At Trio, we prioritize a "Privacy-First" approach to Bring Your Own Device (BYOD) management. When you enroll a personal Windows device, the platform creates a secure boundary between your personal life and corporate requirements.
Unlike Corporate-Owned Devices (COD), the MDM agent on a BYOD device acts as a security auditor rather than a total administrator. This ensures that while your company's data remains secure, your personal privacy remains 100% intact.
Unsupported Features on BYOD Devices
To ensure user privacy and prevent interference with personal use, the following high-level administrative features are strictly disabled for all BYOD-enrolled devices:
1. Intrusive Remote Commands
Remote Reboot: Administrators cannot force your personal computer to restart.
Full Device Wipe: Trio cannot factory reset your entire device. We only support a "Selective Wipe," which removes corporate apps and data while leaving your personal photos, files, and settings untouched.
Remote Control / View: Real-time screen mirroring, remote desktop access, and mouse/keyboard control are disabled to prevent unauthorized monitoring.
Remote Maintenance: Background maintenance tasks and silent system changes are turned off to ensure your device performance remains under your control.
2. Personal Data & Privacy
File System Access: Admins cannot browse, view, or download files from your personal folders (such as Documents, Photos, or Downloads).
Full Application Inventory: Your company cannot see the personal apps you have installed (e.g., social media, banking, or gaming). Visibility is limited strictly to managed corporate applications.
App Usage Tracking: Monitoring how often or how long you use personal applications is technically blocked.
Continuous GPS Tracking: Location tracking is disabled to respect your movement and privacy outside of work hours.
3. Network Control
Device-Wide VPN: Trio does not route your personal web traffic through corporate servers. We utilize "Per-App VPNs" that only secure data when you are using specific work-related tools.
Full Firewall Overrides: Administrators cannot open ports or "unrestrict" firewall settings that you have manually configured for your own protection.
4. Personalization & User Experience
Wallpaper/Theme Enforcement: You maintain full control over your desktop’s appearance. Corporate branding, wallpapers, and themes cannot be forced onto your personal environment.
How Your Data is Protected
Encryption: We ensure BitLocker is active to protect corporate data at rest without accessing your personal keys.
Compliance: We check if your device meets security standards (like CIS L1/L2) before allowing access to company resources.
Independence: Your personal passwords, browsing history, and private messages are never synced to our servers.