Today, Google is highlighting the enterprise functionality that it’s added to Android 8.0 Oreo.

“Android 8.0 Oreo is now available, bringing a sweet combination of improved productivity and enhanced security to enterprise customers,” a post to the Google Android Enterprise blog reads. “The new release builds on the consistent investments we’ve made to make Android stronger, easier to manage, and more productive for the enterprise.”

Here’s what’s new in Android for the enterprise.

Work profiles. This feature separates users’ work and personal data on the device so that IT can implement the security it needs on work data, but users can continue to use the apps and services they want. New to Oreo, work profiles are now available on corporate-owned devices.

Zero-touch enrollment. Now, enterprises can deploy corporate-owned Android devices with preconfigured management settings so that employees can begin using them right out of the box. Devices are configured online and drop-shipped to employees.

Project Treble. This security solution separates the core of Android from customized hardware maker bits, providing for improved sandboxing that makes it harder for hackers to exploit the kernel.

Google Play Protect. This security service is always-on, and scans for malware and blocks potentially-harmful apps. In Oreo, Google Play Protect can be managed by IT, so they can block unknown or risky apps across the whole device or just within work profiles.

Secure password reset. In Oreo, it’s easier for admins to help users securely recover from forgotten passwords on encrypted devices.

Improved user notification. So employees can see what their IT admins are doing on their devices, Oreo will provide more transparency for management actions (app installs, enforcement changes) via notifications.

You can find out more on the Android Enterprise website.