Device Trust from Android Enterprise - Signals access

  • Access to device trust signals is controlled by an allowlist for security and compliance with API terms.

  • Unauthorized use of device trust signals is prevented by this allowlist.

  • To access device trust signals and become a solutions provider, apply on the Android Enterprise Partner Portal.

To ensure security and compliance with the Android Management API Terms of Service, access to device trust signals is restricted to authorized applications.

When allowlist registration is required

Whether your application must be on the allowlist depends on how the device is managed and where your application runs:

  • Companion apps on AMAPI-managed devices (no allowlist registration required): An application assigned the COMPANION_APP role in a policy on an Android Management API (AMAPI) can access device trust signals without being on the allowlist on fully managed devices or from inside a work profile (with access limited to signals from the work profile). For details, see Manage application roles, Policy Configuration, and Access signals from a companion app.
  • All other applications and environments (allowlist required): Your application must be on the allowlist to access device trust signals from inside a personal profile, on a non-managed device, on a device managed by a custom DPC, or from any application that isn't assigned the COMPANION_APP role.

Register for device trust signals access

To apply for allowlist access to device trust signals and become a Device Trust from Android Enterprise solutions provider, submit a request on the Android Enterprise Partner Portal.