What Wyrd can do
The work profile
Answers the question What does the system manage, and what stays personal?
The phone may be the employee's own or bought by the company. That makes no difference to management: Wyrd creates a work profile and works with that alone, and the personal half is out of the system's reach.
What it is called
In Android terms this is a managed work profile on an organisation-owned device, the COPE model. The app becomes profile owner and governs that profile alone. The organisation-owned mark is applied during enrolment from a computer and adds security event logs and app installation without a prompt on every handset; it does not touch the personal half.
Inside the profile
Work applications, their data and their settings. Policies apply here, applications and certificates are installed here, and the inventory of the work side is collected from here.
Outside it
The employee's personal apps, messages, photographs and accounts. The administrator does not see them, does not collect them and does not wipe them. Movement between the halves is closed off by policy, both ways.
Where the line really is
When an employee leaves or a phone goes missing, the work profile is wiped and personal data stays where it is, regardless of who paid for the handset.
What the employee sees
The phone states that the work profile is managed by an organisation and shows the administrator's rights. This cannot be hidden.