# UEM & MDM — a TechBag decision guide

*Last reviewed 2026-10-03.*

- Canonical: https://www.thetechbag.com/browse/endpoint-management/uem-mdm
- Products compared: 30

The full narrative — hero claim, boundary section, decision variables, cost analysis and
failure modes — is on the page itself at https://www.thetechbag.com/browse/endpoint-management/uem-mdm.
This file carries the product data and the complete narrowing logic.

## The 30 products

### Jamf Pro — Jamf

- **Who it's for:** Apple-heavy fleets that want the deepest macOS/iOS management there is.
- **The honest limitation:** Apple-only. No Windows or Android management at all; Jamf for Mobile covers iPhone and iPad only.
- **Price:** $12.50 — per Mac/mo as Jamf for Mac (Jamf Pro + Connect + Protect, billed annually, 25-device minimum); Jamf for Mobile $5.75 per device
- **Details:** https://www.thetechbag.com/jamf/jamf-pro

### Jamf Now — Jamf

- **Who it's for:** Very small Apple shops (under ~25 employees) that need basics, not automation.
- **The honest limitation:** Deliberately shallow: no DDM update enforcement, no scripting, no patch policies (those are Jamf Pro).
- **Price:** $4 — per device/mo ('starting at' on Jamf's pricing page)
- **Details:** https://www.thetechbag.com/jamf/jamf-now

### Jamf School — Jamf

- **Who it's for:** Apple-only K-12 / education estates (Apple School Manager, Classroom).
- **The honest limitation:** Education-tuned and Apple-only; no Jamf-Pro-grade DDM / patch / scripting.
- **Price:** Quote — per device (education bundles)
- **Details:** https://www.thetechbag.com/jamf/jamf-school

### Microsoft Intune — Microsoft

- **Who it's for:** Microsoft-committed shops with a mixed Windows-heavy fleet.
- **The honest limitation:** macOS depth historically trails Jamf. And it is NOT in any Office 365 plan (Office 365 ≠ Microsoft 365).
- **Price:** $8 — per user/mo (Plan 1; often $0 if bundled)
- **Details:** https://www.thetechbag.com/microsoft/microsoft-intune

### Scalefusion UEM — Scalefusion

- **Who it's for:** Mixed fleets and rugged/field Android, especially where India data-residency matters.
- **The honest limitation:** Vendor pricing page blocks automated reads; confirm current per-tier prices at quote time.
- **Price:** ~$2 — per device/mo (10-device min; page fetch blocked — verify)
- **Details:** https://www.thetechbag.com/scalefusion/scalefusion-uem

### Hexnode UEM — Hexnode

- **Who it's for:** Mixed fleets — Linux included, Windows via Autopilot — wanting broad multi-OS coverage at a low entry price.
- **The honest limitation:** No India cloud region (US/EU/UAE); the on-premises edition is the in-country route. macOS DDM floor + Apple-silicon specifics unconfirmed.
- **Price:** $2.20 — per device/mo (Pro tier; 15-device min)
- **Details:** https://www.thetechbag.com/hexnode/hexnode-uem

### 42Gears SureMDM — 42Gears

- **Who it's for:** Rugged/frontline Android + kiosk, with India/US/EU data-region choice or on-prem.
- **The honest limitation:** macOS DDM update floor is macOS 15+ (higher than peers). FileVault key-escrow wording unconfirmed.
- **Price:** $3.99 — per device/mo (Standard; bundles SureLock/SureFox)
- **Details:** https://www.thetechbag.com/42gears/42gears-suremdm

### ManageEngine Endpoint Central — ManageEngine

- **Who it's for:** IT teams wanting UEM + patch + software deployment in one, with India DCs or on-prem.
- **The honest limitation:** Windows-enrollment specifics (Autopilot/Entra) and macOS DDM depth are datasheet-level, not doc-confirmed.
- **Price:** Edition-based — per-endpoint editions (Free / Pro / Enterprise / UEM)
- **Details:** https://www.thetechbag.com/manageengine/manageengine-endpoint-central

### miniOrange UEM — miniOrange

- **Who it's for:** Identity-first shops (miniOrange IAM/SSO heritage) adding device management.
- **The honest limitation:** A newer UEM: advanced macOS (FileVault escrow, DDM, Apple silicon) is not substantiated in public docs.
- **Price:** Quote — per device/mo (quote-only; 14-day trial)
- **Details:** https://www.thetechbag.com/miniorange/miniorange-uem

