BYOD
BYOD management with clear limits
Let employees use their own phones and laptops for work. trio.so manages work apps and settings, and blocks IT from erasing, locking or locating personal devices, so security and privacy both hold.
Priya Raman
ActiveFinance analystBYOD is a security and trust problem
Unmanaged access
Work email and files on phones IT knows nothing about.
Employee trust
People won't enroll if they think IT can see their photos.
Leaving staff
Work apps stay on personal devices after someone leaves.
By platform
How personal devices enroll
Each platform has its own way to bring a personal device under management:
Android
A work profile that keeps work apps and data separate from personal ones.
iPhone and iPad
Account-driven user enrollment, through Apple Business.
Mac
Account-driven user enrollment on macOS 14 and later.
Windows
Work apps and updates only, removed when the device unenrolls.
Privacy
What IT can't do on a personal device
Erase, Lost Mode and location are never available on personal devices, and restart and lock are blocked too, except locking an Android work profile. On iPhones, iPads and Macs, IT sees only the work apps it installed.
- No erasePersonal devices can't be wiped.
- No locationLocation is never collected from personal devices.
- Only work appsApps can require the user's approval before install.
Self-enrollment
Employees enroll their own devices
Employees add their own device step by step, and see a plain notice of what their employer manages before they agree.
Data protection
Keep work data in work apps
On Android, block copy and paste and data sharing between the work and personal profiles. On iPhones and iPads, use managed open-in and pasteboard rules, and per-app VPN for managed apps.
BYOD at a glance
- 4
- platforms with personal enrollment
- Never
- location on personal devices
- Work profile
- on Android
- From $5
- per device, in every plan
Related