Skip to content
Back to Blog
apple mdm security||9 min read

iOS 27 and the iPhone 18 Pro: what changes for UK businesses

iOS 27 lands on 14 September with no iPhones dropped, a backup restore that no longer carries MDM across, and Siri AI in the UK but not the EU. What to do before Monday.

Dustin Rhodes
Dustin Rhodes

Stabilise

Apple's Surprise and Shine event artwork: a glowing Apple logo on a blue background above the words Surprise and shine

Apple announced the iPhone 18 Pro, iPhone 18 Pro Max and the folding iPhone Duo last night, and confirmed iOS 27 arrives as a free update on Monday 14 September. If you run iPhones in a business, the software is the bigger story. iOS 27 drops no iPhone models, so nobody falls off a support cliff. But three things change under the hood. Restoring a backup no longer carries MDM enrolment across, so a phone refresh done the usual way produces unmanaged phones. The old MDM software update commands stop working, so update control has to run through Declarative Device Management. And Siri AI arrives in the UK on day one with usage limits and a paid tier to follow, while the EU gets nothing. Decide your AI position before Monday, check your MDM is ready, and pilot the new phones before you order a fleet of them.

That is the summary. The rest is the reasoning, with Apple's own wording where it matters.

When does iOS 27 arrive, and does any iPhone get left behind?

Monday 14 September. Apple's press release says it plainly: "iOS 27 will be available as a free software update on Monday, September 14." iPadOS 27 ships the same day. The new phones go on pre-order this Saturday at 1pm and reach customers on Friday 18 September, so the software lands four days before the hardware does.

Nobody gets left behind this year. iOS 27 runs on the same iPhones as iOS 26: iPhone 11 and later, plus the second-generation SE onwards. That is unusual. Most years a model or two drop off, and last year the XS and XR went. This year the list is unchanged, so a 2019 iPhone 11 gets its seventh major OS.

That does not make old phones a free ride. Apple's deployment guide is candid that only the current release gets full coverage: "not all known security issues are addressed in previous versions". And Cyber Essentials v3.3 wants critical and high-risk fixes applied within 14 days of release, which is a clock that starts on Monday for every phone that touches company data, personal or company-owned. Keeping an iPhone 11 is fine. Keeping an iPhone 11 that nobody can see or update is the problem.

What breaks in iPhone management on iOS 27?

Two things are confirmed by Apple, and one of them bites at exactly the moment you buy new phones.

Restoring a backup no longer restores management. From Apple's deployment guide: "On devices with iOS 27, iPadOS 27, and visionOS 27, devices no longer restore device management information from backup. This includes the enrollment profile, management configuration, and supervision status."

Read that again with a box of iPhone 18 Pros on the desk. The traditional refresh, where someone restores their old phone's backup onto the new one and carries on, now produces a phone with all of their data and none of your controls.

Company-owned phones need to come through Automated Device Enrolment via Apple Business, so management is applied at setup and the data restore happens afterwards. Personal phones on User Enrolment need the user to enrol again. Either way, the procedure wants writing down before the phones arrive, because the person doing the swap on a Friday afternoon will do what they have always done.

The old software update controls stop working. Apple again: "legacy software update management no longer functions in all 27.0 operating systems." That covers the update commands, the queries, the recommended cadence setting, and the deferral and restriction settings. If your MDM is still on those, you lose the ability to hold back or force iOS updates the moment a phone reaches 27.

It is the same break we covered for macOS 27. The replacement is Declarative Device Management, every major MDM supports it, and the settings do not migrate themselves. Someone has to rebuild the update policy on the new side.

Three smaller items worth knowing:

  • Management traffic needs modern TLS. iOS 27 enforces stricter transport security on the system processes that talk to your MDM, with TLS 1.2 as the floor and App Transport Security-compliant cipher suites and certificates. Cloud MDMs will be fine. A self-hosted server or an old proxy in front of one might not be.
  • The AI controls moved. The restrictions keys for Apple Intelligence, Siri and keyboard settings were deprecated in 26.4 and replaced by new declarative settings. If you locked Apple Intelligence down last year with the old keys, check your MDM has moved to the new ones. More on why that matters next.
  • Some useful additions. Remote log collection on supervised devices for AppleCare cases, an automatic retry when Return to Service enrolment fails, and device language and region set from the enrolment profile. None of these need action. They just make the job easier.

