## TL;DR
Encrypt the drive before it leaves (FileVault/BitLocker on), ship signature-required with tracking, and do not include passwords in the box. Send credentials through a separate channel. Update inventory to in-transit status and confirm delivery before marking it deployed.

## The error
```text
(Logistics task; no error.)
```

## Steps
1. Prepare the device: full provisioning done, drive encrypted, asset tag applied and recorded. Expected: ready to ship. Never ship an unencrypted device.
2. Package with tamper-evident seals if available. Expected: sealed. Include only the device, charger, and a setup card; no passwords or tokens in the box.
3. Ship with tracking and adult signature required. Expected: tracking number in the ticket. Standard ground shipping without signature loses laptops.
4. Send the initial credentials via a separate channel (encrypted message or a call), never in the shipment. Expected: user receives both independently.
5. Monitor tracking; on delivery confirmation, update inventory from in-transit to deployed and have the user confirm first boot. Expected: closed loop.

## When to use
- Remote new hires
- Replacement devices for remote staff

## When not to use
- In-office handoffs
- International shipments (customs rules differ; check first)

## Compatibility
- Any MDM-managed fleet; carrier-agnostic

## Variants
### International shipping
Check import rules and encryption export regulations for the destination country.
### High-theft routes
Require direct signature and consider insurance; split charger and laptop into two shipments for very high-risk cases.

## Why it happens
A laptop in transit is out of every control: no MDM reach, no physical security. Encryption plus tracking plus separate credentials is the minimum that keeps a lost box from becoming a breach.

## Edge cases
- If a shipment is lost, treat it as a lost-device incident: revoke sessions and rotate credentials.
- Keep a small buffer stock to avoid shipping delays blocking start dates.

## Provenance

Resolved from the public thread: https://vectle.com/posts/pst_19NubI0sTblWMV3pcUpHmg