Category: Enterprise | Author: Courtney Bentley | Published: 6 April 2026
Key Takeaways
- We manage Apple fleets for Sandton, Bryanston, and Rosebank law firms under monthly SLA from R2,499
- JAMF MDM enforces FileVault, access controls, and software deployment across all firm Macs
- POPIA requires law firms to implement reasonable technical measures to protect client data — MDM is the baseline
- Zero-touch enrolment via Apple Business Manager means new MacBooks are production-ready in 30 minutes
- Same-day R599 assessment for hardware faults with No Fix No Fee guarantee
Table of Contents
---
Why Law Firms Are Moving to Apple Mac {#why-law-firms-use-apple}
In our Hyde Park workshop, the trend is consistent: law firms we started supporting with one or two partner MacBooks now come back with 15-device fleets. Apple Silicon has changed the calculation. An M3 MacBook Pro outperforms the Windows workstations most firms were using three years ago, runs Microsoft 365 natively, and does not require the ongoing antivirus overhead that Windows environments demand.
We currently support legal practices in Sandton, Bryanston, Rosebank, and Fourways. The common thread across all of them: they moved to Mac because the hardware is reliable and the total cost of ownership over four years is lower than comparable Windows devices. They come to us because they need someone who understands Apple's enterprise management stack and can respond when a senior partner's MacBook Pro fails during a matter.
The firms that manage their fleet well share three practices: every device is MDM-enrolled, FileVault is enforced centrally, and hardware support runs on a same-day SLA. The firms that do not have these practices in place usually contact us after an incident — a stolen laptop with client files accessible, a logic board failure before a court date, a ransomware attack through a firm-wide unpatched vulnerability.
---
POPIA Obligations for Johannesburg Law Firms {#popia-obligations}
Law firms process special category information under POPIA — correspondence containing personal details, financial records, medical records in litigation matters, and identity documents. Section 19 of POPIA requires that a Responsible Party implement appropriate, reasonable technical and organisational measures to prevent loss, damage, or unauthorised access.
The Information Regulator's guidance and comparable frameworks under GDPR (which South African firms advising international clients frequently reference) treat MDM as baseline technical measures for mobile device fleets. Specifically, a firm should be able to demonstrate:
Encryption at rest. FileVault on every Mac. Without MDM enforcement, this depends on each user enabling it. We have inherited fleets where 40% of devices had FileVault disabled because no one had turned it on.
Access control. Unique credentials per user, screen lock after five minutes, no shared logins on paralegal workstations. All configurable and enforceable via JAMF configuration profiles.
Remote wipe capability. A device stolen from a practitioner's car in a Sandton parking lot must be remotely wipeable. Without MDM, this requires iCloud and the device to be signed into the firm's account — an account structure most firms do not maintain.
Audit capability. JAMF logs device check-ins, policy applications, and compliance status. This documentation is available for any POPIA audit or incident investigation.
We provide a POPIA IT compliance report after every deployment. Several Sandton firms have shared this with clients who request evidence of data protection practices before briefing the firm.
---
JAMF MDM: What It Does for a Legal Practice {#jamf-for-law-firms}
JAMF Pro is the enterprise Apple management platform used by over 70,000 organisations globally. For a Johannesburg law firm, the relevant capabilities are:
Automated Enrolment. Via Apple Business Manager, a new MacBook sent directly from Apple to a fee earner enrols automatically when first powered on. No IT visit required. The firm's software stack — Microsoft 365, legal research tools, PDF editors, document management — installs silently. The device is usable within 30 minutes of unboxing.
Configuration Profiles. FileVault, screen lock timeout, VPN configuration, and certificate-based Wi-Fi authentication are pushed from the JAMF server and cannot be disabled by end users. A paralegal cannot turn off encryption because they find the login prompt inconvenient.
Software Management. macOS updates deploy overnight on a schedule the firm controls. We hold legal practices on tested macOS versions — a major macOS update that breaks a document management system's plugin costs the firm hours of productivity per affected machine.
Smart Groups and Compliance Reporting. JAMF's Smart Groups segregate devices by role (partner, associate, paralegal, support staff) and apply different policy sets. Compliance dashboards show which devices are out of policy and why. For firms under ISO 27001 audits, this reporting is essential.
---
Fleet Management: From Enrolment to End-of-Life {#fleet-management}
A typical law firm fleet lifecycle under our management:
Procurement. We advise on spec and purchase via Apple Business Manager. MacBook Pro 14-inch M3 Pro for fee earners; MacBook Air M3 for support staff. Firms avoid consumer-channel devices that lack DEP (Device Enrolment Program) eligibility.
Enrolment day. Devices ship directly from Apple with the firm's ABM token. Enrolment is zero-touch. We configure the JAMF environment before delivery.
Ongoing management. Monthly JAMF policy reviews, OS update scheduling, hardware health monitoring via our management dashboard. We notify the firm before a device shows signs of battery degradation or storage pressure — before it fails.
End-of-life. Secure data wipe, removal from JAMF, and certified disposal or resale. We provide a written wipe certificate for each device.
Our monthly SLA starts from R2,499 for up to 10 devices, includes all management work, and covers hardware repairs under our No Fix No Fee terms for warranty-eligible faults.
---
Hardware Repair Under SLA {#hardware-repair}
When hardware fails, SLA clients receive same-day priority. The device comes to our Hyde Park workshop for a R599 assessment — credited against the repair if you proceed. Logic board repair from R4,499. Screen replacement from R3,499. Battery replacement from R799.
We hold spare MacBook Pro and MacBook Air loan units for SLA clients. A senior partner does not wait five days for a logic board repair. We hand over a loan device on assessment day.
Book at zasupport.com/book or call 064 529 5863. For SLA enquiries: courtney@zasupport.com.
---
Frequently Asked Questions {#faqs}
Does a law firm need JAMF or is there a cheaper alternative?
JAMF Pro is the enterprise standard and the one we recommend for firms with five or more devices. Smaller firms (two to four devices) can use Apple Business Essentials, Apple's entry-level MDM service. It lacks JAMF's reporting and Smart Group capabilities but covers the basics. We configure both — the right choice depends on your compliance requirements and firm size.
How does JAMF handle departing staff?
When a solicitor or paralegal leaves, we remotely lock their device, wipe their user profile, and remove them from the firm's Apple Business Manager. If they have a firm-owned MacBook, we remotely wipe the entire device and re-enrol it for the next user. This process takes under 15 minutes and is fully auditable.
Can JAMF manage the firm's iPhones as well?
Yes. JAMF manages iPhones and iPads under the same licence. We configure supervised mode on firm-issued iPhones, separating work applications from personal use via Managed Open In. Client emails cannot be forwarded to personal Gmail. Documents cannot be opened in non-approved applications.
What is the cost of JAMF licensing for a 20-device firm?
JAMF Pro licences through us at approximately R280 per device per year for legal firms. We pass through JAMF's published pricing. For 20 devices, expect approximately R5,600 per year for the platform licence plus our management SLA from R2,499 per month.
How quickly can you respond if a partner's MacBook fails before court?
SLA clients receive same-day assessment and a loan unit on the same visit. For after-hours emergencies — a board failure at 10pm before a 9am hearing — contact us directly. We have handled emergency repairs for litigation teams in Sandton and Rosebank on short notice.
Do you work with document management systems like iManage or NetDocuments?
Yes. We have integrated JAMF deployments with iManage, NetDocuments, and Legalease environments. Application deployment, plugin management, and update scheduling are all handled centrally so the firm's DMS functions consistently across the fleet.
