This document presents Moses, a policy-based framework designed to enforce software isolation of applications and data on Android smartphones, enabling distinct security profiles that dynamically control access based on context. It addresses security concerns that have hindered the adoption of employee-owned smartphones for corporate use by allowing separation of corporate and personal data within a single device. The proposed system facilitates automatic activation of security profiles and can be integrated into mobile device management solutions.