Solution Highlight: Hypori Virtual Mobility
Editor's note, October 2026: This article was first published in December 2020. Hypori's virtual smartphone is offered today as Hypori Mobile, alongside Hypori Secure Messaging and Hypori Lyte; Hypori publishes its current certifications and authorizations in its trust center. The compliance list below reflects Hypori's statements in 2020. ISEC7 SPHERE integrates Hypori as a backend system, and ISEC7 MAIL can be used in red networks in combination with Hypori; see the ISEC7 SPHERE and ISEC7 MAIL pages.
Businesses have several options for giving employees access to enterprise apps and documents on their mobile devices while keeping data safe and secure.
If a business decides on a Bring Your Own Device (BYOD) program, one of the best options is containerized applications. Containerized apps secure data at rest and in transit and control how these apps exchange data with other apps on the device, for example to allow access to work email. The downsides are the limited number of apps available and the mandatory use of a UEM solution to deploy and manage them, which comes at a higher cost.
This is where Hypori Virtual Mobility comes into play: a highly secure virtual smartphone solution that lets users perform business tasks on their own mobile devices with a container-like user experience, meaning complete separation of personal and enterprise data. No UEM solution is needed. Most importantly, corporate data never leaves the company network, and no data is physically stored on user devices (zero footprint).
You may be familiar with Virtual Desktop Infrastructure (VDI). Hypori Virtual Mobility provides the same experience and makes it mobile. Enterprise apps are provisioned inside the Hypori client app, similar to containerization. Users work with these apps to access enterprise data, but only graphics are sent to the device, as an encrypted pixel stream from the Hypori virtual device on the organization's server. Touches on the device screen are sent back and interpreted as input on the virtual device, for example in a document or an email. With Hypori, no data is ever at rest on the mobile device, and users can still do their jobs. We explain the wider concept in Demystifying Technology: Virtualization Beyond Servers.
Components
- Hypori Client:
- An app on the user's device
- Provides access to the Hypori Virtual Device
- Agentless thin client that connects to a Hypori Virtual Device
- Hypori Appliance or Private Cloud (SaaS):
- Manages authentication and provisioning, hosts virtual devices and exposes APIs
- Provides storage for virtual device images and user data
- Integrates with enterprise-class storage and third-party management, monitoring and reporting tools
- Hypori Virtual Device:
- Virtual Android-based device
- Runs in an isolated, policy-backed container
- Managed environment that allows installation of apps from Google Play or custom apps
- Hypori Web Admin Console:
- Web interface for managing Hypori templates, users and devices
Key benefits
- Ideal for BYOD deployments
- Complete separation of personal and enterprise data
- Zero trust approach: no data is sent to the device
- Intuitive user experience that speeds up user acceptance
- Available on Apple iOS and Android devices
- Lower administrative and operational costs
- Unique identifier for access to enterprise data (user credentials, biometrics)
- Out-of-the-box integrations with monitoring, reporting and MDM systems
- Compliance as stated by Hypori in 2020: CSfC, HIPAA, PCI DSS, FISMA and NIAP, and Common Criteria certified
If your business is evaluating its BYOD and COPE deployment models, consider Hypori to keep personal and enterprise data completely separate and to offer user-friendly BYOD without the cost and administrative effort of traditional approaches. Which ownership model fits your organization is the topic of Why Ownership Model Matters, and the security principle behind "no data on the device" is explained in Demystifying Security: Zero Trust.
More about the product is available directly from Hypori. For BYOD strategy, integration with ISEC7 SPHERE or ISEC7 MAIL, and our endpoint security services, contact us.