The asset inventory that builds itself.
Acetflo pulls devices from the tools you already run, merges them into one record per laptop and phone, and keeps owners, tickets and audit trails in step. Your team spends its time on people, not spreadsheets.
- Hosted in the EU, or on your own servers
- Single sign-on with Entra ID and Okta
- Tamper-evident audit log
Works with the tools you already run
Microsoft Intune- Jamf
Iru (Kandji)
Fleet
CrowdStrike
Microsoft Defender
Entra ID- Okta
- Jira Service Management
BambooHR- HiBob
- Personio
Deel
Splunk
Microsoft Sentinel- Datadog
- Elastic
Everything about every device, from first login to final wipe.
Acetflo connects your device management, identity, HR and ticketing tools, so the inventory stays right without anyone maintaining it.
One record per device, however many tools can see it.
Intune, Jamf, Kandji, Fleet, CrowdStrike and Defender each know part of the story. Acetflo matches their records by any identifier they share, so you get one device with the complete picture.
- Matches without serials. BYOD phones and Defender machines merge by Entra device ID, UDID, hardware UUID or agent ID.
- Compliance you can trust. A device takes the worst state reported by any of its sources.
- Owners assigned automatically by email or UPN, without overwriting anything set by hand.
- Safe syncs. If a vendor returns a partial list, the sync stops instead of removing devices.
serial C02FK3XQMD6Magent 9f2c…e81aentra 4d1e…77b0- Owner
- Lena Hoffmann
- OS
- macOS 26.1
- Location
- Berlin office
- Last seen
- 4 minutes ago
- Warranty
- Until Mar 2027
Joiners, movers and leavers, handled before the last day.
BambooHR, HiBob, Personio and Deel keep people, managers, departments and locations current. When HR records a leaving date, Acetflo can start device retrieval right away.
- Check-outs with signed acknowledgements. People sign by emailed link or on their own "My assets" page.
- Overdue returns trigger automations, such as a reminder or a Jira ticket.
- Devices on the HR profile. BambooHR and HiBob can show each employee's assigned devices.
- SOLast day 29 NovemberFrom HiBob, 2 days agoLeaving
- ThinkPad X1 CarbonPF4RX2LMAssigned
- iPhone 14F2LXK9N1PQAssigned
Opened ITSM-482 "Retrieve 2 devices from Sam Okafor" in Jira Service Management.
Everyone sees exactly what they should.
Build roles from a catalogue of permissions, then limit them to locations, departments or asset types. Limits apply everywhere: lists, search, dashboards, exports and bulk actions.
- Single sign-on with Entra ID, Okta or any OIDC or SAML 2.0 provider.
- SCIM provisioning for users and groups, with identity-provider groups mapped to roles.
- Financial and personal fields stay hidden unless a role allows them.
- No self-escalation. Nobody can grant themselves more than they already have.
- View and edit assetsOnly in Lisbon and its sub-locationsAllowed
- Check out to peopleOnly laptops and phonesAllowed
- Purchase price and book valueFinancial fieldsHidden
- Assigned throughEntra group "IT-Lisbon"SCIM
An audit trail your security team will actually use.
Every change, sign-in, denied request, export and sensitive read is recorded together with the change itself. Each entry is chained to the one before, so gaps and edits are detectable.
- Stream to your SIEM: syslog over TLS, HTTPS webhook, Splunk, Microsoft Sentinel, Datadog, Elastic or OpenSearch, or S3.
- Your format: JSON, OCSF, CEF or LEEF.
- Nothing lost in an outage. Each destination resumes from where it stopped.
- asset.checked_out MacBook Pro 14″ → Lena Hoffmann
#48211 · 7c1f…a09e - user.sign_in t.rivera via Entra ID
#48212 · e4b2…19c3 - access.denied export.financial by a.tanaka
#48213 · 03dd…7f41 - scim.user.deactivated s.okafor
#48214 · 9a60…c2b8
Connected to the tools you already run.
No agents to roll out and nothing to replace. Connect your existing tools, and Acetflo keeps the inventory in step with them.
Devices and security
Each tool sees part of your fleet. Together they see all of it.
- Microsoft Intune
- Jamf
- Iru (Kandji)
- Fleet
- CrowdStrike Falcon
- Microsoft Defender
Identity
Single sign-on and automatic user provisioning.
- Entra ID
- Okta
- Any OIDC or SAML
- SCIM 2.0
HR systems
People, managers, departments and leaving dates.
- BambooHR
- HiBob
- Personio
- Deel
Service management
Tickets linked to every asset, created by automations.
