Bring your own device policy, Wren and Calder Property
BYOD policy template that draws a line around work data
A bring your own device policy has to let staff use their own phones for work while protecting client data, and it only works if staff trust what the employer can and cannot do to their device. This three page policy for a real estate agency sets eligible devices, five enrolment steps, a can see and cannot see table, and wipe rights limited to work data.
The document, page by page
Every page as it renders and as it prints, with nothing summarised. Read the wording before you reuse it.
Section by section
What each section is for, so you can keep the ones you need and drop the rest.
- Cover
- Spine cover with the agency, policy title, who it is for and the date.
- 1. Purpose
- Why BYOD is allowed, what is at stake, and that it is optional.
- 2. Eligible devices
- Phone, tablet, laptop and shared device rules with minimums and allowed uses.
- 3. Enrolment
- Five steps from signing the form to automatic updates.
- 4. What the agency can and cannot see
- A two column privacy table.
- 5. Remote wipe rights
- Work profile removal and full wipe only on request, with the lost device callout.
- 6 and 7. Support, costs and leaving
- What is supported, the $40 allowance, and the exit process.
How to adapt this document
First, change the risk examples to your sector: a clinic would name patient records and the booking system, a trades business would name site photos and quotes. Second, if you do not use device management, say so and rely on app level protection, such as the email app's own passcode and remote sign out, and adjust the can see table to match. Third, set the lost device reporting time to how fast you can act on it; 2 hours suits an agency that can change keysafe codes the same day.
What the guidance recommends
Government security guidance on bring your own device, such as the UK National Cyber Security Centre's BYOD guidance and NIST's guidelines for managing mobile devices, points the same way as this policy: separate work data from personal data, manage only the work part, require a passcode and current updates, and plan for loss and departure. Privacy and employment law decide how far an employer may go on a personal device, so check local rules before adding any monitoring.
What makes this document work
The privacy line is drawn in a table
Clause 4 lists what the agency can see, device model and system version, whether a passcode and encryption are on, and the work apps, beside what it cannot see: photos, messages, personal email, browsing, calls, location and personal apps. Staff decide whether to enrol based on that table, so it has to be specific.
Wipe rights stop at the work profile
Clause 5 lets the agency remove the work profile without notice if the device is lost, the person leaves or the device stops complying. A full wipe of the device happens only if the owner asks. That limit is what makes enrolment acceptable to someone with years of family photos on their phone.
Real estate risks are named
The policy mentions vendor contracts, tenant ledgers and keysafe codes, bars laptops from trust account access, and says keysafe codes for affected properties are changed the same day a phone is lost. Generic BYOD policies miss the one asset in an agency that opens someone's front door.
Questions people ask
Can an employer wipe an employee's personal phone?
Only with the employee's agreement and within what the policy says. This one limits routine wipes to the work profile, which removes agency apps and data only, and allows a full device wipe only at the owner's request. Wiping personal data without consent risks claims for loss and breaches of privacy law.
What is a work profile?
A separate, managed area on a phone that holds work apps and data apart from personal ones. The employer's device management tool can configure and remove the work profile without seeing or touching the rest of the phone. It is the main technical reason BYOD can respect privacy.
Should employees be paid for using their own phone?
Many employers pay an allowance because the employee bears part of the device and plan cost. This agency pays $40 a month through payroll to enrolled staff. Check how an allowance is taxed where you are, and whether any award or contract already requires reimbursement of work expenses.
What happens to work data when someone leaves?
The work profile is removed on the last day, ideally with the person present, as clause 7 requires. That also removes cached client documents. The manager should confirm that no client files, photos of keys or exported contacts sit in personal storage, because the profile removal cannot reach those.
Can someone refuse to use their own device?
They should be able to. This policy makes BYOD optional and offers an agency phone instead. Forcing staff to use personal devices pushes the cost and risk onto them and makes the wipe and monitoring terms harder to justify, so most employers keep a company device option available.
Build your own in about a minute
The button below opens the generator with this use case already described. Change the wording to match your own, generate, then edit anything you like.
Make one like thisOther document examples
Acceptable use policy template with an honest monitoring notice
An acceptable use policy has to say which systems it covers, what staff may and may not do with them, what the organisation monitors, and what happens when the rules are broken. This four page policy for a 28 person accounting firm holding records for 1,900 clients does that, with a monitoring table that says what is logged, for how long, and what is never watched.
Conflict of interest policy template for a not for profit board
A conflict of interest policy has to help directors recognise a conflict, declare it early and know what happens next, so decisions stay in the organisation's interest and funders can see that they do. This four page policy for a literacy charity board does that with six worked examples, five declaration rules, five management options and a register of interests.
Corporate travel policy template with class rules and per diem rates
A corporate travel policy has to settle how trips are booked, which class people fly, what the business pays each day away and who approves the trip, before anyone reaches the airport. This five page policy for a 38 person sales team does that with a class table by trip length, a per diem table by city tier and six driving safety rules.
Want the steps in the builder? Read Create a document with AI, then Document builder components. For everything this generator can do, see the document maker.
Sources
Written and checked by the OneCraft team. Last checked .