Vendor day-zero statements land on release day, not before. Check Jamf, Intune, Iru or Mosyle on Monday morning before the pilot group updates.

Does the UK get Siri AI, and who pays for it?

Yes, and eventually you might.

The UK gets Siri AI on 14 September. The EU does not. Apple said in June that it "will not be able to ship Siri AI in the European Union with the release of iOS 27 and iPadOS 27", with no timeline, after a dispute with regulators over the Digital Markets Act. That covers the 27 member states, and the UK is not one of them. If you have people in Dublin or Amsterdam and people in London, their phones will behave differently from Monday, and the support tickets will follow.

Siri AI also ships with limits attached. Apple's support page says the server-side features "have usage limits to ensure a high-quality, reliable experience", that limits vary "by feature, request complexity, system demand, system policies, and other factors", and that "Increased access to such features will be available for a fee." No prices and no date. The limited features are Siri AI, the cloud photo editing tools, Image Playground and the cloud models in Shortcuts. On-device features are not capped.

For a business, that means three things.

Your staff start using it on Monday on work mail, notes and messages, unless you decide otherwise. The redesigned Siri reads personal context across apps, which is the whole point of it and also the whole question. Our AI governance post covers the policy side. On iPhone, enforcement is the new Intelligence and Siri settings in your MDM.

A paid tier is coming. When someone hits a daily limit halfway through a task, they will ask to expense the upgrade. There is nothing to buy yet, so the decision can wait, but the question will not.

Your cloud AI stance applies. Apple's Private Cloud Compute is built so Apple cannot see the data, which is a stronger position than most cloud AI. It is still work data leaving the phone, and Apple's own wording is "server-side models". If your data classification says no work data to third-party AI, Siri AI needs the same decision you made about Copilot and ChatGPT.

One more thing on who gets it. Apple Intelligence has required an iPhone 15 Pro or newer since it launched, and nothing announced last night lowers that bar. A fleet of iPhone 13s and 14s upgrades to iOS 27 and gets none of this, which is fine for plenty of businesses. Just expect the "where is the new Siri" tickets.

Which iPhone 18 Pro features matter for work?

Skip the camera. Here is what changes for someone who uses the phone as a tool.

Connectivity. Apple's own C2 modem is in the 18 Pro and the Duo. Apple's claim: "meaningfully faster uploads when compared to C1X while consuming 15 percent less energy". Uploads are the half that matters for field staff sending photos, video and signed paperwork from site. Wi-Fi 7, Bluetooth 6 and Thread come from the N1 chip. UK models skip mmWave 5G, which costs you nothing because no UK network runs it.

Battery. Apple's UK spec sheet quotes typical use of up to 23 hours on the 18 Pro and up to 29 hours on the Pro Max, and a 50 percent charge in around 15 minutes. That is a long shift with margin, without a battery pack. Apple's press release quotes higher video-playback figures than the UK spec sheet does, so if you are comparing models, use the spec sheet.

Durability and ports. IP68 to six metres for 30 minutes. USB-C at USB 3 speeds, 10Gb/s, same as last year. The phone still mirrors to an external display rather than extending to it.

Storage. 256GB is the floor on both models, and 2TB is now available on the smaller Pro as well as the Max.

SIM. The UK iPhone 18 Pro keeps its physical nano-SIM tray alongside eSIM and dual eSIM. US models are eSIM-only. UK models are not, so existing SIMs move across the way they always have. The iPhone Duo is eSIM-only everywhere.

iPhone Duo. A 7.6-inch inner screen, a 5.4-inch outer one, and Split View, which Apple describes as opening "two apps side by side on iPhone for the first time". Pre-orders open 16 October, it ships 23 October, and it launches on iOS 27.1 rather than 27.0.

It is interesting for people who live in email and spreadsheets on the move. It is also a first-generation folding hinge, eSIM-only, on a point-release OS, at £1,999. Buy one or two for the people who will get real use from it and learn from them. Do not spec a fleet around it yet.

