Permitted Use
Specifies authorized activities, business vs personal use distinctions, and prohibited actions such as sideloading apps or bypassing security controls. Clear scope reduces ambiguity and enforcement disputes.
A Mobile Companion Agreement clarifies responsibilities, reduces device-related risk, and documents data protection measures. It helps organizations enforce acceptable use, allocate costs for repairs or replacements, and demonstrate compliance with privacy and security obligations when mobile devices access regulated systems.
Employers, IT departments, managed service providers, human resources, and independent vendors who supply or manage mobile devices or companion apps commonly use this agreement.
Use the agreement as a clear operational and legal record to reduce disputes, support audits, and meet regulatory obligations.
Typically authorizes device configuration, security controls, and remote management. Responsible for enforcing acceptable-use rules, coordinating wipe or reconfiguration after termination, and recording technical details necessary for incident response or compliance audits.
Signs to acknowledge receipt, acceptable use, and data access permissions. Responsible for routine care, reporting loss/theft promptly, and complying with privacy and security obligations. Misuse can result in disciplinary action and potential liability for damage or data breaches.
Specifies authorized activities, business vs personal use distinctions, and prohibited actions such as sideloading apps or bypassing security controls. Clear scope reduces ambiguity and enforcement disputes.
Details required device protections: device encryption, passcode policies, patching cadence, and approved MDM/EMM software. Assigns responsibility for applying updates and monitoring security posture. Includes logging and reporting obligations.
Defines who provides device support, service windows, replacement policies for lost or damaged devices, and cost allocation for repairs or upgrades, including whether employee reimbursement is required.
Specifies data collection, storage, encryption, backup, and permitted third-party sharing. Requires compliance with HIPAA or other industry-specific privacy standards when protected data is involved and documents responsibilities for breach notification.
Allocates risk between parties, limits liability, and sets indemnification obligations for data breaches, negligence, or willful misconduct. Exclusions and caps should be clearly defined and include procedures for claims handling.
Specifies conditions for device return, data retention and deletion procedures, and the effects of termination on ongoing obligations such as license grants or support commitments.
| Workflow Field Name for Setup | Configuration |
|---|---|
| Signature Field | Mandatory signature with date validation |
| Conditional Return Field | Displays return instructions if device flagged lost |
| Authentication Level | Email or SMS code; use KBA for higher risk |
| Attachment Requirement | Require proof of purchase or insurance when applicable |
Ensure the eSignature platform supports secure storage, audit trails, and configurable authentication to meet legal and compliance requirements for mobile device agreements.
Enter start date as MM/DD/YYYY and record deployment events.
Schedule periodic reviews and set automatic renewal reminders sixty to ninety days prior.
Report device loss within 24–48 hours to enable remote wipe and insurance claims.
Require device return within ten business days of employment termination.
Define retention period for records and schedule secure data disposal after termination.
Finalize terms and obtain internal approvals before distribution.
Collect signatures, capture audit trail, and confirm timestamps.
Enroll device in MDM and apply security profiles.
Return or wipe device, archive records, and confirm disposition.
| signNow | DocuSign | Adobe Sign | PandaDoc | HelloSign | |
|---|---|---|---|---|---|
| Starting Price | $8/user/mo | $15/user/mo | $14/user/mo | $19/user/mo | $15/user/mo |
| Free Plan | Yes, 7-day trial | No | No | Yes, limited | Yes, limited |
| Bulk Send | Yes | Yes | Yes | Yes | No |
| Audit Trail | Yes | Yes | Yes | Yes | Yes |
| HIPAA Compliant | Yes | Yes | Yes | No | No |
Optica Ventures used a Mobile Companion Agreement to formalize device support and remote management across field teams.
Fertility Centers adopted mobile agreements to manage clinician mobile access to patient records and to meet privacy obligations across clinics.