### Seqrite mSuite — Seqrite

- **Who it's for:** India shops managing Android + iOS mobile only (Quick Heal / Seqrite estate).
- **The honest limitation:** Mobile-only — NO macOS and NO Windows. Apple ABM/ADE not evidenced (email/SMS enrollment only).
- **Price:** Quote — per device (quote-only)
- **Details:** https://www.thetechbag.com/seqrite/seqrite-msuite

### NinjaOne MDM — NinjaOne

- **Who it's for:** Teams already on NinjaOne RMM adding Apple/Android MDM in one console.
- **The honest limitation:** MDM is an add-on, not standalone; Windows/Linux are RMM-only (not in the MDM module); macOS apps are Apps-&-Books only (no .pkg).
- **Price:** Quote — per device (add-on to the NinjaOne platform)
- **Details:** https://www.thetechbag.com/ninjaone/ninjaone-mdm

### LogMeIn Miradore (GoTo) — GoTo

- **Who it's for:** Mixed fleets wanting a genuinely free-to-start, four-OS MDM (incl. macOS .pkg deploy).
- **The honest limitation:** No documented DDM (classic MDM protocol); Finland-built / US-owned, no India data-residency confirmed.
- **Price:** $3.30 — per device/mo (Premium; $4.75 Premium+)
- **Details:** https://www.thetechbag.com/goto/goto-mdm

### OpenText ZENworks — OpenText

- **Who it's for:** Mixed Windows, Mac, Linux, iOS and Android fleets managed from servers in your own data centre.
- **The honest limitation:** Disk encryption, endpoint security and the SaaS edition are Windows-only; kiosk lockdown and macOS DDM are not documented.
- **Price:** Quote — per module or as ZENworks Suite (quote-only); patch content needs its own subscription after 60 days; a Windows-only SaaS edition
- **Details:** https://www.thetechbag.com/opentext/opentext-zenworks

### Sophos Mobile — Sophos

- **Who it's for:** Sophos Central estates that want phones, tablets and Macs managed in the same console as Intercept X.
- **The honest limitation:** Not available in Sophos Central's India region — the tenant sits in the US or EU; Windows is agent-enrolled, with no documented Autopilot.
- **Price:** Quote — per user/yr (quote-only; Mobile Standard / Advanced editions, managed in Sophos Central)
- **Details:** https://www.thetechbag.com/sophos/sophos-mobile

### Ivanti Neurons for MDM — Ivanti

- **Who it's for:** Large or regulated mixed fleets that want a cloud MDM, with an on-prem path (EPMM) for air-gapped or government estates.
- **The honest limitation:** No India data region. Its on-prem sibling EPMM has had actively exploited flaws in 2023, 2025 and 2026 — Ivanti patches the cloud service, you patch EPMM.
- **Price:** Quote — per device or per user (quote-only); on-prem Endpoint Manager Mobile (EPMM, formerly MobileIron Core) quoted separately
- **Details:** https://www.thetechbag.com/ivanti/ivanti-neurons-for-mdm

### ManageEngine Mobile Device Manager Plus — ManageEngine

- **Who it's for:** Teams that want MDM only — phones, tablets, Macs and Windows — at a published per-device price, cloud in India or on-prem, without Endpoint Central's patching stack.
- **The honest limitation:** Apple DDM is limited to status reporting — no declarative OS-update enforcement documented; macOS depth trails Jamf.
- **Price:** $645 — per 50 devices/yr (Cloud Standard, ≈$1.08/device/mo; Professional $1,195; free ≤25 devices)
- **Details:** https://www.thetechbag.com/manageengine/manageengine-mobile-device-manager-plus

### Addigy MDM — Addigy

- **Who it's for:** MSPs running Apple fleets for many clients, and lean Apple-heavy IT teams that want live, agent-backed control rather than check-in polling.
- **The honest limitation:** Apple-only (no Windows or Android MDM) and cloud-only, with no India or selectable data region documented; only the Mac price is published, so iPhone and iPad seats are a quoted add-on.
- **Price:** $8.25 — per Mac/mo (starting figure in Addigy's pricing FAQ; iPhone, iPad and Apple TV a separate unpublished add-on rate; MSP rates quoted; 14-day trial)
- **Details:** https://www.thetechbag.com/addigy/addigy-mdm

