Device Management Terms

This public page publishes the Device Management addendum only. It supplements the general Sortd service terms for customers who enroll company-owned Android devices in Sortd Device Management.

These “Device Management Terms” are the agreement between Automate Boring — the Sortd Device Management service operated by JNS RE Holdings LLC (“Automate Boring,” “Sortd,” “we,” “us”) — and you, the Delivery Service Partner customer (“Customer,” “you”), governing your use of the Sortd Device Management module. It applies only to the company-owned Android devices you enroll (“Managed Devices”). Capitalized terms not defined here have the meaning given elsewhere in the Terms of Service.

You authorize Automate Boring, as your enterprise mobility management (“EMM”) provider, to perform the following on your Managed Devices, on your behalf and at your direction:

1. Enrollment — provision and enroll your Managed Devices into your Android Enterprise, including via QR-code managed provisioning.
2. Policy enforcement — apply, update, and enforce device management policies, including security, configuration, and compliance settings.
3. Application management — install and require applications (force-install) and prevent or remove applications (block) on your Managed Devices.
4. Restricting install sources — limit installation sources, including restricting installation to managed Google Play (whitelist mode) and disallowing installation from untrusted/unknown sources (sideloading).
5. Remote lock — remotely lock a Managed Device.
6. Remote wipe (factory reset) — remotely wipe a Managed Device, performing a factory reset that permanently erases all data on the device (see the remote wipe warning below).

You may exercise these capabilities through the Sortd Device Management console, and Automate Boring may carry them out on your behalf as your EMM provider.

You represent and warrant, for every device you enroll, that:

1. You own or otherwise lawfully control the Managed Device, and it is a company-owned, business-only device issued by you to your personnel;
2. You have full authority to manage, configure, lock, wipe, and apply policy to the Managed Device and to authorize Automate Boring to do so on your behalf; and
3. You will not enroll any device that you do not own or control or that you lack authority to manage — including any personal device of a driver or other individual.

You are solely responsible for determining which devices are eligible and for the accuracy of these representations.

1. You are solely responsible for informing the delivery associates and other personnel who use your Managed Devices (Drivers) that each device is company-owned and centrally managed, and for obtaining any notice, acknowledgement, or consent required by applicable law before a device is enrolled.
2. Automate Boring provides the managed-device notice template below as a convenience only; you are responsible for adapting it and confirming it meets your legal obligations. Automate Boring does not give your Drivers notice on your behalf and is not responsible for your compliance with notice or consent requirements.
3. You will not enroll a Managed Device until you have given any legally required notice to, and obtained any legally required consent from, the affected Driver.

WARNING: A remote wipe (factory reset) PERMANENTLY and IRREVERSIBLY DELETES ALL DATA on the Managed Device — applications, accounts, files, photos, messages, and any other content. Wiped data cannot be recovered by you or by Automate Boring.

1. You are solely responsible for initiating any remote wipe. Remote wipe is limited to lost, stolen, or offboarded devices; you will not initiate a wipe outside those circumstances. The wipe is executed at your instruction.
2. You are responsible for any back-up of device data before a wipe and for confirming you have authority to wipe the specific device and any data on it.
3. Automate Boring is not liable for any loss of data, applications, or device functionality resulting from a wipe or lock that you initiate, and a wipe, once initiated and transmitted to the device, cannot be undone.

1. You authorize Automate Boring to create and administer an Android Enterprise on your behalf, including by initiating Google's enterprise sign-up flow and creating your enterprise so that you are the enterprise owner of record.
2. Automate Boring administers your enterprise as your EMM provider under a single Automate Boring EMM service account, in the supported Android Management API provider model. One Android Enterprise corresponds to one Customer; your enterprise, policies, catalog, enrollment tokens, devices, and command logs are scoped to you and are not shared across customers.
3. You authorize Automate Boring to perform the configuration, policy, application-management, lock, and wipe actions described in these Device Management Terms within your enterprise.

In providing Device Management, Automate Boring reads and processes the following categories of device data from your Managed Devices, via AMAPI status reporting. These are company-owned, business-only devices locked to approved work apps (non-work apps are blocked):

1. Device identifiers (and enrollment identity);
2. Device model and brand;
3. Enrollment and compliance status;
4. Applied policy;
5. Installed-application inventory (including apps that have been removed);
6. Device settings status;
7. Software information;
8. Hardware and system status;
9. Memory (and storage) information;
10. Display information;
11. Network information; and
12. Power-management events.

Automate Boring does not access any of the following: personal messages; personal files; personal email; photos or other media; web browsing history; keystrokes; microphone or camera capture; real-time GPS location tracking; or the contents of any app. AMAPI does not expose these. This processing is further described in our Privacy Policy. You are responsible for ensuring your collection and use of this data, and your authorization of our processing, comply with applicable law.

1. Device Management is gated on your acceptance of these Device Management Terms. No enrollment token will be issued and no policy will be applied to any device for your tenant until your acceptance is recorded.
2. Automate Boring records your acceptance per tenant, including the version accepted and the timestamp. Continued use after a material update may require acceptance of the updated version before further enrollment or policy actions proceed.

You may use and adapt the following notice to inform your Drivers before enrollment. This template is provided for convenience and is not legal advice; confirm with counsel that it satisfies your obligations.

Notice: This is a company-owned, managed device.

This phone is owned by [Customer legal name] and is provided to you for work use only. It is a company-owned, business-only device locked to approved work apps (non-work apps are blocked) and centrally managed using Sortd Device Management.

While you use this device, your employer and its device-management provider can install and require work applications, block or remove other applications, restrict where applications can be installed from, apply security and configuration policies, and remotely lock or wipe the device, which permanently deletes all data on it.

It does not access your personal messages, personal files, personal email, photos or other media, web browsing history, keystrokes, microphone or camera capture, real-time GPS location tracking, or the contents of any app.

Because this is a company-owned, business-only device, you should have no expectation of privacy in personal activity on it and should not store personal data you wish to keep private. By using this device, you acknowledge this notice.

Device Management relies on Google Android Enterprise and the Android Management API with Android Device Policy to enforce device controls. Your use is subject to and conditioned on the applicable Google Android Enterprise / managed Google Play terms and the AMAPI permissible-usage policies. Automate Boring does not control, and is not responsible for, the availability, behavior, or changes of the underlying Google services; in the event of a conflict, the Google terms govern operation of the Android Enterprise platform.