Data protection on device (data at rest)

Although base device encryption capabilities and cross-platform plug-ins and components can provide a certain degree of security for app developers on their own, the Microsoft Intune MAM
features provide the ability to enforce policies at the app level, including encryption of all local
data. It is therefore a low friction way to increase your security.

Intune provides two solutions for implementing its MAM features for Android and iOS devices: an
app-wrapping tool, and an app SDK. You can run the app-wrapping tool on internal line-of-business
(LoB) Android and iOS apps to activate certain capabilities such as limiting cut-copy-paste while the
app is running, requiring a PIN, or requiring app-level encryption. The Intune App SDK takes this a
step further, making it possible for apps to designate corporate data only for protection, leaving
personal data completely intact, and ensuring that users cannot store their data in personal appconnected services.

Source Of Information : Microsoft Platform and Tools for Mobile App Development