### Iru Endpoint Management (formerly Kandji) — Iru

- **Who it's for:** Apple-first fleets that want Jamf-grade Mac and iPhone automation, and now need a few Windows laptops and company Android phones in the same console.
- **The honest limitation:** Android is company-owned work profile only (no fully managed, dedicated/kiosk or personal-BYOD mode) and Windows needs Windows 11 24H2 or later; tenants sit in the US or EU, with no India region.
- **Price:** Quote — per device by platform (macOS / mobile / Windows / Android), annual; EDR and Vulnerability Management licensed per device on top; 14-day trial
- **Details:** https://www.thetechbag.com/iru/iru-endpoint-management

### Mosyle Business — Mosyle

- **Who it's for:** Small and mid-size Apple fleets that want Apple Business Manager zero-touch MDM free up to 30 devices, or for $1 a device after that.
- **The honest limitation:** Apple-only, and PREMIUM is MDM alone: security, DNS filtering, Mac sign-on, the macOS App Catalog and watchOS are Fuse-only; data is stored in the US (Azure).
- **Price:** $1 — per device/mo (PREMIUM, billed annually, 30-licence minimum; free up to 30 devices)
- **Details:** https://www.thetechbag.com/mosyle/mosyle-business

### Mosyle Fuse — Mosyle

- **Who it's for:** Mac-heavy companies that want MDM, Mac antivirus, DNS filtering and Mac sign-on in one Apple-only licence at a published price.
- **The honest limitation:** Apple-only, with no Windows or Android at all; customer data is stored only in the US on Azure (no India or EU region), and the antivirus and sign-on layers are macOS-only.
- **Price:** $3 — per Mac/mo ($1.50 per iPhone, iPad or Vision Pro), billed annually, 30-licence minimum
- **Details:** https://www.thetechbag.com/mosyle/mosyle-fuse

### Mosyle Manager — Mosyle

- **Who it's for:** Schools running iPads and Macs through Apple School Manager on a tight budget.
- **The honest limitation:** Education-only and Apple-only; security and web filtering need OneK12, and data is stored in the US.
- **Price:** $0.46 — per device/mo ($5.50 per device a year PREMIUM, 30-licence minimum; OneK12 with security and filtering $9 a year)
- **Details:** https://www.thetechbag.com/mosyle/mosyle-manager

### Esper Deploy — Esper

- **Who it's for:** Dedicated-device fleets (POS, kiosks, signage, payment and rugged Android, including non-GMS AOSP hardware) run by teams that want staged, code-driven rollouts.
- **The honest limitation:** Built for company-owned dedicated devices: no macOS, no Android work profile or Apple User Enrollment, Windows is agent-enrolled with no documented Autopilot, and data is hosted in North America; remote control and the API start at Bridge, Pipelines at Architect.
- **Price:** $2 — per device/mo (Genesis; Bridge $4, Architect $6, Enterprise quoted; 25-device contract minimum; 30-day trial)
- **Details:** https://www.thetechbag.com/esper/esper-deploy

### SOTI MobiControl — SOTI

- **Who it's for:** Large rugged and frontline fleets (Zebra, Honeywell and Samsung scanners, handhelds and shared phones in logistics, retail and field service) that also need Windows, Apple and printers under one vendor, in the cloud or on their own servers.
- **The honest limitation:** Enterprise-weight and quote-only on its own, subscription-only since perpetual licences ended in 2024; no documented India cloud region, so in-country data means running it on-prem.
- **Price:** Quote — per device, quote-only on its own, cloud or on-prem; the SOTI ONE bundle (MobiControl + XSight + Snap + Premium or Enterprise Service) lists at $119.88 a device a year on AWS Marketplace; 30-day trial
- **Details:** https://www.thetechbag.com/soti/soti-mobicontrol

### BlackBerry UEM — BlackBerry

- **Who it's for:** Government, defence and regulated enterprises that must run device management on their own servers, including air-gapped, with certified, containerised protection for work data.
- **The honest limitation:** Built for high-assurance security, not Mac depth or price: macOS ADE enrolment, FileVault and PKG deployment only arrived in 2026 (UEM 12.24), Apple User Enrollment is unsupported from iOS 18, pricing is quote-only and there is no India data region.
- **Price:** Quote — per user or per device subscription (quote-only; on-premises, air-gapped or UEM Cloud; the Dynamics container and services such as 2FA licensed on top)
- **Details:** https://www.thetechbag.com/blackberry/blackberry-uem

