They are using full-disk encryption. But most organizations also have policy that requires removal of the encrypted disk before sending a device offsite for repairs.