- BFSIBanking, Financial Services & Insurance
- HealthcareComing soon
- ManufacturingComing soon
- Retail & E-CommerceComing soon
BlackBerry
Secure communications for governments, defence and regulated enterprises— BlackBerry’s high-assurance UEM, SecuSUITE encrypted calls and AtHoc critical event management, and how each one is licensed. This hub covers three BlackBerry products.
Buy through TechBag
Same software. Better outcome — at a lower cost.
The company, at a glance
Quick answer
Three intel pages. Secure device management, encrypted calls and emergency alerts.
BlackBerry’s Secure Communications line, product by product — every card is a full intel page, from high-assurance UEM to SecuSUITE and AtHoc.
BlackBerry UEM
Device management with app-level encryption.
iOS, Android, Windows and macOS from one console, on-premises, air-gapped or UEM Cloud; macOS ADE enrolment arrived only in 12.24.
BlackBerry SecuSUITE
Encrypted calls, texts and files for government.
End-to-end encrypted calls, messages and file sharing that also hides call metadata, with PBX breakout to landlines; on-prem or hybrid.
BlackBerry AtHoc
Alerts, two-way replies and staff accountability.
Geo- and attribute-targeted alerts, ArcGIS layers, Entra ID user sync and automated workflows, in the cloud, on-premises or air-gapped.
BlackBerry Workspaces
Platform & engineSecure file sharing with DRM embedded in each file: AES-256 wrapping, watermarking and control over printing, copying, forwarding and download after a file leaves, SaaS or on-premises. It is still in BlackBerry’s FY2026 annual report but has only a support page, with no price, video or named customer, so TechBag notes it here
BBM Enterprise (BBMe)
Platform & engineEncrypted enterprise messaging, still listed in BlackBerry’s FY2026 annual report and documented up to release 1.20.1, with apps for Android, iOS, macOS and Windows and a profile managed from UEM. It has no product page, price or video, so TechBag notes it here. Not the consumer BBM service
BlackBerry Dynamics and the Work apps
Platform & engineThe secure container and SDK, formerly Good Dynamics, with BlackBerry Work, Access, Connect, Notes, Tasks, BRIDGE and Edit built on it. They are licensed as part of a UEM deployment, so they are covered on the BlackBerry UEM page
UEM value-add services
Platform & engineBlackBerry 2FA, Enterprise Identity, Protect Mobile (mobile threat defence, still updated in November 2025) and Analytics. BlackBerry documents them as services added to a UEM deployment rather than standalone products, so they fold into the UEM page
BlackBerry sells across 1 of the products TechBag carries in endpoint management. The Endpoint Management guide shows how the category splits and which part is yours. →
Why “certified, and on your own servers” is the whole story
Most device-management and messaging tools run in the vendor’s cloud and are judged on features and price. BlackBerry sells to buyers who must prove assurance first:its products carry certifications such as NIAP, FedRAMP High and BSI Common Criteria, and install on-premises, including air-gapped. The catch is that each certificate belongs to one product — and no price is published for any of them.
BlackBerry Dynamics
Work data is encrypted inside BlackBerry’s own apps and SDK, kept cryptographically apart from personal data on the same device.
Self-hosted deployment
UEM runs on-premises, air-gapped or in sovereign clouds, SecuSUITE on-premises or hybrid, and AtHoc where no vendor-cloud link is allowed.
UEM Cloud
Shares one feature table with on-premises UEM, and the August 2026 cloud release matches 12.24; no hosting regions are published.
BEMS
Links the Work apps to Exchange, Exchange Online and SharePoint; Dynamics Docs moved to on-premises BEMS when the cloud service shut in Dec 2025.
Start with the assurance you must prove — then match the product that actually holds it.
Peer & market recognition
Every claim on this hub traces to one of these public signals.
