0110 | n/a |
| PVL-0028 | Dell Latitude 7430Dell | Jonas Petrauskas | Remote (EU) | 2026-12-14 1mo | seen 2026-06-25enrolling | Assigned | 2FW6L39 | yes | 2026-05-19 | TA-0094 | n/a |
| PVL-0029 | Lenovo ThinkPad X1 Carbon Gen 10Lenovo | Emma Laurent | Warsaw office | 2027-09-02 10mo | seen 2026-07-10enrolling | Assigned | PF0HN7CJ | yes | 2026-07-21 | TA-0112 | n/a |
| 16 of 16 with category and owner · 0 missing serial · 10 verified within 90 days · 6 unverified ISO/IEC 27001 A.8 pack · SOC 2 CC6.1 pack · NIS2 21(2)(i) ITAM hygiene floor | |||||||||||
16 of 16 match
Sort any column; the filters mirror the product. Seven rows, two of them flagged silent past 90 days, are added so every chip has something to show.
as of 2026-10-17
The platform
Three problems, one platform
Most IT teams can't say exactly what they own, what's going unused, or what's about to renew. OnTrackio starts with one live inventory of every device, app, licence, and contract, then turns it into reclaimed spend, renewals you control, and audit evidence on demand.
Know what you actually own
A lightweight agent enrols every Mac and Windows device in minutes and builds one live inventory: hardware, installed software, licences, and contracts in a single place.
Stop paying for what you don't use
The agent reports which apps actually get opened. Match that against your licence counts and finance gets a clear list of idle seats to reclaim before the next renewal lands.
Stay ahead of renewals and audits
Every warranty and licence feeds one expiry calendar, and your live asset state exports straight into GDPR and NIS2 evidence. No spreadsheet scramble the week before a deadline.
Illustrative data from OnTrackio's demo workspace.
NIS2 Article 21
What an asset register can evidence for NIS2, and what it cannot
Native evidence for three sub-controls, a baseline for four, a proxy metric for two, nothing useful for one.
- ITAM-native evidence
- ITAM hygiene floor
- ITAM proxy
- Outside ITAM scope
21(2)(a) Risk analysis and information system security policies
ITAM hygiene floor
What the law asks
A risk analysis grounded in what you actually run, plus board-approved security policies.
What OnTrackio contributes
The asset register with categorization and serial tracking: the population a real risk analysis starts from.
21(2)(b) Incident handling
ITAM-native evidence
What the law asks
Incident handling internally, and Article 23 notifications to your CSIRT on 24-hour, 72-hour, and one-month clocks.
What OnTrackio contributes
The regulator-facing half natively: an Article 23 workflow with the 24h early warning, 72h notification, and final-report deadlines computed from detection time, plus a structured CSIRT mailable.
21(2)(c) Business continuity and crisis management
Outside ITAM scope
What the law asks
Continuity of your own operations: backups, disaster recovery, and crisis management for the systems you run.
What OnTrackio contributes
Honestly: little. Our own SaaS backups protect the register itself, not your production systems. No ITAM tool can evidence your BCP.
21(2)(d) Supply chain security
ITAM hygiene floor
What the law asks
A supplier security programme: policy, selection criteria, contract clauses, and per-supplier risk assessment (Article 21(3)).
What OnTrackio contributes
The vendor inventory: every software and hardware supplier with active licence counts, which is the population your supplier risk assessment covers.
21(2)(e) Security in acquisition, development and maintenance
ITAM proxy
What the law asks
Secure development, change management, vulnerability handling, patching, and security testing across the lifecycle.
What OnTrackio contributes
A procurement-record proxy: purchase dates, invoices, transfer agreements at handover, wipe certificates at disposal. Useful records, but not the SDLC and vulnerability-management evidence the control is really about.
21(2)(f) Effectiveness assessment
ITAM-native evidence
What the law asks
Policies and procedures to assess whether your risk-management measures actually work: measurable indicators, not assertions.
What OnTrackio contributes
Workflow and storage for the CIR section 7 requirements: a documented policy with a tamper check, cadenced metric snapshots computed from live asset and user data, and a quarterly review workflow with management sign-off.
21(2)(g) Cyber hygiene and training
ITAM hygiene floor
What the law asks
Basic hygiene practices plus a real awareness-training programme with records.
What OnTrackio contributes
The hygiene half of the numbers: MFA and passkey enrolment percentages and the org-wide enforcement policy state. MFA is one hygiene practice; it is not a training programme.
21(2)(h) Cryptography
ITAM proxy
What the law asks
A cryptography policy and key management covering your estate, not just your vendors' platforms.
What OnTrackio contributes
A coverage proxy: the share of endpoints reporting through the agent. Knowing 80 percent of endpoints are managed says nothing about whether their disks are encrypted, so the evidence pack never grades this above partial.
21(2)(i) HR security, access control and asset management
ITAM hygiene floor
What the law asks
Three areas in one clause: personnel security, access-control policies, and asset management.
What OnTrackio contributes
The asset-management third is where we go deepest: the inventory itself, plus the metric assessors reach for before anything else, offboarded people still holding assets. Role-based access and scoped, expiring API tokens cover our own surface.
21(2)(j) MFA, continuous authentication and secure communications
ITAM-native evidence
What the law asks
Multi-factor or continuous authentication, and secured emergency communications for when the primary channel is down.
What OnTrackio contributes
The MFA half natively: TOTP and phishing-resistant passkey enrolment percentages, org-wide policy enforcement across password, Google, Microsoft, and SAML sign-in paths, and the agent's signed request protocol.
Pricing
Per-device pricing, public
A base allowance per tier. Above it, Starter and Business publish a per-device rate, billed at renewal. Enterprise negotiates its rate per contract.
Onboarding
Onboarding, in the order it happens
No services engagement and no consultant. Install the agent and the picture builds itself.
Import a CSV, or use the importer presets for Snipe-IT, Lansweeper, ServiceNow, InvGate, Freshservice and GLPI.
What to look at
The data is OnTrackio's own demo workspace, illustrative, not a customer.
Push our signed macOS and Windows installers through Intune, Jamf, or Munki. Devices enrol themselves in minutes. We collect device details (hostname, model, serial, OS), installed apps and a daily used-or-not flag per app, never keystrokes, window titles, or file contents.
What to look at
The data is OnTrackio's own demo workspace, illustrative, not a customer.
Within a day your dashboard shows every device, every installed app, every license, and the seats assigned against each one.
What to look at
The data is OnTrackio's own demo workspace, illustrative, not a customer.
Each licence shows its assigned seats against what you pay for, and the renewal date before it auto-charges.
What to look at
The data is OnTrackio's own demo workspace, illustrative, not a customer.
Export the audit-ready evidence pack when legal or a regulator asks. The timestamp is printed at the top.
What to look at
The data is OnTrackio's own demo workspace, illustrative, not a customer.
Reclaim the unused seats. Schedule renewals with finance before they auto-charge. You choose the dormancy threshold; we do not show it from a cold import.
What to look at
The data is OnTrackio's own demo workspace, illustrative, not a customer.
Onboarding is self-serve once you are a customer; hands-on onboarding is a paid add-on.
Start here
Start with the work, not a sales call
Next step
Book the 30 minutes
A founder walks you through OnTrackio on a live demo workspace: how it tracks assets, surfaces idle seats, and produces NIS2 evidence. No prep needed, and onboarding is self-serve when you're ready.
or email sales@ontrackio.com