### FileWave — FileWave

- **Who it's for:** Mixed Mac and Windows estates, schools among them, that want one console for computers and mobiles on a server they run or in FileWave's hosting, including an AWS India region.
- **The honest limitation:** Quote-only; ChromeOS is inventory and reporting on top of Google Admin Console rather than full management, and Android runs on Google's management API with its 500-device default quota and no Samsung Knox or Zebra extensions documented.
- **Price:** Quote — per device, annual and quote-only (computer, mobile and Chromebook licences); FileWave-hosted adds a yearly per-device hosting charge and a one-time migration fee; self-hosting also available; 30-day trial
- **Details:** https://www.thetechbag.com/filewave/filewave-uem

### Matrix42 Unified Endpoint Management — Matrix42

- **Who it's for:** Windows-heavy estates that want PC imaging, software distribution, patching and phone management in one console that also runs their service desk, on their own servers if data has to stay in-house.
- **The honest limitation:** No Apple Declarative Device Management (OS updates still go out as legacy MDM commands), no Android Enterprise Recommended listing, quote-only pricing, and no India office, partner or data region.
- **Price:** Quote — quote-only; one UEM licence covering Empirum client management, Silverback MDM and Intune co-management, with Patch Management and Package Cloud as add-ons; cloud, on-prem or hybrid; 30-day trial
- **Details:** https://www.thetechbag.com/matrix42/matrix42-unified-endpoint-management

### IBM MaaS360 — IBM

- **Who it's for:** Mixed iOS, Android, Windows and macOS fleets that want UEM with containerised mail and documents, mobile threat defence and AI policy advice in one SaaS console.
- **The honest limitation:** Containerised email, content, gateway and threat defence sit in the $5.30–$9.54 tiers, not Essentials; Apple DDM support is partial; no India-hosted tenant is documented.
- **Price:** $4.24 — per device / month list for Essentials (Fast Start MDM-only $1.50; Deluxe $5.30, Premier $6.63, Enterprise $9.54); 30-day free trial
- **Details:** https://www.thetechbag.com/ibm/ibm-maas360

### Citrix Endpoint Management — Citrix

- **Who it's for:** Citrix DaaS estates in regulated sectors that want MDM/MAM with 300+ security policies and micro-VPN-wrapped apps from the same vendor and console as their virtual desktops, on Citrix's cloud or their own servers.
- **The honest limitation:** Only comes as part of a Citrix platform subscription, so it rarely makes sense without Citrix DaaS. Apple Declarative Device Management covers a handful of policies and parts are Technical Preview, Android Device Administrator mode is deprecated (26.8.0, Sep 2026), and Citrix's cloud service locations stop at SE Asia and Sydney, with no India region.
- **Price:** Quote — not sold on its own: included in Citrix Universal Hybrid Multi-Cloud (one managed user per UHMC licence) and unlimited in the Citrix Platform licence, per user, quoted; cloud service or on-premises (formerly XenMobile Server)
- **Details:** https://www.thetechbag.com/citrix/citrix-endpoint-management

### Omnissa Workspace ONE UEM — Omnissa

- **Who it's for:** Large mixed fleets that want phones, Windows and Mac laptops, Windows Server, rugged Android and Linux in one cloud console, with low-code automation and published list prices, from VMware’s former end-user unit, now Omnissa.
- **The honest limitation:** The Essentials tiers manage devices only: DEX and risk analytics start at Enterprise, Assist remote support is in Platinum or extra, and Lookout-powered Mobile Threat Defense is in no edition. Prices are USD on 12 months prepaid, and India residency is not committed in writing.
- **Price:** $3 — per device / month list for Mobile Essentials, 12 months prepaid with support (Employee Essentials, no device management, $1.67; Desktop Essentials $4.00; UEM Essentials $5.25; Enterprise $10.00; Platinum $15.63; per-user licences, up to 5 devices, from $3.00); an ‘India’ UEM instance is on Omnissa’s status page, but no residency commitment is published
- **Details:** https://www.thetechbag.com/omnissa/omnissa-workspace-one-uem

