Mobile Device Management (MDM)
If a salesperson's phone were lost today, with the email and the client book inside it, who at your company could lock it and wipe it remotely before someone opened it?
With Zamak's mobile device management (MDM), the company's iPhones and iPads are enrolled, configured and protected remotely. On personal devices, the company space stays separate from personal use, and a company device that is lost, stolen or leaves with an employee can be locked, put in lost mode and wiped remotely. Zamak Technologies operates the devices and is your point of contact.
This product has no valid combination.
Managed IT Operations
The company phone walks out the door every day, in someone's pocket, with client contacts, emails and access inside it.
Your team's phones and tablets are already work computers: they open email, hold client contacts, approve orders and reach the company's systems. The difference is that they move. They ride in a taxi, go out to the job site, go home with the employee and, one day, leave the company with the person who resigned. Without management, no one knows for sure how many devices reach the company's data, which ones have a screen lock, or what to do the minute one of them goes missing.
According to the Verizon 2025 Mobile Security Index, 96% of respondents say they are confident they could recover quickly from a mobile attack. Yet only 4% have implemented all eight mobile security best practices the study identifies, the first of them mobile device management.
A work phone holds the company email, every client's contacts and access to the systems, all one tap away. And that is exactly the device most easily left on a taxi seat.
When someone leaves the company, cutting their system access is routine. The client list left on that person's phone, without management, stays out of the company's reach.
With mobile device management, the company's phones and tablets are enrolled, configured and protected, and can be locked and wiped remotely when needed. Zamak Technologies operates the management; your team works with the device in their pocket, and the company keeps its data under control.
How the device becomes the way out
The risk lies in what the device carries inside and in who can act when it goes missing
Five scenes show how phones and tablets become the shortest way out of the company, even where the phone was seen as each employee's own business.
The phone left on the back seat of a taxi.
It held the company's synced email, the week's price sheet and access to the order system, and the unlock code was the user's birthday. Without management, the company cannot lock or wipe the device on its own, or know whose hands it ended up in. To size the risk: in the Verizon 2025 Mobile Security Index, 63% of respondents that rejected mobile device management experienced data loss in a security incident.
The salesperson resigned and walked out with the client book in their pocket.
The contacts, the conversations with each client and the deal history were on his phone, mixed in with family photos. With no separation between what belongs to the company and what is personal, the company cannot take back what is its own without intruding on what is his. The client book that took years to build goes to work for another company.
The field team's tablet, with no passcode, passing from hand to hand.
It lives in the truck, on the job site or at the counter, shared by everyone, and no one remembers to lock the screen. It opens the company's system for whoever picks it up first. No rule requires a screen lock, none prevents installing any app, and every postponed update becomes a gap no one is watching.
Every new phone consumes a whole afternoon of setup.
Each device requires setting up email, Wi-Fi, the company's apps and the security rules, one by one, with the employee waiting alongside. Each ends up configured differently, depending on who prepared it and how rushed the day was. And when the device comes back, no one checks whether the company's data was really erased before it goes to someone else.
No one knows how many phones open the company's email today.
There is the executive's phone, the intern's, the reception tablet and the old device someone left in a drawer, still signed in to the account. Every device that reaches the company's data is an access point, and the access point no one knows exists is exactly the one no one closes. When the audit or the insurer asks which devices reach the data, the question goes unanswered.
None of these stories requires a sophisticated attack. All it takes is a device in the wrong place and no one on the other side able to act. That remote reach, as soon as Zamak is called in and the device is connected, is what mobile device management puts in place.
The definition
What mobile device management (MDM) is
Mobile device management (MDM) is the operation that places a company's phones and tablets under defined rules that can be reached remotely. Each device is enrolled in a management platform, receives the work settings and apps, and starts following policies such as a required screen lock. If it is lost, stolen or leaves with an employee, the company device can be locked and wiped remotely. At Zamak, mobile device management covers iPhone and iPad, and it is operated by the Zamak Technologies team.
Ready to work the moment it is turned on
With automated enrollment, a company iPhone or iPad comes out of the box and, the first time it is turned on, already receives the company's email, Wi-Fi, apps and rules. No one sets up devices one by one, and they all start out the same.
Lost, locked, wiped
If the device goes missing, Zamak, called in through the agreed playbook, locks it remotely and, on a company iPhone or iPad, can turn on lost mode, which locks the screen with a contact message and reports the device's last location. When there is no getting it back, erases the company device remotely (the remote wipe). The aim is for the loss to stay at the price of the device, not at what was inside it.
What belongs to the company, separate from what is personal
On the employee's own phone (BYOD, short for bring your own device), management only handles the company's part. By Apple's own design, no management can see the employee's personal messages, emails or contacts, or query the personal device's location. When the person leaves, the company removes what belongs to it.
