Enhanced employee & device protection
Android theft protection
Can phone data be reset if a device is stolen?Private space for personal profile
How does a user set up their private space?NIAP Audit Logging Requirements
What is NIAP?The National Information Assurance Partnership (NIAP) oversees a national program to evaluate Commercial Off-The-Shelf (COTS) Information Technology (IT) products for conformance to the international Common Criteria. This program includes the NIAP-managed Common Criteria Evaluation and Validation Scheme (CCEVS or Scheme), a national program for developing Protection Profile, evaluation methodologies, and policies that ensures achievable, repeatable, and testable security requirements.
All products evaluated within the Scheme must demonstrate accurate compliance to the applicable technology Protection Profile. NIAP assesses the results of the security evaluation conducted by the lab and, if the evaluation is successful, issues a validation certificate and lists the product on the U.S. NIAP Product Compliant List and the international CCRA Certified Products List.
Stronger management of company-owned devices
eSIM management for managed devices
Does eSIM management support both company-owned and employee-owned devices?Yes, eSIM management on Android helps to seamlessly provision and remove eSIMs on both company-owned devices and employee-owned devices. On employee-owned devices, users can additionally delete the eSIM at any point.
Security restrictions for apps outside the Work Profile on company-owned devices
How can IT admins apply existing personal app policies outside the work profile?IT admins can set personal app allowlist and blocklist policies through managed configurations on the personal Google Play store app. This feature is only available through the Android Management API. Contact your EMM to determine if they support this feature and to know how to set these managed configurations in their solution.
Enforce the default app selection for calls, messaging, and web browsing when setting up company-owned devices
Can I enforce the default apps for a company-owned device that’s already been set up?The default messaging app can be set at any time. To enforce OEM defaults for dialer and browser after set up, this control must be combined with an app allowlist.
Controls for Circle to Search on Android Work Profile
Can I enable or disable Circle to Search for specific apps?No, but it can be disabled within the Work Profile or on the entire device for fully managed devices.
Circle to Search is available on the following devices:
- Pixel 8, Pixel 8 Pro, Pixel 6 series, Pixel 7 series, Pixel Fold, and Pixel Tablet
- Samsung S24 series, S23 series (incl. FE), S22 series, S21 series, Z Flip 3, 4, and 5, Tab S9 series, and Tab S8 series
Screen brightness & timeout controls for company-owned, personally enabled (COPE) devices
What management sets can this feature be used for?IT admins can set screen brightness and timeout controls on Work Profile on company-owned devices, fully managed devices, and dedicated devices.
Related links
- What’s new in Android Enterprise: Android 15
- Read our Android 15 announcement on Keyword.
- Join the discussion about Android 15 in the Customer Community: