Lock screen and authentication
Require a credential; set biometric timing, failed-attempt wipe thresholds, notification visibility, screen timeout, and ownership messaging.
SecurePhone MDM policy controls
SP-MDM-POLICY · SELF-HOSTED
Define the device.
Down to the last icon.
Control authentication, hardware, apps, networks, updates, and remote response—then set the wallpaper and place every approved app exactly where it belongs.
Device Owner policyManaged app catalogBrand + launcher
Active policyLIVE
01
authenticationCredential baseline
required02
applicationsRequired and blocked packages
managed03
networkAlways-on VPN lockdown
enforced04
launcherApproved home-screen layout
locked016 groupsunified policy categories
02Cohortfleet, group, or device targeting
03OS-widecontrols below the app layer
04Auditedremote actions and compliance state
Universal policy catalog
One policy set. Every meaningful device control.
Compose the exact fleet baseline, assign it broadly, and use narrower overrides only where the operation requires them.
Apps and install control
Force-install required apps, prevent removal, block prohibited packages, disable sideloading, and run an approved kiosk set.
Hardware and system restrictions
Disable camera, microphone, location, USB transfer, screenshots, backup, safe mode, personal accounts, or sensitive settings.
Network, radios and SIM
Enforce always-on VPN and restrict Wi-Fi, Bluetooth, NFC, tethering, roaming, calls, SMS, 2G, eSIM, and mobile-network changes.
Updates and compliance
Choose release channels and update windows, stage rollouts, require attestation, retain audit history, and respond to tampering.
Brand and launcher control
Apply customer wallpaper, exact app positions, folders, dock, grid density, app-drawer visibility, hidden icons, and a locked layout.
Managed policy lifecycle
From fleet baseline to an exact governed experience.
Policy targeting and precedence keep universal standards simple while allowing the right exception at the customer, cohort, user, or device layer.
Build the baseline
Select authentication, app, hardware, network, update, and privacy controls for the fleet.
Target the policy
Assign it to the fleet, a customer, a user label, or one device, with the most specific valid policy taking precedence.
Apply brand and layout
Choose wallpaper, approved apps, pages, folders, grid, dock, icon visibility, and rearrangement rules.
Monitor and respond
Review compliance and app state, then remotely sync, lock, wipe, or revise policy through audited workflows.
Clear privacy boundaries
Strong device control without covert surveillance.
SecurePhone MDM governs organization-owned device behavior. It does not extract personal content or turn managed phones into hidden monitoring devices.
Explore SecurePhone MDMNo content extraction
No message, email, or personal-content collection is part of the policy system.
No silent capture
Policies do not silently activate camera, microphone, or screen recording.
No keylogging
Keystrokes and browser history are outside the managed policy boundary.
Disclosed location rules
Location and geofenced rules are deployed only as disclosed organizational policy.
Turn standards into the device
Build the approved phone once. Apply it to every enrollment.
Deploy SecurePhone MDM as a private appliance, define the approved policy and brand, and enroll every phone into the same governed experience.
Configure yours