Nonprofit Mobile Device Policy Generator

A Mobile Device Policy sets security and usage requirements for phones and tablets used to access your organization's data, whether the device is organization-owned or personal (BYOD).

A lost phone with access to your email or donor database is one of the most common ways nonprofits lose sensitive data. Requiring a passcode and remote wipe consent are two of the cheapest ways to reduce that risk.

View our full disclaimer before using this tool.

Step 1 of 6

Organization Information

What is your organization's name? *

What email address should staff contact with questions or to report a lost device? *

Scope

Which devices does this policy cover? *

Personal devices only (BYOD) Organization-owned devices only Both personal and organization-owned devices

Security Requirements

Which security measures should be required on devices covered by this policy? *

PIN, passcode, or biometric lock Device encryption enabled Timely operating system and security updates Consent to remote wipe of organizational data

BYOD App & Data Separation

For personal devices, how should organizational data be kept separate from personal data?

Organizational email and apps must be accessed through a separate managed app or work profile Organizational files/data may not be permanently stored on the personal device Personal apps and use are otherwise allowed and will not be monitored

Lost or Stolen Devices

Within how many hours should a lost or stolen device be reported? *

How should staff report a lost or stolen device? (optional)

Reimbursement & Offboarding

Does your organization offer a stipend or reimbursement for personal device use? (optional)

Yes No