BYOD and mobile security for Microsoft 365
Let staff use their own phones for work email and Teams, while company data stays protected and personal data stays private.
The challenge
Work data on personal phones is easy to lose control of
When staff use personal phones for Outlook, Teams and OneDrive, company files can end up in personal apps, personal cloud storage or phone backups.
At the same time, most staff don’t want their employer managing their whole phone. App protection solves both problems.
The usual concerns
- What happens to client data when someone leaves?
- Can work files be saved into personal apps?
- Do we have to manage staff’s personal phones?
- What if a phone is lost or stolen?
What’s included
App protection policies
Company data stays inside managed Microsoft apps, with controls on copying, pasting and saving.
No enrolment needed
Personal phones aren’t enrolled, so personal photos, messages and apps stay private.
Selective wipe
Remove company data from a lost phone or when someone leaves, without touching personal data.
Access conditions
Require a PIN, a supported operating system and approved apps before company data opens.
Company-owned devices
Full Intune management for business phones and tablets, on iPhone and Android.
Staff guidance
Simple setup steps and a plain explanation of what we can and can’t see.
How we work
Policy
We agree what staff can do with company data on personal and business devices.
Configure
We set up app protection and access conditions in Microsoft Intune.
Roll out
Staff follow a short guide, and we help anyone who gets stuck.
Maintain
We keep policies current and handle selective wipes when staff leave.
FAQs
Frequently asked questions
Can you see personal data on staff phones?
No. App protection applies only to company data inside managed apps such as Outlook, Teams and OneDrive. Personal photos, messages and apps aren’t visible to us or to the business.
Does it work on iPhone and Android?
Yes. App protection policies work on both.
Which licence do we need?
App protection uses Microsoft Intune, which is included in Microsoft 365 Business Premium.
What happens when someone leaves?
We remove company data from their phone with a selective wipe. Their personal data isn’t affected.
Related services
You might also need
Device Management
Laptops, phones and tablets managed and secured with Microsoft Intune.
Secure Baseline
Our Microsoft 365 security standard, kept in place every month.
Security Awareness Training
Help staff recognise phishing and handle data safely.
Make BYOD work for your business
Book a free consultation and we’ll recommend a policy that suits your team.