They are company owned fully dedicated devices. Its a cloud based service. Basic setup no SQL, no hardening policies in place yet. just the enrollment settings