1. A communications device comprising: one or more communication input/output (I/O) ports, at least one of the one or more communication I/O ports being a wide area network port configured to connect the communications device to a wide area network; memory configured to store a device communication activity policy; a secure execution environment configured to be inaccessible to user application software; one or more secure data path processing agents configured to: execute in the secure execution environment, monitor a device data communications activity through at least one of the one or more communication I/O ports, generate a device data record comprising information about the device data communications activity through at least one of the one or more communication I/O ports, the information configured to assist a network element in determining whether the communications device is operating or has operated in accordance with the device communication activity policy, and send the device data record to the network element over a trusted communication link between the one or more data path processing agents and the network element; and a trusted data path between the one or more data path processing agents and the wide area network port.