What is a CYOD agreement?

A CYOD agreement sets terms for employees using chosen devices for work, covering eligibility, security controls, data access, and remote-wipe authority; it functions as an enforceable workplace policy when signed by the employee.

Can this document be signed electronically?

Yes. Electronic signatures are generally enforceable under the ESIGN Act (15 U.S.C. §7001) and UETA in applicable states, provided intent, consent, attribution, and retention criteria are met.

Is notarization ever required?

Not typically for routine CYOD policies. If a state- or industry-specific authorization requires notarization, follow that requirement; confirm with local counsel for regulated circumstances.

What if the device is lost or stolen?

The policy should require immediate reporting, enable remote-wipe where permitted, and document remediation steps. Maintain incident logs to support breach notification if regulated data is affected.

How do I revoke or cancel consent?

Include a revocation process in the document that explains how an employee withdraws consent, effects on access, and data removal procedures; maintain a dated record of revocation.

Who must sign the document?

The employee or contractor using the device must sign. An authorized HR or IT representative may countersign to acknowledge enrollment, access rights, and support responsibilities.

Electronic Signature
Templates
Miscellaneous
Business CYOD Document

Business CYOD Document

This template is fully customizable. Edit the text, fill out the fields, and send it for signature. Give it a try!

Business CYOD Agreement

This Business CYOD Agreement (the Agreement) is entered into between:

Company Name: Employee Name:

Company Address Employee Address

Recitals

WHEREAS, Company maintains a Choose-Your-Own-Device (CYOD) program to permit employees to select from an approved list of devices for business use, subject to the terms and conditions set forth herein; and

WHEREAS, Employee seeks to participate in the CYOD program and agrees to comply with Company policies, applicable security controls, and the financial terms set forth in this Agreement; and

WHEREAS, the parties wish to set forth their respective rights and obligations with respect to the selected device and its authorized business use.

Device Selection and Identification

Device Selected (make/model) Device Serial Number Company Asset Tag (if any)

Scope of Work

The parties agree the scope of services and configuration obligations related to the CYOD device include provisioning, security configuration, approved applications, and any Company-managed support tasks. Employee shall permit Company to install and maintain required security controls and management agents.

Detailed Scope and Responsibilities

Payment Terms

Employee agrees to the following financial arrangement for the selected device:

Total Amount Payable Payment Schedule / Method Late Fee / Interest

Employee authorizes payroll deduction for scheduled payments where applicable.

Term and Termination

This Agreement shall commence on Start Date and shall remain in effect in accordance with the provisions below.

Start Date: End Date:

Notice Period for Termination

Either party may terminate this Agreement for material breach that remains uncured after the notice period specified above. Upon termination or separation of employment, Employee shall return the device in accordance with Company return procedures and remain liable for unpaid amounts and damage beyond normal wear and tear.

Confidentiality and Data Security

Employee shall maintain the confidentiality of Company data accessed, stored, or transmitted on the device and shall comply with Company security protocols including, but not limited to, authentication requirements, encryption, permitted application lists, and prompt reporting of loss or compromise.

Security and Data Handling Obligations

Employee acknowledges the confidentiality obligations and agrees that Company may remotely wipe, inspect, or otherwise manage the device to protect Company information.

Ownership, Liability and Maintenance

Ownership of the device shall be as set forth in the payment terms: if Company pays in full, Company retains ownership; if Employee pays in installments, ownership transfers upon final payment unless otherwise agreed in writing. Employee is responsible for care of the device, routine maintenance, and repair costs for damage caused by negligence or misuse.

Employee Maintenance and Liability Details

Inspection and Return

Company reserves the right to inspect the device for compliance with this Agreement. Upon request or upon termination, Employee must return the device in accordance with Company procedures. Fees for damage beyond normal wear and tear, missing accessories, or failure to return the device may be charged to Employee.

Return Condition and Fees

Governing Law

This Agreement shall be governed by and construed in accordance with the laws of the State of , without regard to its conflicts of law principles.

Entire Agreement

This Agreement, together with any attached device selection form and Company CYOD policy, constitutes the entire agreement between the parties with respect to the subject matter hereof and supersedes all prior and contemporaneous agreements, proposals, and representations, whether written or oral. No amendment will be effective unless in writing and signed by both parties.

Acknowledgement

By signing below, the parties acknowledge they have read, understand, and agree to be bound by the terms of this Agreement.

Company:

By:

Date:

Employee:

By:

Date:

What the Business CYOD Document Is

A Business CYOD Document (Choose Your Own Device) is a formal employer policy and enrollment agreement that governs when and how employees select, register, and use personal or company-provided devices for work. It combines eligibility rules, acceptable-use requirements, security controls, device enrollment steps, and support and reimbursement terms so both the organization and employee understand responsibilities. The document typically covers data segmentation, remote wipe authority, required security settings, permitted applications, and consequences for noncompliance. It can be issued as an internal HR policy, signed agreement, or as part of onboarding and must align with applicable privacy and industry rules.

Why a Clear CYOD Document Matters

A precise CYOD Document reduces legal and security risk by specifying device controls, data handling, and responsibilities for both parties. It creates a consistent enrollment process, supports regulatory compliance, and clarifies cost and support expectations without replacing other HR or security policies.

Who Typically Completes the Business CYOD Document

Organizations use a Business CYOD Document during onboarding, device enrollment, or when enabling remote or hybrid work arrangements.

HR and People Operations teams manage policy distribution and retention.
IT and Security teams enforce technical controls and device profiling.
Employees and contractors accept terms, register devices, and attest to security settings.

The document bridges HR, IT, and legal responsibilities so processing and enforcement are consistent across the business.

