Rentals
Shop Online
  • Devices & Hardware · Surface, Apple, Hardware-as-a-Service

Always warrantied. One managed fleet.

Microsoft Surface, Apple, and Intune-managed. Devices arrive provisioned to the user’s desk. We refresh on a 36-month cycle. We collect the old one.
Book a scoping call
Run the device-fleet benchmark

Runs on

Microsoft Surface
Apple
Intune
Windows Defender logo Defender

Autopilot

Enrolled before it lands at the desk

Autopilot

Policies applied. Productive in 15 minutes.

Month 33

Refresh triggered. We collect the old one.

South African businesses grown
0 +
From box to productive, zero-touch
0 min
Refresh cycle built into the price
1 months
Microsoft Customer Agreement, whole fleet
0
  • The wedge no buying approach matches

Most buying gives you invoices. Braintree gives you a managed fleet.

Devices arrive provisioned. Refresh in 36 months. We collect the old one. The Microsoft Customer Agreement covers the device. Microsoft Intune provisions it before it lands. The user opens the box, signs in, gets their apps and policies. Three lines of effort from your IT lead. Not three days.
  • The platform you land on

The Microsoft device stack you'll run. Five products. One Customer Agreement.

Microsoft Surface

Surface Pro, Surface Laptop, Surface Hub. Designed for Windows, built for Microsoft Intune, sold under your Microsoft Customer Agreement.

Provisioned before it reaches the desk

36-month refresh built into the price

One warranty escalation path

Apple

MacBook, iPad, iPhone. Microsoft Customer Agreement procurement via Braintree. Same Microsoft Intune-managed plane as Surface.

Microsoft Intune enrolment

Unified endpoint management. Autopilot zero-touch enrolment. Policy push, compliance, app deployment across Windows, macOS, iOS and Android.

Windows Defender logo

Microsoft Defender for Endpoint

Threat detection and response on every fleet device. EDR with automated investigation. Microsoft-direct security feed.

Hardware-as-a-Service. Built by Braintree

Custom fleet automations and procurement playbooks where Microsoft does not ship a named one. Monthly per-device subscription, refresh built in.

  • The service lifecycle. End to end.

Every stage. One Microsoft Customer Agreement. Procure to decommission.

From purchase to disposal, the device fleet runs on Microsoft-named products. We deploy them where the TCO case is proven. Not by default. The refresh cycle is built into the price.
01 · Procure

One agreement

The work
Surface, Apple, monitors, peripherals. Sourced under your Microsoft Customer Agreement. Negotiated price per device.
Why it matters
One agreement covers every form factor. One commercial relationship, not a stack of supplier accounts.
02 · Enrol
Zero-touch
The work
Zero-touch enrolment. The device arrives provisioned to the user. They sign in, get apps and policies, productive in 15 minutes.
Why it matters
Microsoft Intune Autopilot enrols the device into your tenant before it lands at the user’s desk.
03 · Manage
One console
The work
Endpoint management, compliance, security. One Microsoft Intune dashboard for the whole fleet. Microsoft Defender on every device.
Why it matters
Policies, applications, compliance rules and security baselines push across Windows, macOS, iOS and Android from one console.
04 · Refresh
Month 33
The work
Refresh trigger at month 33. We deliver the new device provisioned. We collect the old one for decommission.
Why it matters
The refresh is automated against warranty triggers. It is built into the price, not a separate CapEx event.
05 · Decommission
Audit-ready
The work
Remote wipe via Microsoft Intune. Asset retired from the fleet. POPIA-aligned e-waste compliance via certified disposal partner.
Why it matters
Microsoft 365 Compliance Manager records the wipe event for the audit trail. Devices with residual value enter the refurbishment pipeline.

Procure, Enrol, Manage, Refresh and Decommission. One Microsoft Customer Agreement covers the whole lifecycle. One IT-lead view. One escalation path.

  • How we deploy. The AI Value Framework.

Discover, Evaluate, Deploy, Build.

Four stages. Business case first. The full TCO modelled. Deployed only where the case proves out.
01

Discover

Audit your current device estate. Form factors, OS mix, warranty coverage, refresh cycles. Map the gaps.

