Rentals
Shop Online
  • SOLUTION 11. DEVICES AND HARDWARE

One device fleet. Always warrantied. Always managed.

Microsoft Surface, Apple, and Intune-managed. Devices arrive provisioned to the user’s desk. We refresh on a 36-month cycle. We collect the old one.
Scope your device fleet
Run the device-fleet benchmark check
SA clients
0 +
Microsoft-
certified
0 +
Microsoft
Managed
Partners
0 in SA
refresh built
in
0 -month
Screenshot 2026 06 02 at 12.16.57 | Braintree
  • The wedge no distributor matches.

Devices arrive provisioned. Refresh in 36 months. We collect the old one.

Microsoft Customer Agreement covers the device. Microsoft Intune provisions it before it lands. The user opens the box, signs in, gets their apps and policies. Three lines of effort from your IT lead. Not three days.
Zero-touch provisioning via Microsoft Intune Autopilot.
Screenshot 2026 06 02 at 12.17.18 | Braintree
  • The Microsoft device stack

The Microsoft device stack you'll run. Five products. One Customer Agreement.

Microsoft Surface

Surface Pro, Surface Laptop, Surface Hub. Designed for Windows, built for Microsoft Intune, sold under your Microsoft Customer Agreement.

Apple

MacBook, iPad, iPhone. Microsoft Customer Agreement procurement via Braintree. Same Microsoft Intune-managed plane as Surface.

Microsoft Intune

Unified endpoint management. Autopilot zero-touch enrollment. Policy push, compliance, app deployment across Windows, macOS, iOS and Android.

Microsoft Defender for Endpoint

Threat detection and response on every fleet device. EDR with automated investigation. Microsoft-direct security feed.

Microsoft Foundry. Built by Braintree.

Custom fleet automations and procurement playbooks on Microsoft Foundry where Microsoft does not ship a named one.

  • The device lifecycle. End to end.

Every stage. One Microsoft Customer Agreement. Procurement to decommission.

From purchase to disposal, the device fleet runs on Microsoft-named products. We deploy them where the ROI is proven. Not by default. The refresh cycle is built into the price.
Stage 01

Procure

Microsoft Customer Agreement device procurement

Microsoft Customer Agreement device procurement

Stage 02

Provision

Microsoft Intune Autopilot + zero-touch deployment

Zero-touch enrollment. Device arrives provisioned to the user. They sign in, get apps and policies, productive in 15 minutes.

Stage 03

Manage

Microsoft Intune + Microsoft Defender for Endpoint

Endpoint management, compliance, security. One Microsoft Intune dashboard for the whole fleet. Microsoft Defender on every device.

Stage 04

Refresh

36-month refresh automation + warranty triggers

Refresh trigger at month 33. We deliver the new device provisioned. We collect the old one for decommission.

Stage 05

Decommission

Microsoft 365 Compliance Manager data wipe + e-waste compliance

Remote wipe via Microsoft Intune. Asset retired from the fleet. POPIA-aligned e-waste compliance via certified disposal partner.

Custom domain agents

Built by Braintree on Microsoft Foundry

For the use cases Microsoft does not yet ship a named agent. Built on Microsoft Foundry, Copilot Studio and Power Automate. SA-grounded. Production. POPIA-aligned. Custom agents enter through the AI Value Framework. Same business case discipline as the named agents above.
  • How we deploy

How we deploy. The AI Value Framework.

Four stages. Business case first. ROI modelled. Deployed only where the case proves out.

Discover

Audit your current device estate. Form factors, OS mix, warranty coverage, refresh cycles. Map gaps.

Evaluate

Go / No-go gate DaaS vs CapEx TCO model presented. Microsoft Customer Agreement procurement structure proposed. Sign-off before any device order.

Deploy

Microsoft Customer Agreement signed. First device order placed. Microsoft Intune Autopilot enrollment templated. First user receives provisioned device inside two weeks.

Build

Custom procurement playbooks and refresh-trigger automations on Microsoft Foundry where Microsoft does not yet ship a named one.

Braintree doesn’t deploy AI agents by default. We deploy them where the ROI is proven.
  • Two paths to a managed device fleet.

Devices-as-a-Service or CapEx purchase. Pick the model.

