01Fleet policy · config

Set it.
Forget it.

Decide once what "healthy" means for your fleet. Minimum OS, how fast patches land, who gets admin. Spruce holds the line from there.

Illustrative controls. Slide and toggle them, then hit Set it.

Security Baseline policy
Synced 2m ago
All devices 312 Staff 148 Carts 164
Minimum OS versionBelow the line gets flagged, then updated
macOS
iPadOS
iOS
Patch cadenceDeadline after a release ships
OS updates
Third-party apps
Minimum user requirementsApplied at enrollment and re-checked daily
Account type
Users can't install unapproved software
Enforce MFA
Required for every sign-in through Entra

02Spruce Data Engine

Automated by an advanced data engine.

Your policy becomes one small object. The engine collects from the systems you already run, matches every device and person across them, and records which system said what, and when. It does what APIs and MCPs can only dream of: agree with each other.

Collected on a schedule. Changes still land through your own MDM.

Microsoft Entra IDusers · groups · MFA
Your MDMinventory · policies · profiles
Spruce agentmacOS · lightweight
Other data sourcesABM · DNS · more
Spruce Data Engine 3 sources312 devices57 people0 drift
Your policymacOS 15 · patch ≤7d · MFA on

03Requests

Problems remediated by humans.

The engine catches everything. It only decides the safe things. Anything that could break a classroom or a payroll run becomes a request, and a real Apple-certified technician picks it up, fixes it, and confirms the fix landed.

Requests WR-2041
Live
Review needed Approval policy

APNs certificate expires in 6 days

Renewal needs the Apple Account that created the original push certificate. Renewing with a different one would cut your MDM off from all 312 devices and force re-enrollment, so this is gated for a human.

Impact: all managed devices Source: Your MDM Unassigned
  1. Spruce Data Engine
    Detected the expiry in your MDM. Gated by approval policy: renewal touches every device.    09:14
  2. Kyle, Spruce technician
    Picked it up. Confirmed the original Apple Account with your office manager by phone.    09:22
  3. Kyle
    Renewed the push certificate with the matching account and uploaded it to your MDM.    09:41
  4. Spruce Data Engine
    Verified in fleet: 312 of 312 devices checked in on the new certificate. Closed.    10:05
Waiting for a technician No action needed from you

How Spruce works

Platform04
Four stacked layers: the dashboard on top, the data engine, AI automation, and human oversight at the base. A flagged item drops from automation to a technician.04030201

  1. Dashboard

    One policy, one place to look

    Set minimum OS, patch deadlines, account type and MFA once in the Spruce portal. Ask it a question in plain language and get back a filtered view of your fleet, built from real records.

  2. Data engine

    A record your systems agree on

    Spruce collects from Jamf Pro, Mosyle, Microsoft Entra ID and an optional lightweight macOS agent, matches each device and person across them, and records which system said what, and when.

  3. AI automation

    Routine work, caught and handled

    Drift is measured against your policy. Decisions already on file are applied by narrowly scoped automations. AI turns requests into checkable instructions and never acts on its own.

  4. Human oversight

    Judgment from Apple- and Jamf-certified technicians

    Anything that could disrupt a classroom or a payroll run waits for a person. A technician approves or makes the change in your own MDM, and it closes only once the result shows up in fleet data.

Questions the page doesn't answer? Ask us directly.

Spruce

Endpoints automated by AI.
Managed by experts.

Save an insane amount of time and money. Set the policy once, let the engine hold it, and let people who do this all day handle the rest.

5 logins
checked for you, not by you
1 policy
instead of five consoles
0
expired certificates, ever
You're on the list. We'll reach out from Palmer.

No spam. One address, one list, and we only use it to talk to you about Spruce.

Policy set