02

Evaluate

DaaS vs CapEx TCO model presented. Microsoft Customer Agreement procurement structure proposed. Sign-off before any device order.

$ TCO sign-off gate

03

Deploy

Microsoft Customer Agreement signed. First device order placed. Microsoft Intune Autopilot enrolment templated. First user receives a provisioned device inside two weeks.

04

Build

Custom procurement playbooks and refresh-trigger automations where Microsoft does not yet ship a named one. Fleet managed against the agreement.

  • Gated, not default

Braintree doesn't deploy by default. We deploy where the TCO case is proven.

  • Two paths to a managed device fleet

The fork is where you start, not where you land.

Devices-as-a-Service or CapEx purchase. Different commercial appetites need different scoping work. Read the column that applies. Both arrive at the same place: a provisioned, managed device fleet.

Devices-as-a-Service

Best when you want monthly subscription, fully managed, refresh built in.
  • Monthly per-device subscription. The Customer Agreement covers the hardware, Microsoft Intune covers the management, Braintree covers the logistics.
  • 36-month refresh cycle baked into the price. Best fit for IT leads who want operational predictability and CFOs who prefer OpEx over CapEx.
  • First Customer Agreement sign-off in 2 weeks. First devices provisioned in week three. Refresh cycle starts month 33.

CapEx purchase

Best when you want to own the devices outright. CapEx on the balance sheet.
  • One-time per-device purchase. The Customer Agreement still covers procurement and Microsoft Intune management. You retain the asset at end of life.
  • Best fit for established enterprises with predictable refresh forecasts and CFOs who prefer asset ownership.
  • Device order in 2 weeks. Provisioning and Microsoft Intune setup the same as DaaS. Refresh trigger handled when your cycle calls for it.
Timeline: first devices provisioned to users in week three, either path.
  • One agreement. The commercial case.

One Microsoft Customer Agreement. Not a stack of device invoices.

How the commercial model changes when every device runs on one agreement, one refresh cycle, one IT-lead view. One Microsoft partner. One agreement. One unified, secure solution.
A supplier per device.

Before. Three invoices, three warranty calls.

  • Surface bought from one supplier. Apple from a retailer. Monitors and peripherals from a third. Three invoices per refresh round, three warranty calls
  • Provisioning happens at the user's desk on day one. The IT lead spends four hours per device. Refresh cycles run on whoever-shouts-loudest priority
  • End-of-life devices end up in a cupboard. POPIA and e-waste compliance an afterthought
One fleet, one view.

After. One Intelligent Agreement.

  • One Microsoft Customer Agreement covers Surface, Apple, monitors and peripherals. Every form factor your fleet runs
  • One monthly invoice (DaaS) or one structured CapEx schedule. One warranty escalation path. Zero-touch provisioning, productive in 15 minutes
  • Refresh cycles managed centrally. End-of-life: Microsoft Intune remote wipe, POPIA-aligned e-waste compliance via certified disposal partner. Auditable
dev tent | Braintree
The fleet in use. Provisioned, compliant, on one agreement, refreshed before it slows anyone down.
  • Proof, not promises

5 years

Microsoft Intune. A Leader in the Gartner Magic Quadrant for Unified Endpoint Management, five consecutive years.
Hundreds of millions of devices run under Microsoft Intune management worldwide, the management plane behind every Braintree fleet. Forrester’s commissioned Total Economic Impact study models the return over a three-year horizon. Braintree is a Microsoft Surface partner and an Apple Authorised Enterprise Reseller, with 220+ South African businesses on the books.

Microsoft Surface partner

Surface procurement, provisioning and warranty under one agreement.

Apple Authorised Enterprise Reseller

MacBook, iPad and iPhone on the same Intune-managed plane.

  • The honest comparison

Ad-hoc CapEx buying, Device-as-a-Service with Braintree, and the practical winner.

