Staff phone management within the law
Staff phone management means managing iPhones and iPads the company owns: enrol them, reclaim them when someone leaves, and never read messages or photos. Location is sensitive data — view it only when a device is lost. An employee's home phone does not become a company phone by itself; enrol it only with written consent. Enrolment by link or QR on ABMDM is still Coming soon.
Managing company devices, not watching people
Staff phone management on ABMDM means managing iPhones and iPads the company owns: issue them, reclaim them when someone leaves, keep company data. It is not reading chat or photos, and it is not locating staff every hour.
Security is explicit: serials, management status, command logs; location only in Lost Mode or when a contract is overdue. No messages, calls, email, photos, passwords or browsing history.
Choose software by the staff-device job: company iPhone management.
Company phones and home phones
Company phones: bought to issue, enrolled in Apple Business and ABMDM, Supervised, removal blocked, Apple Account changes blocked. The handover record: the device belongs to the company; a reset does not take it outside.
A home phone does not become a company phone because the person works for you. Only with written consent. Enrolment by link or QR on ABMDM is still Coming soon — do not Supervise a home phone “to get it done”.
| Device | You may | You may not |
|---|---|---|
| Company iPhone | Enrol, reclaim, lock if lost | Read messages, track location every day |
| Home iPhone, no consent | Do not enrol it | Lock, wipe, Supervised |
| Home iPhone, written consent | Only the agreed scope | Go beyond that scope, view location when unneeded |
When a staff member leaves
Reclaim the company device. If you have it in hand: remove the account, wipe company data if needed, confirm the organisation screen is gone before it goes into stock.
If you cannot get it: remote lock with a contact number, Lost Mode if you need location (log it), wipe if you are sure it will not come back, retrieve the iCloud unlock code when the device is in your system.
Drop their access on the console. Do not let a company phone drift onto the street market.
Vietnamese law
Law 91/2025/QH15 and Decree 356/2025/ND-CP: location is sensitive data. Only when needed, with a log.
Reminders on a company phone are not customer debt reminders; still do not use MDM to press an employee outside managing company property.
Features marks Coming soon items — do not promise the personal-device flow before it is live.
Handover day
Issue a device that is already in the system, not a clean phone. Staff sign the record; seeing the organisation name at setup is expected.
Forgotten passcode: an authorised person sends a clear-passcode command on a company device. Do not take the phone to an outsider to “open it”.
An alert that the device has had no contact beyond a set number of days: check whether the staff member still has it, then lock if it is lost — and log it.
Put it in the house rules
Tell staff: a company phone is Supervised, the company cannot read messages, and if it is lost the company locks and locates it under the process. Record the handover.
Trial 14 days, up to five devices. Call 0913 081 986 (8am–9pm) when you issue the first staff batch.
All articles · What is MDM? Mobile device management for business · What is Apple Business? The change from April 2026 · How to register Apple Business in Vietnam
Frequently asked questions
Can the company read messages on an employee's iPhone?
No. Apple's protocol does not allow reading messages, photos, email or passwords. ABMDM cannot see that data either. The Security page states what is collected.
Must an employee's home phone go into MDM?
Not by itself. Only with clear written consent. Enrolment by link or QR on ABMDM is still Coming soon.
Someone left and the phone asks for iCloud. What now?
For a company device already in ABMDM, an authorised person retrieves the iCloud unlock code when reclaiming it. Do not pay anyone to open a phone locked to a stranger's account.
Can we watch staff location all day?
No. Location is sensitive data. View it only when a device is lost or a contract is overdue, and log every access.
Can staff turn management off on a company phone?
If the device is Supervised, still in Apple Business, with anti-removal configured, a reset does not take it out of the company.
Want advice tailored to how you operate?
Call 0913 081 986 (8am–9pm, every day) or leave your details and we will call you back.