SecuSUITE on the compliant list
listed on the US NIAP Product Compliant List since 2017; the listing belongs to SecuSUITE, not to UEM
AtHoc authorised at High
which BlackBerry’s annual report calls the only critical event management platform with that authorisation
Common Criteria for UEM
Germany’s BSI issued UEM’s certificate; BlackBerry calls it the first MDM the BSI has certified
Across three products
SecuSUITE and AtHoc carry Commercial Solutions for Classified approvals, and UEM gained a CSfC designation
NATO Restricted
listed by BlackBerry for SecuSUITE and for UEM on its certifications page
27001, 27017, 27018 + SOC Type II
held for the UEM service, alongside DISA STIG and FIPS 140 listings
No current placement announced
TechBag could not verify BlackBerry in the 2026 Magic Quadrant for Endpoint Management Tools
Two console flaws, July 2026
CVE-2026-18084 and 18085 affect UEM 12.23.0 QF8 and earlier; later builds carry the fix
The company in six figures
See the platform, hear the pitch
BlackBerry® Secure Communications Solutions
A 2025 overview from BlackBerry’s channel of the Secure Communications portfolio this hub covers.
Total Sovereignty
A 2026 film on the sovereignty message, keys and infrastructure under the customer’s authority, that runs through BlackBerry’s pitch.
Security Certifications You Can Verify
A 2026 video on BlackBerry’s certifications; check each one against the specific product it was issued for.
Where BlackBerry sits — the grids
Two company-level views you won’t find on any vendor site — tap any dot for the rationale. The category-level grid lives on the product page.
BlackBerry Across Its Solution Areas
Each dot is a BlackBerry solution area: competitive position vs category momentum.
The largest line: high-assurance UEM with the Dynamics container, now adding macOS basics and declarative Apple payloads in 12.24.
Self-Hosting × Price Transparency
How far each UEM vendor lets you run it on your own servers, up to air-gapped, vs how openly it publishes a price.
UEM installs on-premises, air-gapped or as UEM Cloud, and every licence is a custom quote per user or per device.
Positions are TechBag’s illustrative synthesis of public review-platform standings and vendor documentation — not a reproduction of any analyst graphic. Verify before relying on it.
New to this? Learn it properly.
Zero-jargon starting points, in reading order. Each links into the deep education on the product page.
Where should you start with BlackBerry?
Answer three questions; we’ll point you at the right starting product. No email required — this isn’t that kind of quiz.
1. What problem is forcing the decision?
2. Where must it run?
3. Who will own it?
Three products, one buyer
Each product is bought on its own, but all three are built for the same customer: a government, defence or regulated team that needs proof of assurance.
Read →Managing phones or securing calls?
UEM controls and protects the device and its work apps; SecuSUITE encrypts the conversation itself. Many buyers need one, few need both at once.
Read →A certificate belongs to one product
FedRAMP High is AtHoc’s, the NIAP listing is SecuSUITE’s and the BSI Common Criteria certificate is UEM’s. Ask which product a claim covers.
Read →When an alert must reach everyone
AtHoc targets people by place or role, collects their replies and accounts for staff, and it can run where no link to a vendor cloud is allowed.
Read →Residency means self-hosting
No India region is documented for UEM Cloud. Indian buyers who need data held locally run UEM on their own servers, including air-gapped.
Read →Where BlackBerry UEM fits
The Endpoint Management category page splits the market into UEM, RMM, endpoint protection and remote access, and shows where a high-assurance UEM sits.
Read →The acronym decoder
Every term on these pages, in one place- UEM
- Unified endpoint management: one console to enrol, configure and secure every device type.
- Dynamics
- BlackBerry’s secure container and SDK that encrypts work apps and their data.
- BEMS
- The BlackBerry server that links the Work apps to Exchange and SharePoint.
- Air-gapped
- Run on a network with no connection to the internet or to a vendor cloud.
- Sovereign cloud
- Cloud hosting kept under one nation’s legal and operational control.
- NIAP PCL
- The US list of products evaluated against NIAP protection profiles.
- Common Criteria
- An international standard for evaluating the security claims of IT products.
- NSA CSfC
- The NSA programme approving commercial products for classified US data.
- FedRAMP High
- The top US federal cloud authorisation level, for the most sensitive unclassified data.
- Critical event management
- Alerting, two-way response and accountability for people during an incident.
- EFSS
- Enterprise file sync and share: business-controlled storing and sharing of files.
- Metadata protection
- Hiding who talks to whom, when and how often, not only what is said.
Buy it like you’ve done this before
The procurement playbook TechBag runs with IT buyers — steps, licensing cheat-sheet, and the pitfalls that cost quarters.
Name the assurance you must prove
List the certifications your auditor or ministry asks for, then check which BlackBerry product holds each one. They are not shared across the line.
Choose where it will run
Pick your own servers, an air-gapped network, a sovereign cloud or UEM Cloud. No India region is documented, so local residency means self-hosting.
