What is MDM? Mobile device management for business
MDM (mobile device management) is business software that enrolls iPhones and iPads into one system, then locks, unlocks, configures or wipes them remotely. Shops and companies use MDM to keep control of devices they own, not to read a user's messages or photos. This article explains what MDM does, the legal limits, and when you should use it.
What MDM can do on iPhone and iPad
MDM connects to Apple's business portal. Devices bought through the business channel enrol themselves at first power-on. Devices bought at retail are added with Apple Configurator on iPhone.
From one console, the person in charge sends lock, unlock, Lost Mode location, wipe, Wi-Fi and anti-removal commands. Every command should log who did it and when.
Phone shops use MDM to keep title on instalment devices. Companies handing iPhones to staff use it to recover devices when someone leaves. Retail counters lock an iPad to one app.
ABMDM is built on Apple's official management protocol. The features list sets out command groups, configuration and device financing. Items marked “Coming soon” are still in development.
What MDM cannot do
MDM is not spyware. The management server cannot read messages, calls, photos, personal files, browsing history or passwords.
MDM does not help anyone bypass a lock, remove management without authority, or unlock someone else's Activation Lock. Doing that is a legal risk. Buyers of used phones should inspect the device before taking it — they should not ask anyone to “remove MDM”.
| Job | MDM can | MDM cannot |
|---|---|---|
| Control company devices | Lock, unlock, wipe, push configuration | Read messages, photos, passwords |
| Instalment / lease devices | Remind, apply tiered locks when overdue | Press a customer outside 7am–9pm |
| Used phones on the market | Look up serial/IMEI if the device is in the system | Strip MDM or bypass Activation Lock |
Who in a shop or company needs MDM
A shop selling on instalments needs to know the device still belongs to the business until the customer pays in full (Civil Code Article 453). MDM ties a contract to each device, reminds only in the legal hours, applies tiered locks when overdue, and unlocks when the customer pays.
A shop with iPads on the counter needs each device to run the sales app only, not to be taken home and wiped.
A company issuing iPhones to staff needs devices to enrol themselves, be recoverable when someone leaves, and not walk away with company data if lost.
One platform can cover all three jobs if you configure it for the job you actually run. ABMDM pricing is per device seat, billed every six months in VND, with VAT invoices.
Legal rules for managing devices in Vietnam
Manage only devices the business owns, or devices with the user's written consent. Do not enrol an employee's personal iPhone just because they work for you.
Device location is sensitive personal data under the 2025 Personal Data Protection Law (Law 91/2025/QH15) and Decree 356/2025/ND-CP. View it only in Lost Mode or when a contract is overdue, and log every access.
Payment reminders only from 7am to 9pm, and only to the person named on the contract. On instalment sales the business keeps title until the customer pays in full.
How MDM differs from setting up each phone by hand
Hand setup sounds cheap. After a few dozen devices, configurations drift, staff leave without returning phones, and instalment customers change SIM cards and disappear. You then have no remote command channel.
Free basic management inside Apple Business helps you assign devices and send some commands. Vietnamese shops usually also need tiered locks, VietQR, Zalo, VAT invoices and Vietnamese-language support. That is when a paid MDM built for domestic operations is worth it. How to choose by solution group is in company iPhone management software.
Self-enrolment is not “install an app”
Many shop owners think MDM means “install an app and watch the user”. It does not. MDM works through Apple's management protocol. The device is assigned to the company in Apple Business. At power-on it asks the management server for configuration.
A shop-made app only runs when the user opens it, is easy to delete, and cannot lock a phone when a payment is late. MDM sits at the system layer: a factory reset still returns the device to the company if it remains in Apple Business.
You do not cable each device when it came through the business channel. Retail-bought devices need Apple Configurator on iPhone to put the serial in the portal, then they pick up configuration at power-on.
Check a used phone before you buy — do not remove MDM
A used phone “stuck in MDM” still belongs to an organisation on Apple's portal. A buyer cannot remove that with a trick. Paying someone to strip it is a legal risk: the device is not yours.
Before you take the phone, watch setup: a company name, an organisation phone number, or a prompt for a work account means stop. Look up the serial or IMEI if the seller says it was once in ABMDM.
This article does not explain how to remove MDM. The lawful path is to return the device to its owner or walk away.
MDM is priced per device
ABMDM charges per device seat, six-month terms, VND, with VAT invoices. Starter is 150,000 VND per device per six months, with no activation fee. Professional is 100,000 VND per device per six months, plus a one-time 6,650,000 VND activation fee. There is no minimum device count.
The trial is 14 days, up to five devices, with no upfront payment. It does not convert to a paid plan by itself. A seat freed mid-term can be used on another device.
Start when you have (or are about to have) Apple Business and a list of devices the company owns. If you have no portal yet, register first, or ask ABMDM to file. For someone to walk you through the connection, call 0913 081 986 (8am–9pm).
All articles · What is Apple Business? The change from April 2026 · How to register Apple Business in Vietnam · What is a D-U-N-S number? How to get one free
Frequently asked questions
Can MDM read messages or photos on an iPhone?
No. Apple's device-management protocol does not let a management server read messages, photos, email or passwords. ABMDM cannot see that data either.
Must an employee's personal phone be enrolled in MDM?
Only manage devices the business owns, or personal devices with clear written consent. Do not enrol a personal iPhone just because the person works at the shop.
Does a small shop with a few dozen devices need MDM?
Yes, if you hand out staff phones, put iPads on a counter, lease devices or sell on instalments. Manual setup drifts and you cannot recover a device when someone leaves or a contract lapses.
Is MDM the same as an iCloud lock?
No. MDM is company device management. An Apple Account lock on a used phone is a different issue. Before buying a used device, check the device itself and look up the serial.
How should a Vietnamese business use MDM lawfully?
Manage only devices you own or have written consent for. Location is sensitive personal data under Law 91/2025/QH15 and Decree 356/2025/ND-CP — view it only when needed and log every access. Payment reminders only between 7am and 9pm.
Want advice tailored to how you operate?
Call 0913 081 986 (8am–9pm, every day) or leave your details and we will call you back.