How does Elements Mobile Protection license usage work on Android devices which have separate work and personal profiles?

Issue:

How does Elements Mobile Protection license usage work on Android devices which have separate work and personal profiles? Will Elements Mobile Protection installed in the work profile protect the personal profiles configured on the Android device? 

Resolution:

Elements Mobile Protection is the mobile app accompanied with WithSecure Elements Endpoint Protection (EPP). With EPP, Mobile Protection is designed to complement and be deployed via third-party Mobile Device Management solutions.

Many of these MDM solutions are also designed to work with the Android Enterprise platform. The Android Enterprise platform offers a way of keeping work apps and data separate from personal apps and data by creating separate profiles, see this article. Profiles never share data, so this enables companies to manage their work apps and data without compromising employee privacy.

Companies may use different ways of managing their mobile fleets. For example, companies may allow the use of one's own device (BYOD=Bring Your Own Device) and deploy a work profile on that, or companies may offer fully-managed, company-owned devices intended exclusively for work purposes.

As Mobile Protection is an app offered as an enterprise solution, WithSecure cannot know which type of management solution the company offers. If Mobile Protection is installed on a device with both a work and personal profile in use, Mobile Protection is not able to protect any apps or data on the device's personal profile. This is due the design of the Android Enterprise Platform and how the division between work and personal profiles is managed.

If company offers fully-managed company-owned devices, this means that Mobile Protection can be installed and enabled using an enterprise license without the need to buy a separate license.