Different commercial appetites need different scoping work. Read the column that applies.
PATH 01. DEVICES-AS-A-SERVICE

You want monthly subscription, fully managed, refresh built in.

  • Monthly per-device subscription. Microsoft Customer Agreement covers the hardware, Microsoft Intune covers the management, Braintree covers the logistics. 36-month refresh cycle baked into the price.
  • Best fit. Mid-market and enterprise IT leads who want operational predictability. CFOs who prefer OpEx over CapEx. Businesses scaling unpredictably.
  • Typical engagement. First Microsoft Customer Agreement sign-off in 2 weeks. First devices provisioned to users in week three. Refresh cycle starts month 33.
PATH 02. CAPEX PURCHASE

You want to own the devices outright. CapEx on the balance sheet.

  • One-time per-device purchase. Microsoft Customer Agreement still covers procurement and Microsoft Intune management. You retain the asset at end of life.
  • Best fit. Established enterprises with predictable refresh forecasts. Businesses with CapEx budget allocated against device infrastructure. CFOs who prefer asset ownership.
  • Typical engagement. Device order in 2 weeks. Provisioning and Microsoft Intune setup the same as DaaS. Refresh trigger handled when YOUR cycle calls for it, not on a 36-month default.
Scope your device fleet
  • The commercial spine.

One Microsoft Customer Agreement. Not a stack of device invoices.

How the commercial model changes when every device runs on one agreement, one refresh cycle, one IT-lead view.
BEFORE. AD HOC.

Your current device estate.

  • Surface bought direct from one supplier. Apple bought from a retailer. Monitors and peripherals from a third.
  • Three invoices per refresh round. Three warranty calls when something breaks.
  • Provisioning happens at the user's desk on day one. IT lead spends 4 hours per device.
  • Refresh cycles run on whoever-shouts-loudest priority. No central view.
  • End-of-life devices end up in a cupboard. POPIA and e-waste compliance an afterthought.
AFTER. ONE INTELLIGENT AGREEMENT.

Your device estate on one contract.

  • One Microsoft Customer Agreement covers Surface, Apple, monitors, peripherals. Every form factor your fleet runs.
  • One monthly invoice (DaaS) or one structured CapEx schedule. One warranty escalation path.
  • Zero-touch provisioning via Microsoft Intune Autopilot. The user opens the box, signs in, productive in 15 minutes.
  • Refresh cycles managed centrally on a 36-month default. Or your cycle if CapEx.
  • End-of-life: Microsoft Intune remote wipe, POPIA-aligned e-waste compliance via certified disposal partner. Auditable.
0 M+

lDevices under Microsoft Intune management worldwide. Microsoft public. Verified via Microsoft's most recent
Microsoft Intune adoption disclosure.
Customer-specific outcomes vary.

5TH YR

Leader, Gartner Magic Quadrant for Unified Endpoint Management Microsoft Intune. Fifth consecutive year. Independent analyst evaluation.

200%+

Total Economic Impact across Microsoft Intune deployment. Forrester commissioned, three-year horizon. Cohort-cited proof point. Same TEI methodology as Business Central.

  • vs the alternative

Ad hoc CapEx, One Devices-as-a-Service subscription, and the practical winner.

Dimension
Ad hoc CapEx (per-vendor)
One Devices-as-a-Service with Braintree
Practical winner
Provisioning
Device arrives blank. IT lead spends 2 to 4 hours per device.
Zero-touch via Microsoft Intune Autopilot. User opens the box. 15 minutes to productive.
DaaS
Warranty coverage
Per-vendor warranty term. Mixed claim processes.
Warranty rolled into the DaaS subscription. One escalation path.
DaaS
Fleet visibility
Per-vendor spreadsheets. Manual asset tracking.
Microsoft Intune dashboard. Every device, every user, every policy in one view.
DaaS
WedgeRefresh cycle built into the price
Refresh paid separately each cycle. CapEx event.
36-month refresh built into the DaaS monthly subscription. No CapEx event.
DaaS
Asset ownership at end of term
You own the asset. Resale or retention discretionary.
DaaS retains the asset for refurbishment and resale. Asset off your balance sheet.
Ad hoc CapEx
End-of-life compliance
Disposal happens when it happens. POPIA and e-waste compliance variable.
Microsoft Intune remote wipe + POPIA-aligned e-waste compliance via certified disposal partner. Auditable.
DaaS
5 to 1 in DaaS’s favour. CapEx wins on asset ownership. Honest.
  • Talk to a device specialist

Three specialists. One direct line. Plus the 8-minute benchmark check.

