Security policies, in plain English

Security settings a business owner can read.

A NounDesk security policy is a set of rules a device follows: screen lock strength, auto-lock time, camera and screenshot controls, whether apps can come from outside Google Play, update schedule, Wi-Fi networks and more. You start from one of five templates (Standard Business, Maximum Security, Field Worker, Kiosk or Custom), each setting is described in plain English with the Android version it needs, and a publish preview lists exactly what will change and how many devices it affects.

A security policy with plain-English settingsapp.noundesk.comSecurity policy: Standard BusinessDraftRequire a 6-digit PINAll Android versionsBlock apps from outside Google PlayAll Android versionsBlock USB data transferNeeds Android 12 or newerInstall updates overnight (1–5 am)Security patches are never delayedPublishing changes 2 settings on 7 devices.Employees will be asked to set a new PIN.
Security policies in NounDesk.

Start from a template that matches your business

Five templates cover almost everyone. Pick the closest one, rename it and change what you need, because templates are starting points rather than cages.

  • Standard Business for office and service teams: a PIN, encryption, Play Protect, updates overnight.
  • Maximum Security for clinics and anyone holding sensitive records, and Field Worker for crews in vans.
  • Kiosk for shared tablets, or Custom to start from a blank page and choose everything yourself.

Settings a business owner can actually read

Every control is written the way you would explain it to a new hire, covering screen lock, device features, protection, updates and the network.

  • Screen lock strength, auto-lock time, password expiry and history, and erase after repeated failed unlocks.
  • Camera, screenshots, apps from outside Google Play, developer options, USB data transfer and employee factory reset.
  • Push Wi-Fi networks with their passwords so a phone connects at the shop without anyone typing anything.

Every setting says which Android versions support it

Android has grown over the years and not every phone supports every control. Rather than silently doing nothing, NounDesk labels each setting with what it needs.

  • A control that needs Android 12 or newer says so before you publish, not after.
  • If half your fleet is older, you find out while you are editing rather than from a customer.
  • The publish preview tells you how many devices each setting will actually apply to.

See exactly what will change before you publish

Policies are edited as drafts. When you publish, a preview lists every setting that changes and how many devices it affects.

  • Each changed setting is listed with its old value and its new one.
  • A disruptive change, such as a stronger PIN, requires you to acknowledge that employees will be interrupted.
  • No surprise lock-outs on a Monday morning, because you saw the impact before it shipped.

Full version history, one-click restore

Every published version is kept with who changed it and when, so a change that turned out to be too strict is a click away from being undone.

  • Browse every version of a policy with its author and date.
  • Restore an earlier version and it rolls out exactly the way a new one would.
  • The audit log records the restore too, so the trail stays complete.

Security settings on most management tools read like a compliance manual. NounDesk writes them the way you'd explain them to a new hire: "Require a 6-digit PIN." "Block apps from outside Google Play." "Install updates overnight."

Policies and apps work together

A policy doesn't stop at security settings. It also decides the apps.

  • Apps are part of the policy

    Each app is required, available or blocked.

  • Compliance in plain words

    The dashboard shows whether phones actually meet the policy.

More you can switch on in a policy

Several newer features are turned on per security policy, so each team gets the setup that suits it.

  • Data protection

    Block printing, SD cards and USB drives, screenshots and USB file transfer. Maximum Security turns them all on.

  • Website filtering in Chrome

    Block listed sites or allow only the ones you list, up to 1,000.

  • Factory reset protection

    Up to 10 trusted admin Google accounts per policy.

  • Remote support

    Turn on TeamViewer, AnyDesk or Splashtop for the phones that need it.

The five templates, side by side

Pick the closest one, rename it, and change what you need. Nothing is locked.

Recommended for most teams

Standard Business

Office and service teams whose phones hold email, messaging and a scheduling app.

  • Require a 6-digit PIN, auto-lock after 2 minutes
  • Storage encryption on, Google Play Protect on
  • Apps from Google Play only
  • Camera and screenshots allowed
  • System updates overnight (1–5 am); security patches never delayed
  • Employee cannot factory reset the device
Sensitive records

Maximum Security

Clinics, security companies, anyone handling customer or patient data.

  • Strong password, auto-lock after 30 seconds
  • Erase after 10 failed unlock attempts
  • Camera and screenshots blocked
  • USB data transfer blocked (needs Android 12 or newer)
  • Developer options blocked, apps from Google Play only
  • Updates automatic, no postponing
Vans and job sites

Field Worker

Technicians, crews and drivers who live on the phone all day.

  • Everything in Standard Business
  • Shop and site Wi-Fi networks pushed with passwords
  • Tethering allowed for site hotspots
  • Camera on for job photos
  • Navigation and job app marked Required
  • Offline alert after 24 hours
Shared tablets

Kiosk

Order screens, check-in desks, classroom tablets, scanners.

  • Pairs with the kiosk wizard: one app or a set of apps, full screen
  • Home button off, settings blocked
  • Stay awake while charging, fixed brightness
  • Volume locked, Bluetooth and account changes blocked
  • Updates overnight when the counter is closed
  • No screen lock required for shared use, encryption still on
Blank page

Custom

When you know exactly what you want.

  • Start with every control unset
  • Choose each setting; compatibility labels show which Android versions apply
  • Save as a draft, preview the change, publish
  • Version history and one-click restore, like every policy
Industries

Who uses security policies

The trades that lean on this feature most, each with its own scenario and recommended policy.

Field service

Technician phones that are ready before the first job.

Technician phones that hold the schedule, the customer address and the photos that get you paid. Keep the job app and maps installed, push the shop Wi-Fi, and lock a phone the moment it is left at a customer's house.

Read more →
Construction

Crew phones and site tablets you can actually see.

Crew phones and rugged site tablets that move between trailers and job sites. Group devices by site, push each site's Wi-Fi, and see honestly which ones have gone quiet.

Read more →
Cleaning & home services

Simple phones for a team that's always at someone's home.

Staff phones that carry the schedule and a client's gate code into someone's home. A simple PIN rule, an app allow-list, and reassignment in seconds when the team changes.

Read more →
Security companies

Guard phones that protect the client's site, and the client's privacy.

Guard phones that go onto a client's premises. Camera and screenshot controls per post, a strong screen lock, and an audit log you can hand to procurement.

Read more →
Clinics & small healthcare

Front-desk tablets and staff phones that would pass an audit.

Front-desk tablets and staff phones that hold appointment details. Encryption, a real screen lock, patching on a schedule, and reports you can export for a compliance review.

Read more →
Small schools & training

Classroom tablets that stay on the lesson.

Shared classroom tablets used by a hundred students and supported by a teacher. A multi-app kiosk per room, blocked app stores, and updates that run overnight.

Read more →

See every industry →

Security policies: questions answered

Which template should I start with?

Standard Business for most office and service teams. Field Worker if phones live in vans and on sites. Maximum Security for anything handling sensitive records. Kiosk for shared tablets. Custom when you want to start from a blank page.

What happens to employees when I change a policy?

The publish preview tells you. If a change is disruptive, for example a stronger PIN requirement, NounDesk asks you to acknowledge that employees will be prompted before it publishes.

Can I undo a policy change?

Yes. Every published version is kept in history and any earlier version can be restored with one click.

Can I force an OS update right now?

No. Updates follow the schedule in the policy: automatic, a nightly window, or postponed for a period. Security patches are never delayed by NounDesk.

Ten phones. Ten minutes. Protected.

Start a 14-day free trial, no card required. Or load a sample fleet in demo mode first.