This might be the wrong place to ask this, and if so please point me in the right direction. Anyway, a family member works at a public institution where laptops are provided to the staff, which includes them. They recently received a new laptop as their old one was quite sluggish. The workplace has directly stated that they have no use for used laptops, and therefore once a new system is given to a worker, the old one is now the property of said worker.
This family member knew that I could find a use for it, so they gave it to me. I plan to take out the old HDD running windows and replace it with an SSD running something like Ubuntu, but I'm slightly suspicious of low-level software such as the bios. We're not talking about an institution of national security or anything like that, and what the system is used for is not of high-level importance or clearance. But I do know that the workplace monitors workers' laptops and have remote access to them in order to solve any technical issues, and I'm wondering if they were potentially implemented on the bios level, rather than the application level. And theories?
TLDR: Could an old work laptop potentially allow access by the workplace through the bios or other low-level operations, even after the main drive is replaced?