The bench you’ll work with

Three device specialists. Matched to your scoping call.

Screenshot 2026 06 01 at 13.52.48 | Braintree

01 Device Practice Lead

Microsoft Certified. Surface Specialist + Apple Authorised Enterprise Reseller liaison.

02 Fleet Architect (Intune and zero-touch)

Microsoft Certified. Modern Endpoint Administrator Associate.

03 Commercial Lead, One Intelligent Agreement

Microsoft Customer Agreement. CSP.

We match you to the right specialist when you book the scoping call. Names land in your calendar invite, not on a page you scrolled past.
Match me to a specialist →
  • Free, 8 minutes

How does your device fleet compare to the SA enterprise median?

8 questions. We benchmark your fleet against 220+ SA Microsoft Solutions Partner clients. You get a tier. Above median, At median, Below median fixable in 90 days, Below median fixable in 12 months. Plus the actions to close the gap.
Run the device-fleet benchmark check
  • Scoping Call. Devices and Hardware.

From scoping call to a managed device fleet in three steps.

01

Share your environment

Tell us what you run today. Device estate, form-factor mix, Microsoft Intune maturity, warranty coverage, refresh cycle. Five to ten minutes on your side.

02

5-day scoped response (SLA)

Braintree returns scoped device-fleet findings, the DaaS vs CapEx TCO model and the AI Value Framework opportunity map. Inside five business days.

03

30-minute findings call

Review scope with the architect. Shortlist the device platforms. Choose the fork. Discuss refresh cadence. Discuss the SA-resident e-waste compliance answer. No sales pitch.
Book the 30-minute scoping call
  • Common questions, honestly answered.

What IT leads ask before they book.

Eight questions we answer in every scoping call. Pre-empted here so you can scan first.
What's Devices-as-a-Service (DaaS) and how does it work?
DaaS is a monthly per-device subscription that bundles the hardware, the Microsoft Intune management, the warranty coverage, and the 36-month refresh cycle into one commercial agreement. Microsoft Customer Agreement covers procurement. Braintree handles provisioning, lifecycle management, refresh logistics, and end-of-life decommission. Your IT lead deals with one invoice and one escalation path. The user opens the box, signs in, and is productive in 15 minutes via Microsoft Intune Autopilot zero-touch enrollment. End of term, we collect the old device.
Surface fits businesses with deep Microsoft 365 and Windows tooling, especially where Teams, Copilot for Microsoft 365, and Intune-policy enforcement matter most. Apple fits creative-leaning roles, marketing teams, and users who already operate on macOS or iOS. The two are not exclusive. We manage mixed fleets under one Microsoft Intune plane. Both run Microsoft Customer Agreement procurement. Both inherit Microsoft Defender for Endpoint security. We model the device mix in the scoping call based on your role taxonomy.
Three jobs. Provision. Microsoft Intune Autopilot enrolls every new device into your tenant before it lands at the user’s desk. Manage. Microsoft Intune pushes policies, applications, compliance rules, security baselines, and patch updates across Windows, macOS, iOS, and Android. One console, one fleet. Protect. Microsoft Intune integrates with Microsoft Defender for Endpoint for threat detection and response. Lost or stolen device. One Intune click triggers remote wipe. POPIA-aligned. Audit-ready by default.
Three reasons. One. Microsoft and Apple device warranty terms align with 36 months for most enterprise SKUs. After month 36, warranty-extension premiums rise sharply. Two. Microsoft Windows and Apple macOS major-version support tends to expire 36 to 48 months after device launch. Devices older than 36 months start dropping out of OS support. Three. Performance erosion. The user productivity dip on a 4+ year device is measurable and predictable. 36 months is the inflection point where refresh pays back faster than the new-device cost.
Microsoft Intune handles both. Corporate-owned devices enroll via Microsoft Intune Autopilot for full management. BYOD devices enroll via Microsoft Intune App Protection Policies for app-level management without device-level intrusion. The corporate Microsoft 365 apps inherit your security policies. The user’s personal apps and data stay private. Lost or stolen BYOD device: corporate data is wiped without touching personal photos or files. POPIA and corporate-IT separation both honoured. Best fit. Mid-market and enterprise businesses with hybrid workforce models.
Three layers. Encryption. Every fleet device runs BitLocker (Surface and Windows) or FileVault (Apple) by default, policy-enforced via Microsoft Intune. Conditional Access. Microsoft Entra ID Conditional Access blocks corporate data on non-compliant or unfamiliar devices. Remote wipe. Lost or stolen device triggers immediate Microsoft Intune remote wipe. POPIA notification obligations are tracked in Microsoft Purview Compliance Manager. If the device is BYOD, only the corporate data zone is wiped. Personal data stays intact.
Four steps. One. Microsoft Intune remote wipe is triggered on the day the device is returned or replaced. Two. Microsoft 365 Compliance Manager records the wipe event for audit trail. Three. The physical device is collected by Braintree-managed certified disposal partner. Four. POPIA-aligned data destruction certificate plus e-waste compliance certificate are issued back to your IT lead. Devices that retain residual value enter our refurbishment pipeline for resale, with the proceeds netting against your next DaaS invoice if you elect.
Three answers. Credentials. Braintree is one of three Microsoft Managed Partners in South Africa. 220+ SA clients. 100+ Microsoft-certified professionals. Microsoft Surface specialist. Apple Authorised Enterprise Reseller relationships. Operations. SA-resident provisioning, SA-resident logistics, SA-resident certified e-waste disposal partner. Method. The AI Value Framework gates every device deployment against ROI. We are paid for the work, not for hardware markup. Our incentive aligns with your fleet operational predictability, not your device-count growth. Braintree doesn’t deploy AI agents by default. We deploy them where the ROI is proven.
  • From the Braintree practice.