### JumpCloud Device Management — JumpCloud

- **Who it's for:** Cloud-first teams with Mac, Windows and Linux laptops plus phones who want device policy tied to the same user record as their directory, SSO and MFA.
- **The honest limitation:** Windows Autopilot is not documented (Windows enrolment is agent-led), Android depth sits below the specialists, and the Mumbai region (Apr 2026) is for new tenants only, with logs and telemetry possibly processed outside India.
- **Price:** $5 — per USER/mo à la carte, billed annually ($6 monthly); Device Management package (adds patching, App Catalog, Remote Access) $9 / $11; priced per user, not per device; 30-day trial, no free tier for new accounts
- **Details:** https://www.thetechbag.com/jumpcloud/jumpcloud-device-management

## Why each constraint rules out what it does

**India data residency.** Rules out Jamf Pro, Jamf Now, Jamf School, Hexnode UEM, NinjaOne MDM, LogMeIn Miradore (GoTo), OpenText ZENworks, Sophos Mobile, Ivanti Neurons for MDM, Addigy MDM, Iru Endpoint Management (formerly Kandji), Mosyle Business, Mosyle Fuse, Mosyle Manager, Esper Deploy, SOTI MobiControl, BlackBerry UEM, Matrix42 Unified Endpoint Management, IBM MaaS360, Citrix Endpoint Management and Omnissa Workspace ONE UEM — no India data residency; miniOrange UEM — India HQ, but data residency unconfirmed. That leaves Microsoft Intune, Scalefusion UEM, 42Gears SureMDM, ManageEngine Endpoint Central, Seqrite mSuite, ManageEngine Mobile Device Manager Plus, FileWave and JumpCloud Device Management.

**Mostly Apple.** Rules out Jamf Now, miniOrange UEM, Seqrite mSuite and Esper Deploy — Apple management too shallow for an Apple-heavy fleet. That leaves Jamf Pro, Jamf School, Microsoft Intune, Scalefusion UEM, Hexnode UEM, 42Gears SureMDM, ManageEngine Endpoint Central, NinjaOne MDM, LogMeIn Miradore (GoTo), OpenText ZENworks, Sophos Mobile, Ivanti Neurons for MDM, ManageEngine Mobile Device Manager Plus, Addigy MDM, Iru Endpoint Management (formerly Kandji), Mosyle Business, Mosyle Fuse, Mosyle Manager, SOTI MobiControl, BlackBerry UEM, FileWave, Matrix42 Unified Endpoint Management, IBM MaaS360, Citrix Endpoint Management, Omnissa Workspace ONE UEM and JumpCloud Device Management.

**Mostly Android.** Rules out Jamf Pro, Jamf Now, Jamf School, Addigy MDM, Mosyle Business, Mosyle Fuse and Mosyle Manager — no Android management; Iru Endpoint Management (formerly Kandji) — limited Android Enterprise depth. That leaves Microsoft Intune, Scalefusion UEM, Hexnode UEM, 42Gears SureMDM, ManageEngine Endpoint Central, miniOrange UEM, Seqrite mSuite, NinjaOne MDM, LogMeIn Miradore (GoTo), OpenText ZENworks, Sophos Mobile, Ivanti Neurons for MDM, ManageEngine Mobile Device Manager Plus, Esper Deploy, SOTI MobiControl, BlackBerry UEM, FileWave, Matrix42 Unified Endpoint Management, IBM MaaS360, Citrix Endpoint Management, Omnissa Workspace ONE UEM and JumpCloud Device Management.

**Windows in the fleet.** Rules out Jamf Pro, Jamf Now, Jamf School, Addigy MDM, Mosyle Business, Mosyle Fuse and Mosyle Manager — Apple-only; Seqrite mSuite, NinjaOne MDM, Sophos Mobile and Esper Deploy — mobile-only, no desktop. That leaves Microsoft Intune, Scalefusion UEM, Hexnode UEM, 42Gears SureMDM, ManageEngine Endpoint Central, miniOrange UEM, LogMeIn Miradore (GoTo), OpenText ZENworks, Ivanti Neurons for MDM, ManageEngine Mobile Device Manager Plus, Iru Endpoint Management (formerly Kandji), SOTI MobiControl, BlackBerry UEM, FileWave, Matrix42 Unified Endpoint Management, IBM MaaS360, Citrix Endpoint Management, Omnissa Workspace ONE UEM and JumpCloud Device Management.

