Key differences between ROM and MDM filtering

Guides Android Guides
, ,
1

I feel like this whole thing is confusing for many, so just thought I’ll leave this here…

ROM vs MDM: Key Differences in Phone Filtering

When it comes to filtering a phone, there are two main approaches (though more exist):

1. MDM (Mobile Device Management)

An MDM is a security software that allows organizations to manage, monitor, and secure mobile devices.

With this method, the phone retains its original software (the stock ROM) and an additional security “app” is installed to block specific apps or features that the user shouldn’t access.

Examples of MDM Filters:

  • Egate
  • Gentech
  • MB Smart

Pros:

:white_check_mark: Easier to manage and update filters remotely.
:white_check_mark: More flexibility for making changes to the filter settings.

2. Custom ROM

A Custom ROM replaces the phone’s entire operating system with a modified version. The original software is removed, and a “kosherized” version is flashed back onto the phone with all unwanted features and apps removed.

Examples of Custom ROM Filters:

  • Purifone on the Kyocera
  • Many TCL filters
  • EKO QIN phone (F30)
  • Fig phone

Pros:

:white_check_mark: More control over the phone’s software.
:white_check_mark: Can remove features at a deeper system level.

Key Difference:

A major distinction between the two methods is flexibility:

  • MDM filters often allow changes to be made remotely and more easily.
  • Custom ROMs tend to be less flexible, as any major change requires flashing a new ROM, which is more complex.

Please correct or add any info.
Disclaimer: Ai was used to edit this for clarity and formatting.

8 Likes
Beginners Questions
4

Was wondering if someone could explain why there’s some features that can only be implemented on a MDM but to be built into a ROM for some reason it can’t be

For example it seems like in order to block certain features on apps like let’s say for example WhatsApp for statuses and AI and let’s say for Google messages to block the AI feature for some reason people are saying it’s easier to be done on a MDM as opposed to being built into a ROM why is that?

5

It’s using accessibility to scan the page and close those options. Would need an app that does that

6

Why can that not be done by building it into the ROM?

7

And also is there such thing as having a ROM with a built-in MDM?

Can the MDM be hidden into the ROM?

8

Yes

9

You can, but it’s still a separate app. And unless it enforces no uninstall, clear data, kill etc… it’s not a solution

So… Mdm

As far as specific apps are concerned, there is a limit that you can “build into the ROM” without xposed, as far as I know.

10

just like the verizon MDM on some of the Sonim’s. but you can also implement system apps in the ROM to do the same. isn’t that easier and stricter then an MDM?

1 Like
11

Depends for what. Alot can be done by modding system apps or framework.

2 Likes
12

I am pretty sure all of the custom kosher phones (Fig, Wonder, Keyphone, etc.) are custom Roms that have included in them remote access far more powerful than an MDM. You don’t need an MDM app, you can control on a framework level. Once you are building the Rom with the manufacturer from AOSP you have unlimited control. Most of the community based Roms don’t have any remote access (like for the TCL and Cat.)

2 Likes
13

really? Without a system update they could change stuff?

14

Sure. They wont make changes to system partition. But changing data is enough. The equivalent of pm hide/disable is enough to work wonders.

15

It’s surprising that the significant advantage of MDM wasn’t mentioned here — that it doesn’t void responsibility for the devices, unlike flashing a custom ROM, which requires unlocking the bootloader.
Also, once you have the software, you can copy it to each device individually, unlike a custom ROM that needs to be tailored for each specific device, with differences between complex devices like Qualcomm, SPD, etc.

2 Likes