What remote wipe means
Remote wipe tells a managed app to delete corporate local storage. It is not a way to erase every copy on a device.
The server closes access first
The device and related sessions are revoked in PostgreSQL, security epoch changes, and active WebSocket connections close. Redis only accelerates event delivery.
The command remains available during the next bootstrap, so an offline device learns about it when connectivity returns.
The client erases before showing cache
On startup, an official client keeps encrypted storage closed, compares device state and epochs, then removes its database, files, thumbnails, credentials, and local keys.
After wipe, the interface opens signed out. Acknowledgment proves execution on that client, not across the whole device.
What wipe cannot do
An app cannot delete a screenshot, photograph, manual export, or file copied into a third-party system.
If a device never comes online again, server-side revocation still blocks future access, but no local erasure acknowledgment exists.
This guide explains verifiable product principles and is not legal advice.