What work-device management can show an organization

Enrollment can expose device inventory

Microsoft's Intune enrollment guide lists visible information such as device owner, model, serial number and operating-system version. App-inventory visibility differs by ownership and configuration. It says personal devices generally expose managed apps, with some configurations allowing more, and directs users to their IT administrator for the actual scope. Microsoft: Intune enrollment visibility

A product's privacy boundary has a defined scope

The same Intune guide lists personal browsing/calling history, messages, passwords, photos and document contents among information not exposed by that enrollment service. Read that statement within Intune's documented scope. It is not an audit of every separate work app, browser-management service or network tool. Microsoft: Intune enrollment visibility

Microsoft's administrator guidance recommends clearly telling users what data is collected and why. Its data-access discussion is based on administrator permissions. Ask for the organization's actual collection and access policy. Microsoft: data-access transparency

Apple supervision adds management controls

Apple explains that supervision gives organizations extra configuration and restriction controls, including web filtering. Its deployment guide says supervision generally denotes organizational ownership and describes visible indicators on each platform. An indicator identifies management; it does not reveal every configured rule. Apple: supervised-device settings · Apple: supervision indicators

Managed Chrome can have its own controls

Google says a managed Chrome administrator can restrict features, install extensions and monitor activity. It documents separate pages for managed extensions and applied policies. Check the browser's management scope in addition to device enrollment. Google: managed Chrome indicators