UK pricing, SIM-free from Apple:

Model256GB512GB1TB2TB
iPhone 18 Pro£1,199£1,399£1,799£2,399
iPhone 18 Pro Max£1,299£1,499£1,899£2,499
iPhone Duo£1,999£2,199£2,599£3,199

If you would rather not buy outright, Apple Financial Services leases iPhones to UK businesses over 12 to 48 months, minimum order £1,000 excluding VAT, with the equipment returned or bought at fair market value at the end. Apple Trade In for business takes the old phones against the bill. Both are worth knowing before the finance conversation, and neither is a reason to rush.

What should you do before Monday?

In order, because the first two matter most.

  1. Decide the Siri AI position and push it through the new Intelligence and Siri settings in your MDM before the update reaches phones. Doing nothing is a decision, and it is the permissive one.
  2. Confirm your MDM manages iOS updates through Declarative Device Management, then set a deferral for the fleet and a pilot group that updates on Monday.
  3. Write the phone refresh procedure: enrol through Apple Business first, restore data second, never the other way round. Brief whoever hands out phones.
  4. Check the TLS on any self-hosted MDM or proxy against the 1.2 floor and modern cipher suites.
  5. Watch the vendor statements on Monday before the pilot updates, then move the fleet a couple of weeks later once the first point release lands.
  6. Order iPhone 18 Pros for the pilot, not the fleet. Let the software settle and the vendor statements land, then buy. The Duo waits until October and goes to a handful of people.
  7. Check Cyber Essentials scope. Personal iPhones with work email are in. Phones used only for calls, texts and MFA are out. Make sure the in-scope ones are somewhere you can see their OS version.

None of this is dramatic. It is a good release with no support cliff and one genuinely new risk, which is a refresh process that quietly stops doing half its job. Fix the process, make the AI call, and the rest is a normal September.

Frequently asked questions

Does iOS 27 drop support for any iPhones?
No. iOS 27 runs on the same models as iOS 26, which is iPhone 11 and later plus the second-generation iPhone SE and later. Nothing in a typical business fleet falls off a support cliff this year. The catch is features rather than support: Apple Intelligence has needed an iPhone 15 Pro or newer since it launched, so older phones get iOS 27 without Siri AI.
Can we stop staff updating to iOS 27 on Monday?
You can delay it. Declarative Device Management lets you hide a major update from users for up to 90 days after release, and can also set a deadline that forces the update on. What no longer works is the old route. Apple has confirmed the legacy software update commands, queries and deferral restrictions stop functioning entirely on iOS 27, so any deferral you rely on has to be a declarative one. Check that before Monday rather than after.
Can we turn off Siri AI on company iPhones?
Yes, through your MDM. Apple replaced the old restrictions keys for Apple Intelligence, Siri and keyboard settings with new declarative settings in 26.4, and iOS 27 builds on those. Your MDM vendor exposes them under names like Intelligence Settings and Siri Settings. Which individual features can be switched off separately varies, so check the vendor's documentation for the specific ones you care about. Personal phones on User Enrolment only accept a subset of restrictions, so the policy for those is a conversation as much as a setting.
Is a personal iPhone with work email in scope for Cyber Essentials?
Yes. Cyber Essentials v3.3 puts user-owned devices that access organisational data or services in scope, and its default is that any home or remote device used for your business counts. The exception is a phone used only for calls, texts or as a multi-factor authentication app. Once it has work mail, Teams or files on it, the 14-day update rule applies, which means you need a way to know what iOS version it is on.
Are the new iPhones eSIM-only in the UK?
The iPhone 18 Pro and Pro Max are not. UK models keep a physical nano-SIM tray alongside eSIM and dual eSIM, so existing SIMs move across as they always have. The eSIM-only models are the US versions and the iPhone Duo, which has no SIM tray anywhere in the world. All four UK networks support eSIM on business accounts, and an MDM can install eSIMs remotely using the carrier's eSIM server address, so it is a process change rather than a blocker.

A phone refresh is a rollout, and iOS 27 changes how one has to run. We do these for Mac and iPhone fleets with Apple Business, zero-touch enrolment and the data restore in the right order.

See how we run device rollouts
macOS 27 upgrade checklist for UK businesses
Apple Mdm Security|27 August 2026|8 min read

macOS 27 upgrade checklist for UK businesses

macOS 27 drops every Intel Mac, retires the old update controls, and lands mid-September. Here is the checklist to run before your fleet upgrades.

Read article