**A genuinely mixed fleet.** Rules out Jamf Pro, Jamf Now, Jamf School, Addigy MDM, Mosyle Business, Mosyle Fuse and Mosyle Manager — Apple only; Seqrite mSuite, NinjaOne MDM, Sophos Mobile and Esper Deploy — mobile only, no desktop. That leaves Microsoft Intune, Scalefusion UEM, Hexnode UEM, 42Gears SureMDM, ManageEngine Endpoint Central, miniOrange UEM, LogMeIn Miradore (GoTo), OpenText ZENworks, Ivanti Neurons for MDM, ManageEngine Mobile Device Manager Plus, Iru Endpoint Management (formerly Kandji), SOTI MobiControl, BlackBerry UEM, FileWave, Matrix42 Unified Endpoint Management, IBM MaaS360, Citrix Endpoint Management, Omnissa Workspace ONE UEM and JumpCloud Device Management.

**Kiosk and dedicated devices.** Rules out Jamf Pro, Jamf Now, Jamf School, Addigy MDM, Mosyle Business, Mosyle Fuse and Mosyle Manager — Apple-only, no Android dedicated (COSU) devices; OpenText ZENworks and Iru Endpoint Management (formerly Kandji) — no kiosk / dedicated mode. That leaves Microsoft Intune, Scalefusion UEM, Hexnode UEM, 42Gears SureMDM, ManageEngine Endpoint Central, miniOrange UEM, Seqrite mSuite, NinjaOne MDM, LogMeIn Miradore (GoTo), Sophos Mobile, Ivanti Neurons for MDM, ManageEngine Mobile Device Manager Plus, Esper Deploy, SOTI MobiControl, BlackBerry UEM, FileWave, Matrix42 Unified Endpoint Management, IBM MaaS360, Citrix Endpoint Management, Omnissa Workspace ONE UEM and JumpCloud Device Management.

**Fleets of 10–200 devices.** Rules nothing out on published terms.

**Fleets of 200–2,000 devices.** Rules out Jamf Now — built for small shops (Jamf positions it for teams up to ~50 devices). That leaves Jamf Pro, Jamf School, Microsoft Intune, Scalefusion UEM, Hexnode UEM, 42Gears SureMDM, ManageEngine Endpoint Central, miniOrange UEM, Seqrite mSuite, NinjaOne MDM, LogMeIn Miradore (GoTo), OpenText ZENworks, Sophos Mobile, Ivanti Neurons for MDM, ManageEngine Mobile Device Manager Plus, Addigy MDM, Iru Endpoint Management (formerly Kandji), Mosyle Business, Mosyle Fuse, Mosyle Manager, Esper Deploy, SOTI MobiControl, BlackBerry UEM, FileWave, Matrix42 Unified Endpoint Management, IBM MaaS360, Citrix Endpoint Management, Omnissa Workspace ONE UEM and JumpCloud Device Management.

**Fleets above 2,000 devices.** Rules out Jamf Now — built for small shops (Jamf positions it for teams up to ~50 devices). That leaves Jamf Pro, Jamf School, Microsoft Intune, Scalefusion UEM, Hexnode UEM, 42Gears SureMDM, ManageEngine Endpoint Central, miniOrange UEM, Seqrite mSuite, NinjaOne MDM, LogMeIn Miradore (GoTo), OpenText ZENworks, Sophos Mobile, Ivanti Neurons for MDM, ManageEngine Mobile Device Manager Plus, Addigy MDM, Iru Endpoint Management (formerly Kandji), Mosyle Business, Mosyle Fuse, Mosyle Manager, Esper Deploy, SOTI MobiControl, BlackBerry UEM, FileWave, Matrix42 Unified Endpoint Management, IBM MaaS360, Citrix Endpoint Management, Omnissa Workspace ONE UEM and JumpCloud Device Management.

**Corporate-owned, fully managed.** Rules nothing out. Every product here enrols corporate-owned devices in a fully managed state — Android device owner and/or Apple supervised via Automated Device Enrolment — so there is no eliminating power and no chip.

**BYOD, personal devices.** Rules nothing out on verified documentation. Every Android-capable product supports the work profile, and Jamf Pro and Jamf School document Apple User Enrolment. Jamf Now's User Enrolment support is not documented either way, so it is not ruled out.