Count users or devices
UEM is a subscription per user or per device, and large or multi-agency estates can negotiate custom terms. Count both before you ask for a quote.
List the add-ons in scope
Dynamics apps, 2FA, Enterprise Identity, Protect Mobile and Analytics sit on top of UEM. Name the ones you need so quotes compare like for like.
Plan the upgrade path
12.22 leaves engineering support on 14 November 2026, and builds to 12.23.0 QF8 carry two July 2026 console flaws. Price the move to 12.24.
Get it priced in rupees
BlackBerry publishes no price and sells after a demo or briefing. TechBag scopes product, deployment and users, then quotes in INR with GST.
The licensing cheat-sheet
| Product | Licensing model | How you enter | Best for |
|---|---|---|---|
| BlackBerry UEM | Subscription per user or per device · on-premises, air-gapped or UEM Cloud · Dynamics and value-add services on top | Quote after a demo | High-assurance device management |
| BlackBerry SecuSUITE | Quoted per deployment · on-premises, sovereign cloud or hybrid, with keys under your control | Quote after a briefing | Classified calls and messages |
| BlackBerry AtHoc | Quoted per deployment · cloud, on-premises or air-gapped | Quote after a demo | Emergency alerting and accountability |
BlackBerry publishes no price for any product. UEM is a subscription per user or per device, with custom terms for large or multi-agency estates; SecuSUITE, AtHoc and Workspaces are quoted after a briefing or demo. TechBag gets the quote itemised in INR with GST.
Five pitfalls that cost buyers quarters
Reading one certificate across the line
NIAP covers SecuSUITE, FedRAMP High covers AtHoc and the BSI certificate covers UEM. None of them transfers to a sibling product.
Expecting deep Mac management
macOS ADE enrolment, FileVault key escrow and PKG deployment arrived only with UEM 12.24 in August 2026. Test Mac workflows before you commit.
Planning on Apple User Enrollment
UEM’s User privacy - User enrollment activation does not support iOS 18 or later. Apple BYOD runs through the Dynamics container instead.
Assuming UEM Cloud is hosted in India
BlackBerry names no countries for its cloud infrastructure. If DPDP or a ministry rule needs local data, budget for an on-premises deployment.
Treating roadmap as shipped
Post-quantum cryptography and wider multi-tenant management were announced in June 2026 as coming. Ask which release delivers each one.
The evaluation kit
Each intel page carries an 8-question vendor checklist and a value calculator:
Skip the homework entirely
Bring your requirements and current tool bills — a TechBag advisor models the whole decision for you.
Book a discovery call →The forces shaping this market
Four trends with momentum scores (TechBag’s read of analyst and market signals) — and what each means for your next decision.
Category momentum — estimated market growth
Illustrative CAGR synthesis**TechBag’s illustrative estimate, not a quoted analyst figure. The takeaway: regulated buyers increasingly want communications, alerting and device control they can host themselves — which is why BlackBerry sells on-premises and sovereign deployment across its line.
Sovereign, self-hosted control
BlackBerry sells its line as sovereign: UEM installs air-gapped or in sovereign-managed clouds, and SecuSUITE keeps encryption keys under the customer’s authority.
What it means for you
Ask every vendor where keys and servers sit, not just where data is stored.
Post-quantum encryption
In June 2026 BlackBerry announced post-quantum cryptography for UEM Server and the Dynamics apps, working towards FIPS 140-3 accreditation.
What it means for you
Put a post-quantum timeline in the contract, not just in the pitch.
Declarative Apple management
UEM 12.24 added a custom DDM payload profile and an OS-update enforcement profile with a target version, build and local deadline.
What it means for you
Check the server version: these features need 12.24 or UEM Cloud.
Alerting as public infrastructure
AtHoc is authorised at FedRAMP High, and BlackBerry’s CEO names India’s natural disasters as a reason to bring critical notifications here.
What it means for you
Judge an alerting tool by its delivery reach and its authorisations.
Questions buyers ask about BlackBerry
Ready to shortlist BlackBerry?
Open any of the three intel pages for the deep dive, or let a TechBag advisor build the case with you — the certification you must prove, where it has to run, the users or devices to license, quotes, trials, GST invoicing and lifecycle support included.
Stats, positions and figures are illustrative syntheses of public materials; verify before purchase.