- Jira Service Management
- Webhooks and REST API
Label printers
QR labels with your logo, printed straight from Acetflo.
Brother QL- Brother P‑touch
Zebra- Any browser printer
SIEM and log destinations
Your audit log, streamed in order as JSON, OCSF, CEF or LEEF.
- Splunk
- Microsoft Sentinel
- Datadog
- Elastic
- OpenSearch
- Amazon S3
- Syslog over TLS
- HTTPS webhook
Hand-overs people actually sign.
Check a device out with a due date and its condition. The recipient signs with their name and a drawn signature, and Acetflo keeps a tamper-evident copy of exactly what they agreed to.
- Device
- MacBook Pro 14″ · C02FK3XQMD6M
- Condition
- New, with charger and sleeve
- Due back
- When employment ends
4 Nov 2026, 09:12
Know what it's worth and when to replace it.
Depreciation profiles per asset type give you book values, replacement dates and refresh budgets. The software catalogue compares licence seats with real installs across Jamf, Fleet, Intune and Defender.
- Adobe Acrobat Pro172 of 200 seats
- Figma52 installs, 50 seats
One source of truth for everyone who touches a laptop.
Stop reconciling exports.
One inventory from every management tool, with labels, check-outs and tickets in the same place.
Find the gaps first.
See devices missing an agent or out of compliance, and stream every action to your SIEM.
Smooth first and last days.
Joiners get their kit on time and leavers return theirs, driven by the dates already in your HR system.
Numbers you can book.
Purchase prices, depreciation and refresh budgets, visible only to the people who need them.
The details that make it stick.
QR asset labels
Print with your logo from the browser, or straight to Brother QL, P-touch and Zebra network printers.
Jira Service Management
Linked tickets on every asset, tickets from bulk selections, and live status updates.
Automations
When SCIM deactivates a leaver, open a retrieval ticket. When a return is overdue, remind them.
API and webhooks
A versioned REST API with an OpenAPI spec, signed webhooks for any event, and service accounts.
Custom fields
Typed fields per asset type, with sensitive ones hidden from roles that don't need them.
Your branding
Your logo, colour, product name and sign-in message, so it feels like your own tool.
Your devices never show up in anyone else's inventory.
Isolation between customers is built in layers. If one layer ever failed, the next would still stop the data from crossing over.
Your own workspace address
Your team signs in at yourcompany.acetflo.com. Sessions, API tokens and SCIM tokens only work there.
Enforced by the database
Row-level security in PostgreSQL limits every query to your organisation, even if the application asked for more.
Your own encryption key
Integration and single sign-on secrets are encrypted with a key that belongs to your workspace alone.
Attacked on every change
Before any release, automated tests try every API route with another customer's credentials and data.
Run it in our cloud or on your own servers.
The same product and the same signed releases everywhere. Only where it runs changes.
Acetflo Cloud
We run it for you in the EU and keep it up to date.
- Hosted in Paris, with backups in Amsterdam
- Your own address at yourcompany.acetflo.com
- Updates without downtime
Dedicated
Your own database and application servers, still run by us.
- Nothing shared with other customers
- Updates inside your maintenance window
- Your own domain
On your servers
Run it in your own data centre or cloud account.
- Docker Compose or a Helm chart
- Reaches on-premises Jamf, Jira and printers
- Offline licence, no call home
Good to know
Do we need to replace our device management tools?
No. Acetflo reads from Intune, Jamf, Kandji, Fleet, CrowdStrike and Defender and combines what they know. Your tools keep managing the devices; Acetflo gives you one inventory across all of them.
Where is our data stored?
Acetflo Cloud runs on Scaleway in Paris, France, with disaster-recovery copies in Amsterdam. Your data stays in the EU. If you prefer, you can run Acetflo on your own servers instead.
Could our devices ever appear in another company's workspace?
Separating customers is the first thing we designed for. Each workspace has its own address and credentials, the database itself refuses to return another organisation's records, and secrets are encrypted with a key per workspace. Automated tests attempt cross-customer access on every route before each release.
Read the details on our security page.
Which sign-in methods are supported?
Single sign-on with Entra ID, Okta or any OIDC or SAML 2.0 provider, with SCIM provisioning for users and groups. A local owner account remains available as a break-glass login.
Can we take our data with us?
Yes. On request we export your complete workspace, including assets, people, history and the audit log. When you close your account, your data is deleted after a 30-day grace period and the key that encrypted your secrets is destroyed.
See Acetflo with your own devices.
We'll connect the tools you already use and show you how your inventory builds itself.