Android compliance
Create OS version and days-inactive rules for Android devices. The first time a device fails, the console can lock or wipe it.
Settings → Android → Compliance → New policy. Rules are Minimum OS version (default 14) and Inactive days. There is no passcode rule — passcode stays on the Android policy.
Remediation is lock or wipe. Wipe runs only when a device first becomes non-compliant, and only on assigned Android devices. Apple compliance policies do not score Android devices.
Assign Entire customer, one device, or a group. The device list shows Android devices only. A mixed group can still be assigned; only its Android members are scored.

The policy match line on a device page is Google's policy compliant signal. It is separate from a policy you create here.