**Mixed corporate and BYOD.** Rules nothing out: the same consoles run fully managed and work-profile or User Enrolment devices side by side.

**Small-estate fit, beyond the published minimums.** The published floors are low — Hexnode 15 devices, Scalefusion 10, 42Gears none, ManageEngine free to 25 — so at 10–200 only Jamf Pro's 25-device minimum bites, and NinjaOne's platform is simply dearest per device at 50 or fewer endpoints — both only at the bottom of the band. Where enterprise-tier pricing makes a product a poor fit for a small estate is delivery-team judgement: [TechBag to confirm].

**Above 2,000 devices — what is and isn't proven.** Seqrite mSuite is proven at volume (Fino Payments Bank: 410 branches, 25,000+ banking points) and NinjaOne's platform runs estates of 100,000+ endpoints. miniOrange UEM and LogMeIn Miradore are marked unverified rather than ruled out: vendor claims of scale, no documented deployment at that volume. The tool stamps them, it does not eliminate them.

## Your situation

### All-Apple, 200–2,000 devices, dedicated IT

**Shortlist:** Jamf Pro, Microsoft Intune, Scalefusion UEM

**Why:** Apple depth (DDM, FileVault escrow, patch, scripting) is the deciding variable; Jamf Pro is the benchmark.

**Trade-off:** Jamf is Apple-only and priced for it; if you also run Windows, Intune consolidates at the cost of some Mac depth.

### Android field devices — retail, delivery, manufacturing, rugged

**Shortlist:** Scalefusion UEM, 42Gears SureMDM, Hexnode UEM

**Why:** Dedicated/COSU kiosk mode + rugged-OEM support + zero-touch are what matter; the India-built vendors lead here.

**Trade-off:** 42Gears/Scalefusion go deep on rugged/kiosk; if the fleet is also Apple-heavy, weigh macOS depth separately.

### Mixed Windows + Apple + Android, existing Microsoft commitment

**Shortlist:** Microsoft Intune, Scalefusion UEM, Hexnode UEM

**Why:** If you hold M365 E3/E5/Business Premium, Intune is likely already paid for — marginal cost near zero.

**Trade-off:** Intune's macOS is good-not-Jamf; if Macs are your crown jewels, pair Intune (Win) with Jamf (Mac) or go Scalefusion.

### BYOD-heavy, employees resist agents on personal phones

**Shortlist:** Microsoft Intune, Scalefusion UEM, Hexnode UEM

**Why:** Android work profile + Apple User Enrollment keep the personal side cryptographically untouched — no full device control.

**Trade-off:** MAM-without-enrollment protects apps only; if you need device compliance too, you need enrollment consent.

### Kiosk / dedicated — signage, POS, self-service

**Shortlist:** 42Gears SureMDM, Scalefusion UEM, Hexnode UEM

**Why:** COSU/dedicated lock-down and single-app mode are the whole job; the rugged/kiosk specialists win.

**Trade-off:** Exiting Android dedicated/fully-managed requires a factory reset — plan provisioning accordingly (see enrollment).

### Regulated sector, data residency or on-prem required

**Shortlist:** 42Gears SureMDM, ManageEngine Endpoint Central, Scalefusion UEM

**Why:** Verified India data region and/or on-prem is the gating requirement before any feature comparison.

**Trade-off:** India-built vendors satisfy residency; confirm each vendor's exact hosting region and on-prem terms at quote.

### Small team, no dedicated IT

**Shortlist:** LogMeIn Miradore (GoTo), ManageEngine Endpoint Central, Jamf Now

**Why:** A genuine free/low tier and simplicity matter more than depth: Miradore (≤50 free), ManageEngine (≤25 free), Jamf Now (≤3 free, Apple).

**Trade-off:** Free tiers are capped and shallow; you'll outgrow them — but they prove the fit before you spend.

### Devices already bought retail — the recovery path

**Shortlist:** Microsoft Intune, Scalefusion UEM, Hexnode UEM

**Why:** Zero-touch/ADE only works for devices bought through an approved channel. Retail units can't be zero-touch enrolled without a wipe.

**Trade-off:** Any UEM can still MANAGE them — you just lose zero-touch. Manual enrollment (or a wipe-and-reprovision) is the recovery path.

---

*Vendor-neutral. Nothing gated. https://www.thetechbag.com/browse/endpoint-management/uem-mdm*