Mobile Device Management (MDM)

Mobile Device Management (MDM) is the centralized administration of an organization’s mobile fleet — enrolling devices, pushing security policies, controlling which apps may run, and remotely locking or wiping a phone that is lost, stolen, or separated from an employee. Because so much business is now conducted by text, chat, and mobile email, MDM sits at the intersection of security and recordkeeping: the messages on those devices can be federal records subject to capture, retention, and disposition just like any other.

MDM matters because it shapes whether mobile records can actually be preserved. A wipe policy that erases a device on the first failed login, or that destroys content the moment someone leaves, can defeat retention obligations and a litigation hold, exposing the organization to spoliation claims. Sound practice is to ensure record content (and its metadata) is captured into a recordkeeping system before any device action removes it. Note the distinction: MDM governs the device and its controls; it is not itself the archive of record, so capture and scheduling must be designed in deliberately, not assumed.