Sandboxing an app by wrapping its code in a protective layer of code is one approach available through a number of vendors. The sandbox approach essentially limits inbound and outbound communications from the app with certain mobile device interfaces. Sandboxes are capable of encrypting data at rest, performing firewall functions, limiting copy and paste functions, and even geo-fencing a device by shutting off access to the GPS if a certain location boundary is breached. The sandbox also serves as a filter for controlling the type and content of messaging to and from an app. This means that a user or administrator can control an app's access to the address book or stored emails. Thus, an app that was developed by third parties could conceivably be loaded on a device, placed in the sandbox, and used with full knowledge of what level of protection is in place.