We use container-based separation:
- Android: Android Enterprise Work Profile creates an encrypted container, visually distinguished by a briefcase icon on work apps.
- iOS/iPadOS: User Enrollment creates a separate Managed Apple profile that isolates corporate data from personal data.