Mobile device management handles enrollment, configuration, policies, apps, loss and departures. The team's computers have their own workstation management service, which Zamak also offers.
What is included
The device operation and Zamak's management, together
On one side, the team operating every phone and tablet through the platform. On the other, Zamak handling the rules, the follow-up and the contact. Your team uses the device to work, and the company knows where its data is.
The device operation
What the team does to keep every company phone and tablet under control.
- Enrollment of iPhone and iPad in the management platform, automated on company devices and guided on personal ones
- Remote setup of email, Wi-Fi and work apps, with no need to have the device in hand
- Policies applied to the devices: a required screen lock, usage restrictions and scheduled system updates
- Remote lock, lost mode with the last known location and remote wipe when a company device is lost, stolen or never comes back
- A company space separate from personal use on the employee's own device (BYOD), with their privacy preserved
- An inventory of every enrolled device: system, type, who uses it, whether it is company-owned or personal, and when it last connected to the platform
- Distribution of the company's apps to those who need them, and removal when the person changes roles or leaves
Management by Zamak
The layer that places the operation alongside your company.
- Rules designed with you: what the company device may do, what the personal one must follow, and what happens when someone leaves
- An agreed playbook for loss, theft and departures, so no one has to improvise on the day
- A single point of contact, during business hours, to call when a device goes missing, instead of hunting for who can fix it
- Zamak translates the state of the devices into your business language, with the inventory of enrolled devices at hand when the audit or the insurer asks
- A backstop alongside your IT team, never in its place
Inside the service
How mobile device management works on the inside
For those who want the detail: this is how phones and tablets stay enrolled, configured, protected and reachable remotely.
Automated enrollment and supervision
On company iPhones and iPads, automated enrollment (ADE, Automated Device Enrollment) ties the device to management through the serial number registered in the company's Apple Business account. The first time it is turned on, it enrolls itself and becomes supervised, the mode Apple reserves for organization-owned devices and that unlocks the most complete controls; the management profile stays on the device and the user cannot remove it. When automated enrollment is not possible, guided manual enrollment brings the device under management, with less control and with the user able to unenroll.
Policies and remote configuration
Configuration profiles, designed and validated by Zamak, deliver to the device, without touching it, the email account, the Wi-Fi network, usage restrictions and the screen lock requirement, and system updates can be scheduled on devices running iOS 16 or later. The rules apply to the devices you choose, so the executive's phone and the salesperson's follow the same security standard, and a rule change reaches the devices as soon as they connect.
Company apps
Work apps are distributed through the platform: with the licenses purchased through the company's Apple Business account, including on manually enrolled devices. The employee receives what they need to work, and removal follows a change of role or a departure.
Loss, theft and departures
For company devices, the platform sends the remote screen lock, passcode clearing and the remote wipe, which returns the device to factory settings. On supervised iPhones and iPads, lost mode locks the screen with a contact message, reports the device's last location, refreshed every 15 minutes while it has internet, and can play a sound. On a personal device, Zamak removes the device from management, which removes the company profile installed on it. A device without a connection receives the queued command as soon as it reconnects.
Personal devices with privacy
By Apple's own design, no form of management can see personal email, contacts, calendars and notes. It cannot see messages or call and browsing history either, and on a personal device it cannot query the location. What the company applies on a personal device is limited to what is agreed with you during implementation, and the response to an employee leaving is to remove the device from management, not to erase it.
Coverage and scope
Management covers iPhone and iPad, company-owned or personal, within what each enrollment mode allows. In scope are enrollment, configuration, policies, apps, the inventory of enrolled devices and the response to loss, theft and departures. The promise is reach and control over every enrolled device: losing a device is still possible, and what changes is what happens next.
In the Apple ecosystem, commands reach the device through Apple's official notification service, and each client has its own notification certificate and an account kept separate from the others in the management platform.
The platform and automation act around the clock, every day; Zamak's specialists operate, tune the rules, handle loss cases and are your point of contact during business hours.
Take this documentation to present to decision-makers.
The comparison
Three ways to care for the company's phones and tablets
There are three ways to care for a company's phones and tablets. The first is to call someone when a device has a problem or goes missing (break-fix help). The second is to run the operation in-house, without a management platform. The third is a managed operation that enrolls, configures, separates and reaches every device remotely. The Zamak column lists only what Zamak delivers to the client.
