Banyan Security

The Banyan Security App enables you to securely access your corporate applications from any network, using any device, without a VPN.

Please note that the Banyan Security App is not a VPN Client that intercepts your network traffic nor an MDM Client that manages your device settings.

Instead, the Banyan Secure Remote Access App provides the following features:

- Device Registration - a lightweight yet secure way to register your device with your corporate IT team
- Device TrustScore - collect essential device information to ensure a healthy device posture
- Services List - list the corporate applications you can access

The Banyan Secure Remote Access App is built following these core product philosophy elements that emphasize data privacy and security:

- Read Only - only reports on device status and does not change any device settings
- User Visible - runs as a regular non-privileged application with a user interface
- Low Overhead - does not continuously monitor or silently analyze behavior on the device and so has essentially no impact on device performance.
- Report When Needed - only collects essential device information from the device and reports at relatively low frequency.

1. What is the main purpose of using VPN in the app?
The app provides secure access to enterprise resources using a Zero Trust Network Access (ZTNA) model.
It establishes a secure, encrypted tunnel (based on the WireGuard protocol) between the user’s device and the organization’s infrastructure. This tunnel is used to:
Enforce administrator-defined access policies
Protect network traffic when accessing internal services
Ensure only authenticated and authorized users can reach protected resources
The VPN functionality is not a general-purpose consumer VPN, but is limited to accessing specific enterprise services configured by the organization’s administrator.

2. What user information is the app collecting using VPN?
The VPN tunnel itself is not used to collect or sell user data. However, like any enterprise VPN or secure access solution, the system processes minimal operational metadata required to establish and maintain the connection, such as:
Device and session identifiers
Connection timestamps
Assigned IP address within the private network
Authentication status (e.g., token/session validation)
This information is not used for tracking, profiling, or advertis