Insights for IT leads managing a Microsoft device fleet.

Strategy

DaaS versus CapEx. The TCO scorecard for SA mid-market and enterprise device fleets.

OpEx monthly versus CapEx outright. The TCO scorecard across 36 months including refresh, warranty, e-waste compliance and productivity-uplift. The decision tree SA IT leads need before they sign or renew.
  • Article in production

Provisioning

Microsoft Intune Autopilot. The 15-minute provisioning move SA IT leads miss.

Zero-touch enrollment via Microsoft Intune Autopilot. How a new device gets from box to productive in 15 minutes, not 2 to 4 hours. The deployment template SA businesses use to operationalise it.
  • Article in production

Lifecycle

36-month refresh. Why the inflection point matters more than the average device age.

Warranty erosion, OS support drop-off, productivity dip. The three reasons the 36-month refresh cycle compounds. The Braintree-managed refresh trigger SA fleet leads use to time the move.
  • Article in production
  • Solutions adjacent to Devices and Hardware.

Where the device fleet meets the rest of your Microsoft estate.

One Braintree agreement. One team. Full Microsoft coverage.

Modern Workplace

Microsoft 365, Teams, Copilot for Microsoft 365 licensing rolls with your device fleet. Per-device, per-user licensing aligned. Your device fleet and your productivity stack on one Microsoft Customer Agreement.

Explore →

Security

Microsoft Defender for Endpoint runs on every fleet device. Microsoft Sentinel correlates device-side threat signals across the estate. POPIA-aligned, SA-resident SOC operations. Same Microsoft Intune-managed devices, same Microsoft-direct security feed.

Explore →

Support and Managed Services

Managed support operates on the device fleet. Tier-3 escalations route through Microsoft-direct lanes. SA-resident engineers. The support function and the fleet management plane on one Microsoft Customer Agreement.

Explore →
  • One device fleet. Always under warranty. Always managed.

Get your IT lead with a managed device fleet. Refresh cycles you don't have to chase.

30-min scoping call. We audit your current fleet, model the DaaS vs CapEx TCO, and tell you whether a managed device fleet is the right move. No pitch deck.
Scope your device fleet
Run the device-fleet benchmark check