A lost or stolen device
The Zamak choice
Managed operation (Zamak)
Remote lock, lost mode with location and remote wipe of the company device
Break-fix help
All that is left is changing passwords and hoping
In-house operation without a management platform
Depends on a tool having been installed before the loss
An employee leaving the company
The Zamak choice
Managed operation (Zamak)
Company accounts, apps and profile removed from the device as soon as the departure is reported to Zamak
Break-fix help
You ask for the device back and take their word for it
In-house operation without a management platform
Manual, device by device, at every departure
A new device
The Zamak choice
Managed operation (Zamak)
Ready when turned on, with email, network, apps and rules
Break-fix help
A visit or an afternoon of setup per device
In-house operation without a management platform
Manual setup, device by device
A personal phone with company data
The Zamak choice
Managed operation (Zamak)
A defined, removable company space, with privacy preserved
Break-fix help
Company data mixed with personal data
In-house operation without a management platform
Without a platform, the choice is between banning it and living without control
Cost predictability
The Zamak choice
Managed operation (Zamak)
A predictable monthly cost per device
Break-fix help
Unpredictable: you pay per emergency
In-house operation without a management platform
Team hours on every device and every incident
An inventory of who has what
The Zamak choice
Managed operation (Zamak)
Every enrolled device with user, system, ownership and last connection
Break-fix help
None: no one knows how many devices reach the data
In-house operation without a management platform
A manually updated spreadsheet
A comparison between operating models, with no vendor named.
Risk, impact and response
For every device out of place, a response already agreed
A device with company data is lost or stolen
Clients, emails and access in the hands of whoever found it
How managed operation responds
Lock and lost mode through the agreed playbook, as soon as the loss reaches Zamak, and a remote wipe of the company device when there is no getting it back
An employee leaves with the phone
The client book and the access stay with them
How managed operation responds
The departure playbook removes company accounts, apps and the company profile from the device, without touching what is personal
An audit, the insurer or a data protection law (such as the LGPD in Brazil, the GDPR in Europe or the CCPA in California) asks the company to show the security measures it applies, devices included
With no inventory, the question of which devices reach the data goes unanswered
How managed operation responds
The inventory shows the enrolled devices, whose they are and which rules they are under
An employee resists putting management on their personal phone
The company is left without control, or the person feels their privacy invaded
How managed operation responds
The rules on a personal device stay limited to what belongs to the company and Apple's own system prevents management from seeing personal messages, emails or contacts
Zamak operates the management and is your point of contact.
For every decision maker
What this means for whoever decides
Having every phone and tablet within reach solves a different pain for each role in the company.
Partner and owner
What the company built does not walk out the door in someone's pocket
The client book, the negotiations and the company's access travel today on the team's phones. With management, losing a device or an employee's departure no longer means losing what took years to build, and the valuation stays protected where the company's value actually travels.
Executives and management
An unpredictable risk becomes a predictable line item
Instead of finding out how big the problem is on the day a device goes missing, you have a predictable monthly cost per device, with no surprises. There is also an agreed playbook for loss and departures, and the inventory of enrolled devices ready for when the audit, the insurer or a client asks.
Internal IT leader
Every device under rules, without setting them up one by one
The enrollment, configuration, apps and rules of every phone and tablet start running with method, alongside your team. Your team delivers more, in less time and with the best of management technology, and keeps deciding the rules. Zamak's backstop adds to your work.
IT partner
Scale your IT business with Zamak's structure and the best of technology
Expand what you offer your clients with phone and tablet management run by Zamak's structure, without the cost of building and running your own operation. It includes automated enrollment on iPhone and iPad, a separate company space on personal devices and loss response. Partnership terms are agreed in the first conversation.
Why Zamak
Reach over every device, with people who understand your business at your side
A lost phone stays protected when someone knows what to do at the right moment, under the rules your company chose. Zamak Technologies takes on that part, alongside your team, and leaves your company to decide what matters.
Zamak brings years of hands-on experience running IT for companies, with specialists who work in Portuguese, English and Spanish. Zamak is your operations backstop and your point of contact, alongside your team, never in its place.
Microsoft Solutions Partner · Addee (N-able) Elite Group · Great Place to Work
An enterprise-grade management platform, operated by the Zamak Technologies team.
Frequently asked questions
Mobile device management (MDM): what companies ask before signing up
See also Managed Workstations · Managed Services Implementation and Activation · Managed Identity and Passwords (PAM) · What an endpoint is
Let us talk
Every phone and tablet on your team under your rules, even away from the office
In the Verizon 2025 Mobile Security Index, those who implemented all eight mobile security best practices, the first of them device management, were half as likely to have an outage and five times less likely to report serious repercussions. Talk to Zamak and have your company's phones and tablets enrolled, protected and under rules, every day.
Protect the devices now
Request the proposal and start the engagement with a Zamak specialist.
Talk to a specialist
Start with a conversation with a Zamak specialist to understand how many devices you have, who owns them and which rules make sense, with no commitment.
Free IT assessment
Still evaluating? Take the free assessment and see where your IT operation has gaps to close.