How is data stored on the Device protected?
Managed Device controls protect synchronized user records and temporary pending measurements.
The Device stores only the information required for Device operation and temporary synchronization. This includes the synchronized user list, with the salted PIN derivation for each User on that list who chose PIN, and, when the Device is offline, completed measurements held as pending data until synchronization is completed.
Local protections include use of a dedicated managed smartphone, Mobile Device Management enrollment, restricted access to settings and stored application data, prevention of unauthorized software installation, operating-system security controls, Device-level data protection, storage of PIN derivations in the iOS Keychain, and remote lock or wipe capabilities. Users cannot browse, export, copy, or otherwise access locally stored OPTOVERA data, including PIN derivations, through the normal Device interface.