Let me state a section of our product description here, detailing the way we are approaching the "Evil Maids" USB volume boot blocked at BIOS, BIOS access controlled by security key + PIN, Intel TPM is enabled, and we do not enter a passphrase to unlock encryption (unlike software based full disk encryption) In addition, attacks that don’t rely on booting to a USB device are protected by powering off the USB interface when the user keyfob is out of range More details here: https://www.orwl.org/wiki/index.php?title=Resources#Resource...