Secure container for protecting enterprise data on a mobile device

A method of securing enterprise data stored on a mobile device, the method comprising:

• receiving, by the mobile device, enterprise data from an enterprise resource;
• storing the enterprise data in a secure document container of the mobile device such that the enterprise data is logically separated from non-enterprise data, the secure document container comprising computer-readable storage, said storing occurring automatically under control of an enterprise agent running on the mobile device;
• and
• selectively controlling access to the enterprise data stored in the secure document container of the mobile device in accordance with one or more document access policies, the one or more document access policies defining conditions for accessing the enterprise data, wherein access to the non-enterprise data is independent of the one or more document access policies.

A non-transitory storage medium comprising instructions stored thereon executable by a mobile device to perform a process, the process comprising:

• creating, within a portion of a memory of the mobile device, a secure document container for storing enterprise data, said secure document container separate from a storage space used to store non-enterprise data;
• storing enterprise data received from an enterprise computing system in the secure document container of the mobile device;
• and
• restricting access to the enterprise data stored in the secure document container based on one or more rules defining conditions for allowing access to the enterprise data stored in the secure document container, wherein access to the non-enterprise data stored on the mobile device is independent of the one or more rules.