Core Components to Include in a Professional CYOD Document

A complete Business CYOD Document should define scope, enrollment steps, security requirements, support and reimbursement rules, monitoring/remote-wipe authority, and termination or transfer procedures. Each section should be clear about who is responsible for enforcement and what the employee must do to remain eligible.

Scope

Defines eligible employees, covered devices, and permitted business data handling on personal devices with clear boundaries and exceptions.

Enrollment

Describes registration steps, required device information, and any verification or acceptance checks performed by IT before access is granted.

Security Requirements

Specifies minimum OS versions, passcode/biometric controls, encryption, automatic updates, and approved security apps or MDM enrollment.

Support & Reimbursement

Explains whether the company provides support, which costs are reimbursable, and any limits on replacements or repairs.

Data Controls

Covers corporate data segregation, backup rules, remote-wipe authority, and procedures for data export or transfer.

Termination

Outlines steps when employment ends or eligibility changes, including device removal, data sanitization, and return obligations.

Step-by-Step: How to Complete and Submit the CYOD Document

Complete the form in sequence to avoid processing delays; gather device info and a photo of the device if required before starting.

01

Step 1: Enter employee identity and job role to confirm eligibility.
02

Step 2: Provide device make, model, serial/IMEI, and OS version.
03

Step 3: Acknowledge security requirements and consent to remote-wipe where applicable.
04

Step 4: Submit form to HR/IT; retain confirmation or signed PDF for records.

How to Configure the Online Enrollment Workflow

Configure fields and authentication to balance user convenience with adequate identity assurance before device access is allowed.

Field	Configuration
Authentication Tier	Email link or SMS OTP; use stronger MFA for privileged access
Required Fields	Employee name \| device model \| serial \| OS
Conditional Logic	Show remote-wipe consent only if personal device option selected
Retention Settings	Store signed record in HR system for minimum retention period

Technical Options for eSubmission and eSigning

Select platform settings that support secure signing, audit trails, and integration with HR and device management systems.

Authentication: Email-only, SMS OTP, or SSO with SAML for stronger assurance
Document Format: PDF or DOCX with preserved audit trail metadata
Integrations: Connectors to HRIS, MDM, and document storage

Ensure the selected platform preserves timestamps, signer attribution, and an audit trail that meets internal and regulatory needs.

Where to Submit the Completed CYOD Document

Follow these routing steps so HR and IT receive the signed record and can provision access and monitoring quickly.

Upload: Upload the signed PDF to the HRIS or document management system.
Notify IT: Trigger an automated ticket to IT/MDM for device onboarding.
Confirm Enrollment: IT confirms device compliance and enables access.
Archive: Store signed agreement in employee record with audit trail.

Common Mistakes to Avoid When Preparing the CYOD Document

Using informal device descriptions (e.g., 'my phone') instead of exact model and serial causes matching errors and delays.
Omitting signature date or using inconsistent name formats can invalidate consent and complicate audits.
Failing to specify remote-wipe procedures or thresholds leaves uncertainty about when IT may remove corporate data.
Not aligning the document with existing privacy or BYOD policies creates conflicts and enforcement gaps.

Key Data and Fields the CYOD Document Collects

Employee Name: Full legal name

Device Model: Manufacturer and model

Serial / IMEI: Unique device identifier

OS & Version: Operating system info

Security Controls: Encryption, passcode enabled

Signed Consent: Acknowledgment and signature

Penalties and Risks of an Incorrect or Incomplete CYOD Document

Data Breach Liability: Increased legal exposure

Regulatory Penalties: HIPAA or sector fines possible

Access Disruption: Delayed system access

Employment Actions: Discipline or termination risk

E-discovery Costs: Higher litigation overhead

Contractual Breach: Third-party agreement violations

eSignature Pricing and Feature Comparison Relevant to CYOD Workflows

Platform pricing and feature availability affect per-user and per-document costs; signNow is listed first for direct comparison with common alternatives.

	signNow	DocuSign	Adobe Sign	PandaDoc	HelloSign
Starting Price	$8/user/mo	$15/user/mo	$14/user/mo	$19/user/mo	$15/user/mo
Free Trial	7-day free trial	Varies by plan	Varies by plan	Varies by plan	Varies by plan
Bulk Send	Yes	Yes	Yes	Yes	No
Audit Trail	Yes	Yes	Yes	Yes	Yes
HIPAA Compliant	Yes	Yes	Yes	No	No
Envelope Cap	No cap	100 envelopes/user/year	Varies	Varies	Varies

Frequently Asked Questions About the Business CYOD Document

Answers to common operational and legal questions about using, signing, and enforcing a Business CYOD Document.

Need help? Contact support

What is a CYOD agreement?
A CYOD agreement sets terms for employees using chosen devices for work, covering eligibility, security controls, data access, and remote-wipe authority; it functions as an enforceable workplace policy when signed by the employee.
Can this document be signed electronically?
Yes. Electronic signatures are generally enforceable under the ESIGN Act (15 U.S.C. §7001) and UETA in applicable states, provided intent, consent, attribution, and retention criteria are met.
Is notarization ever required?
Not typically for routine CYOD policies. If a state- or industry-specific authorization requires notarization, follow that requirement; confirm with local counsel for regulated circumstances.
What if the device is lost or stolen?
The policy should require immediate reporting, enable remote-wipe where permitted, and document remediation steps. Maintain incident logs to support breach notification if regulated data is affected.
How do I revoke or cancel consent?
Include a revocation process in the document that explains how an employee withdraws consent, effects on access, and data removal procedures; maintain a dated record of revocation.
Who must sign the document?
The employee or contractor using the device must sign. An authorized HR or IT representative may countersign to acknowledge enrollment, access rights, and support responsibilities.

be ready to get more

Join over 28 million airSlate SignNow users

Sign Now