Editor’s note: Today’s post is by Manuel Cerrillo Bermejo, global workplace architect for mobile solutions at BBVA, a multinational bank with over 5,700 branches and offices in 25 countries. BBVA is using Android Enterprise to unify deployment and management of its global fleet of over 100,000 mobile devices.

At BBVA, our workforce IT operations face complex challenges — but that often leads to exciting problem-solving opportunities. As a global bank with more than 120,000 employees across Europe, Asia and the Americas, we push ourselves to develop new solutions for managing business data securely across varying international regulations, streamline the development of numerous in-house applications, and ensure seamless deployment to our extensive network of branch kiosk devices.

With our operational landscape, we’re always looking for ways to simplify, standardize and secure our mobile fleet. Android Enterprise has helped us accelerate the growth of our global mobile device management (MDM) program, which allows more than 100,000 Android devices to be managed centrally, while keeping our teams productive — and with the always-on security needed for the financial industry.

Standard security and AI policies across all teams, in all countries

Before Android Enterprise, our global mobile solutions were composed of fragmented systems across different countries. Regional discrepancies strained IT resources by requiring staff on site to troubleshoot. Building a truly global system was impossible without centralized visibility, making device setup and security a constant challenge. We were unable to balance strong security with a great employee experience.

In Android Enterprise, we found a business partner that helps keep BBVA secure — a critical goal for any financial institution. Features like zero-touch enrollment and Work Profile created a digital shield for us and our global teams, while helping us streamline our operations and give our teams the modern tools they needed. Now, our workforce is ready for the next era of work productivity powered by AI. Since mobile devices are where our teams will naturally use AI to boost productivity, we're using Android Enterprise’s AI experience controls to safely integrate Gemini with Google Workspace and manage AI functionality based on regional compliance and data governance requirements.

Android Enterprise’s generative AI controls ensure the secure use of AI experiences at work by providing granular management over various AI experiences. Admins can also block or uninstall generative AI apps and use Managed Google Play to define which applications can be installed. For web-based AI experiences, URL filtering policies can regulate access across managed devices. With these comprehensive controls, BBVA can manage access points, deliver a helpful employee experience and establish strong protections for business data in the age of AI.

One device, two profiles and zero compromise on experience

Balancing robust security with a modern employee experience presents a common dilemma. While aiming for ease of use, organizations must contend with risks, like employees downloading unsafe applications or sharing company data inappropriately. The impracticality of separate devices for business and personal use further exacerbates this issue. Fortunately, Android Enterprise offers Work Profile for a lasting solution.

Employees can easily switch between their personal and Work Profile, ensuring personal and business data remain separated.. All work-related applications are accessible through our private, curated Managed Google Play store, ensuring that only authorized apps are available for download. We further enhance security by using Google Play Protect to verify our in-house apps and provide valuable security feedback to our developers, all without compromising the smooth employee experience we've built.

Effortless scale for 100,000 devices and beyond

We not only manage 100,000 devices across every country with a single foundational management solution — but also make it look easy. When we purchase devices, they’re automatically registered in the BBVA system. Users set up their devices, and they’re directly enrolled without any action from our IT team. Whether we’re replacing lost devices, setting up new offices or expanding into new regions, Android Enterprise’s zero-touch enrollment has eliminated about 70% of the time we used to spend on device provisioning.

Every moment counts as we accelerate BBVA's evolution, building next-generation global tools for seamless operation across every region. Android Enterprise is no longer just a component — it's the engine driving our mobility future. We invite other financial institutions to connect with the Android partner ecosystem to unlock new business opportunities.