Device Security for Remote Professionals: What Tunga Requires
Every Tunga professional signs a device security checklist before an engagement starts and keeps it in place for as long as it runs. It covers disk encryption, strong passwords and screen lock, two-factor authentication on client accounts, a VPN on public networks, up-to-date software and virus protection, physical security, careful handling of client data, and reporting any loss or suspected breach within 24 hours. Your own security policies come on top: Tunga requires the professional to follow them. If you need managed hardware, Tunga can ship a laptop you have configured.
The checklist every professional signs
Before an engagement starts, each professional confirms in writing that these measures are in place on every device they use for client work:
- Disk encryption. Full-disk encryption is on, such as BitLocker or FileVault.
- Device access. A strong password of at least 12 characters, not reused elsewhere; the screen locks after 5 minutes at most; biometrics or a PIN only with a strong password behind them; the device is not shared with anyone else.
- Account security. Two-factor authentication on all client accounts, preferably with an authenticator app or hardware key; client passwords are unique.
- Network security. A VPN on public or untrusted networks; no access to client systems over public Wi-Fi without one.
- Software and updates. The operating system, browser and key applications are up to date; antivirus or endpoint protection is active.
- Physical security. Nobody else uses the device while it is logged in to client systems, and it is never left unlocked in a public place.
- Data handling. No client personal data stored locally beyond immediate need, and no client data in personal cloud storage; only tools the client has approved.
- Incident reporting. Any loss, theft or suspected breach is reported within 24 hours.
If a professional doesn't keep to the checklist, Tunga can suspend their access to client systems straight away.
Your own security policies
Before an engagement starts, you tell Tunga which security, privacy and compliance policies apply, and Tunga requires the professional to follow them. You also decide what access the professional gets: to which systems, code and data, and through which route, such as a VPN, a virtual desktop or a managed account. Giving access on a need-to-know basis, and revoking it at the end, keeps your environment under your control.
Managed hardware
Professionals work on their own devices unless you provide one. If your policies require managed hardware, Tunga can ship a laptop you have configured, or arrange hardware locally.
Questionnaires and data protection
Tunga fills in supplier and security questionnaires on request. For personal data, Tunga signs your data processing agreement, or proposes its own. The page on working with professionals outside the EU covers GDPR and data transfers.
Where Tunga fits
Tunga takes the staffing side off the plate of companies that need digital professionals: software engineers, AI operators, product managers and other digital roles, from across Africa. The client directs the work. Tunga handles finding and vetting, contracts, payments and compliance, onboarding, keeping people, and replacing them when someone leaves or it isn't working. The professionals are independent freelancers contracted by Tunga and work remotely from their own country; the client has one contract, with Tunga, and a delivery manager who checks in with both sides. In 2025, about 1 in 56 placements ended because the professional left for another job. Founded in 2015; 3,500 professionals across 38 African countries and 300+ client companies, as of September 2026.
Tunga is not the right fit when the role has to be on site, when the work means talking to your clients in a language other than English or French, or when saving on cost is the main reason you're looking.
Need capacity now?
Tell us what you're looking for. We'll get back to you within one working day.
Tell us what you need