Specifications

Using BlackBerry Balance to
secure BlackBerry 10 devices
in your organization’s
environment for work use and
personal use
Your organization can use BlackBerry Balance technology to permit users to use BlackBerry 10 devices for both work and
personal use. For example, your organization might want to permit users to activate their personal devices on the
BlackBerry Device Service or permit users to use devices that your organization provides for personal use.
The BlackBerry Device Service security features and BlackBerry Balance can control how devices protect your
organization's content and resources (data, apps, and network connections) and allow devices to treat your organization's
data and apps differently from personal data and apps. These features and options have the following benefits:
• Permit your organization to control access to your organization's data and apps on devices
• Help prevent your organization's data from being compromised
• Provide a unified experience for users when they access personal data and work data within some core apps
• Permit you to install and manage your organization's apps on devices
• Permit you to delete your organization's data and apps from personal devices when users are no longer a part of your
organization
• Permit you to control network connections for work and personal apps
BlackBerry Balance is designed to separate and secure work and personal information on devices running BlackBerry 10
OS that are activated on the BlackBerry Device Service. BlackBerry Balance uses separate areas of the device called
spaces to separate work and personal activities. A space is a distinct area of the device that enables the segregation and
management of different types of data, apps, and network connections. Different spaces can have different rules for data
storage, app permissions, and network routing. The separate spaces help users to avoid activities such as accidentally
copying work data into a personal app, or displaying confidential work data during a BBM Video chat.
The device encrypts the work space during the activation process. You can use an IT policy rule to require the device to
encrypt the personal space separately.
Devices that are not activated on the BlackBerry Device Service operate only a personal space. When you activate a device
on the BlackBerry Device Service using the BlackBerry Balance option, a work space is created on the device. The
personal space on the device remains intact during the activation process and any user data, apps, or network connections
7
Security Technical
Overview
Using BlackBerry Balance to secure BlackBerry 10 devices in your organization’s environment for work
use and personal use
45