Compliance policies can be setup as part of enrollment to ensure corporate data is accessed on a trusted and compliant device. Compliance policies can be require passcode on device, prevent jailibroked or rooted device from enrollment, etc.