Unified Endpoint Management

miniOrange Unified Endpoint Management (UEM) is an enterprise-grade MDM solution that gives IT administrators complete control over managed devices — ensuring security, compliance, and seamless remote management across your organization.

VPN & Secure Tunnel Built on Android's VpnService, the app establishes an encrypted tunnel between managed devices and organization-controlled VPN endpoints. All traffic routing is governed by IT-defined policies, including allowed IPs and split tunneling, ensuring secure access to internal corporate resources and MDM/UEM backend systems. The VPN is strictly for organizational use — it does not redirect traffic for ads, monetization, or bypassing geographic restrictions, and is fully aligned with Google Play's VPN usage and privacy guidelines.

Location & Geofencing (Policy-Based) The app supports foreground and background location tracking based on permissions and IT-defined policies. When tracking is active, a visible foreground notification is displayed as required by Android. On Android 10+, background ("all the time") location is requested only when needed, with clear in-app disclosure before system prompts. When a location report is sent, data may include latitude, longitude, timestamp, optional reverse-geocoded address, and device identifiers — all handled in alignment with managed configuration policies and user consent.

Certificate Management IT administrators can securely deploy and manage certificates on enrolled devices, enabling trusted access to corporate networks and services without manual configuration by end users.

Message Broadcasting & Notifications Organizations can push real-time alerts and announcements directly to all managed devices using Firebase-powered push notifications. Employees can also view organizational communications through the in-app notification interface. The app fully complies with Android 13+ notification permission requirements.

Remote Assistance & Screen Control Support teams can initiate live screen sharing sessions using Android's MediaProjection APIs, streamed over a real-time WebRTC connection — allowing supporters to see exactly what the user sees for faster troubleshooting. Screen capture requires explicit system-level permission from the user (or policy on fully managed devices). A foreground service with media projection type runs during active sessions, ensuring full transparency. Denied permission immediately stops sharing.

Privacy & Compliance The app does not collect or misuse personal data beyond what is strictly required for enterprise device management. Sensitive data such as location is handled separately with proper user consent and policy controls. No data is shared with third parties for advertising or unrelated purposes.

Accessibility API (Android AccessibilityService)
This app registers an AccessibilityService solely to support Remote Cast / remote control for organization-managed devices. When an administrator initiates a supported remote session and the end user enables the service, the app can inject on-screen gestures (tap, swipe, scroll, drag, pinch, multi-touch) and perform standard system navigation actions (e.g., Back/Home) to assist with device UI interaction during the session.
The service is declared with canPerformGestures="true" and listens for typeWindowStateChanged for compatibility. The onAccessibilityEvent method does not collect or export accessibility event data for any other purpose.
Remote control commands are used only within administrator-driven sessions and are not intended for autonomous actions, call audio recording, or bypassing the user’s ability to disable the service or uninstall the app.
miniOrange UEM is purpose-built for enterprise environments — delivering the security, control, and transparency modern organizations demand.