Handoff

Allows users to start a task on one device and resume on another. Can be restricted via MDM to prevent data transfer between personal and corporate devices.

What to Know

Handoff enables seamless productivity by allowing users to start work on one device and continue on another without manually transferring files or state. While this improves user experience, it creates data leakage risks when users mix personal and corporate devices. An email drafted on a corporate Mac can be finished on a personal iPhone via Handoff, potentially bypassing email retention policies, DLP controls, or compliance monitoring. Organizations with strict data governance requirements often disable Handoff to prevent unintentional data transfer outside the corporate perimeter.

Common Scenarios

Enterprise IT: Corporate IT policies on Handoff vary widely based on data sensitivity and workforce composition. Organizations with BYOD programs often disable Handoff on corporate devices to prevent work from continuing on unmanaged personal devices. Companies that issue both corporate Macs and iPhones may allow Handoff between managed devices to enhance productivity while blocking Handoff to unmanaged devices. Some organizations disable Handoff entirely for employees handling sensitive data—especially in finance, healthcare, or legal sectors.

MSP: MSPs should establish Handoff policies with each client during onboarding, as preferences vary based on industry, compliance requirements, and workforce expectations. Some clients prioritize security and disable Handoff entirely, while others optimize for productivity and accept the risks. MSPs often field support tickets from users who don’t understand why Handoff stopped working after MDM enrollment—clear communication about restrictions is essential.

Education: Schools typically leave Handoff enabled on teacher devices to support flexible workflows between personal and school-issued devices. Student devices may have Handoff restricted to prevent students from transferring work to personal devices during tests or exams. Shared student devices usually have Handoff disabled to prevent cross-contamination of work between students sharing the same iPad.

In Addigy

Addigy’s Restrictions payload includes an “Allow Handoff” toggle that disables Handoff when unchecked. This restriction requires a supervised device and prevents the device from offering or accepting Handoff sessions with other devices. The restriction applies immediately upon profile deployment. Addigy does not currently offer granular control to allow Handoff only between managed devices—Handoff is either fully enabled or fully disabled.