Work profile screen captures saved to personal storage

Environment

• Android Enterprise
• Work Profile on Company-Owned Device
• Knox SDK

Overview

When devices operate in split-screen (multi-window) mode, screen captures or recordings of work profile apps can be saved to personal profile storage. This exposes corporate data to the personal side of the device.

Cause

This issue stems from Android’s default screen capture behavior, where the foreground app determines the location of where recordings are stored, rather than the app being captured.

As such, when a device is in split-screen mode with both work and personal apps visible, the system stores captured media in the profile in focus at the time of capture. For example, if focus is on a personal app while a work app is being recorded, the system saves the work profile content to personal profile storage.

Workaround

To prevent data leakage, you can disable split-screen mode using the Knox KioskMode API allowMultiWindowMode(false) method.

This device-wide restriction applies to both work and personal profiles, preventing all apps from using multi-window mode.