What matters Ad-hoc CapEx buying
Day one Device arrives blank. IT lead spends 2 to 4 hours per device
✓ Zero-touch via Intune Autopilot. 15 minutes to productive
Warranty Per-vendor warranty term. Mixed claim processes
✓ Rolled into the subscription. One escalation path
Fleet view Per-vendor spreadsheets. Manual asset tracking
✓ One Intune dashboard. Every device, user and policy in one view
Refresh Refresh paid separately each cycle. A CapEx event
✓ 36-month refresh built into the monthly subscription
End of life Disposal happens when it happens. POPIA and e-waste variable
✓ Intune remote wipe, POPIA-aligned e-waste, auditable
Ownership You own the asset. Resale or retention discretionary DaaS retains the asset for refurbishment. Off your balance sheet
5 to 1 in Device-as-a-Service's favour. Ad-hoc CapEx wins on asset ownership. Honest.
  • Talk to a specialist

Three device specialists. Matched to your scoping call.

We match you to the right specialist when you book the scoping call. Names land in your calendar invite, not on a page you scrolled past.

FL

Fleet Practice
Lead

Surface & Apple procurement

Microsoft Certified · Surface Specialist, Apple Authorised Enterprise Reseller

EM

Endpoint Management
Architect

Intune, Autopilot & compliance

Microsoft Certified · Modern Endpoint Administrator Associate

CL

Commercial Lead, One Intelligent Agreement

DaaS, CapEx & the commercial spine

Microsoft Customer Agreement ·
CSP
  • 8-minute benchmark

How does your device fleet compare to the SA enterprise median?

8 questions, benchmarked against 220+ SA clients. You get a tier, above median through to below median fixable in 12 months, plus the actions to close the gap.
Run the benchmark
  • How it works

From scoping call to a managed device fleet in three steps.

01

Tell us what you run today

Device estate, form-factor mix, Microsoft Intune maturity, warranty coverage, refresh cycle. Five to ten minutes on your side.

02

Get the findings

Braintree returns scoped device-fleet findings, the DaaS vs CapEx TCO model and the opportunity map. Inside five business days.

03

Review with the practice lead

Review scope, shortlist the device platforms, choose the fork, discuss refresh cadence and the SA-resident e-waste compliance answer. No sales pitch.

Book the 30-minute scoping call
  • FAQ

What IT leads ask before they book.

