There’s plenty, especially for the latest models with embedded TPM and smart card reader.

Full explanation of these features is here; in case the link is dead, try here. More details here, especially on how these features integrate with HP's Protect Tools software suite

I had to check out documentation on the following as I was not sure what they’re supposed to do or how:

• Drivelock. I was unsure on how this is implemented. Turns out it is simply an HDD controller lock (based on ATA-3 security features) that can be overridden fairly easily. Drivelock technical details are here, or here if link is dead. HP’s user guide for drivelock is here.
• Drive sanitizer. This is simply a BIOS utility to be used just before you sell, give away or throw away your HDD. It basically wipes your drive clean by overwriting, multiple times, all its sectors with flat bit sequences.
• Under TPM
  • Set to Factory defaults. Basically resets everything, including deletion of any existing TPM keys and setting the TPM to a "disabled" state
  • Reset authentication credential. Deletes key related to TPM based computer user authentication and disables authentication process altogether.