What's Devices-as-a-Service (DaaS) and how does it work?
DaaS is a monthly per-device subscription that bundles the hardware, the Microsoft Intune management, the warranty coverage, and the 36-month refresh cycle into one commercial agreement. Microsoft Customer Agreement covers procurement. Braintree handles provisioning, lifecycle management, refresh logistics, and end-of-life decommission. Your IT lead deals with one invoice and one escalation path. The user opens the box, signs in, and is productive in 15 minutes via Microsoft Intune Autopilot zero-touch enrollment. End of term, we collect the old device.
Surface fits businesses with deep Microsoft 365 and Windows tooling, especially where Teams, Copilot for Microsoft 365, and Intune-policy enforcement matter most. Apple fits creative-leaning roles, marketing teams, and users who already operate on macOS or iOS. The two are not exclusive. We manage mixed fleets under one Microsoft Intune plane. Both run Microsoft Customer Agreement procurement. Both inherit Microsoft Defender for Endpoint security. We model the device mix in the scoping call based on your role taxonomy.
Three jobs. Provision. Microsoft Intune Autopilot enrolls every new device into your tenant before it lands at the user’s desk. Manage. Microsoft Intune pushes policies, applications, compliance rules, security baselines, and patch updates across Windows, macOS, iOS, and Android. One console, one fleet. Protect. Microsoft Intune integrates with Microsoft Defender for Endpoint for threat detection and response. Lost or stolen device. One Intune click triggers remote wipe. POPIA-aligned. Audit-ready by default.
Three reasons. One. Microsoft and Apple device warranty terms align with 36 months for most enterprise SKUs. After month 36, warranty-extension premiums rise sharply. Two. Microsoft Windows and Apple macOS major-version support tends to expire 36 to 48 months after device launch. Devices older than 36 months start dropping out of OS support. Three. Performance erosion. The user productivity dip on a 4+ year device is measurable and predictable. 36 months is the inflection point where refresh pays back faster than the new-device cost.
Microsoft Intune handles both. Corporate-owned devices enroll via Microsoft Intune Autopilot for full management. BYOD devices enroll via Microsoft Intune App Protection Policies for app-level management without device-level intrusion. The corporate Microsoft 365 apps inherit your security policies. The user’s personal apps and data stay private. Lost or stolen BYOD device: corporate data is wiped without touching personal photos or files. POPIA and corporate-IT separation both honoured. Best fit. Mid-market and enterprise businesses with hybrid workforce models.
Three layers. Encryption. Every fleet device runs BitLocker (Surface and Windows) or FileVault (Apple) by default, policy-enforced via Microsoft Intune. Conditional Access. Microsoft Entra ID Conditional Access blocks corporate data on non-compliant or unfamiliar devices. Remote wipe. Lost or stolen device triggers immediate Microsoft Intune remote wipe. POPIA notification obligations are tracked in Microsoft Purview Compliance Manager. If the device is BYOD, only the corporate data zone is wiped. Personal data stays intact.
Four steps. One. Microsoft Intune remote wipe is triggered on the day the device is returned or replaced. Two. Microsoft 365 Compliance Manager records the wipe event for audit trail. Three. The physical device is collected by Braintree-managed certified disposal partner. Four. POPIA-aligned data destruction certificate plus e-waste compliance certificate are issued back to your IT lead. Devices that retain residual value enter our refurbishment pipeline for resale, with the proceeds netting against your next DaaS invoice if you elect.
Three answers. Credentials. Braintree is one of three Microsoft Managed Partners in South Africa. 220+ SA clients. 100+ Microsoft-certified professionals. Microsoft Surface specialist. Apple Authorised Enterprise Reseller relationships. Operations. SA-resident provisioning, SA-resident logistics, SA-resident certified e-waste disposal partner. Method. The AI Value Framework gates every device deployment against ROI. We are paid for the work, not for hardware markup. Our incentive aligns with your fleet operational predictability, not your device-count growth. Braintree doesn’t deploy AI agents by default. We deploy them where the ROI is proven.
  • From the practice

Insights for IT leads managing a Microsoft device fleet.

dev ins1 | Braintree

TCO

DaaS versus CapEx. The TCO scorecard for SA device fleets.

OpEx monthly versus CapEx outright. The scorecard across 36 months including refresh, warranty, e-waste compliance and productivity uplift.
  • In production
dev ins2 | Braintree

Microsoft Intune Autopilot. The 15-minute provisioning move SA IT leads miss.

Provisioning

Zero-touch enrolment via Microsoft Intune Autopilot. How a new device gets from box to productive in 15 minutes, not 2 to 4 hours.
  • In production
dev ins3 | Braintree

Refresh

36-month refresh. Why the inflection point matters more than average device age.

Warranty terms, OS support windows and a measurable productivity dip all turn at month 36. The inflection point that beats average device age.
  • In production
  • Where this connects

Devices and Hardware is one surface of the Microsoft estate.

Microsoft 365 logo (2022)

Modern Workplace

The productivity stack on the same fleet. Microsoft 365, Teams and Copilot licensing rolls with your device fleet. Per-device, per-user licensing aligned, on one Microsoft Customer Agreement.

Visit Modern Workplace
Windows Defender logo

Security

The security layer on every device. Microsoft Defender for Endpoint runs on every fleet device. Microsoft Sentinel correlates device-side threat signals. POPIA-aligned, SA-resident SOC operations.

Visit Security

Support & Managed Services

The team that runs the fleet. Managed support operates on the device fleet. Tier-3 escalations route through Microsoft-direct lanes. SA-resident engineers, on one agreement.

Visit Support
  • Get your CIO sleeping through the night. No 2am escalations

Let's grow.

Book the 30-minute scoping call. We audit your current fleet, model the DaaS vs CapEx TCO,
and tell you whether a managed device fleet is the right move. No pitch deck.
Book a scoping call
Run the device-fleet benchmark
Specialists in Business Applications, Modern Workplace and Azure.