1. Non-transitory computer storage storing an executable component that is configured to provide functionality for selectively protecting attachment data addressed to a mobile device, said executable component comprising instructions that direct one or more computing device to a process that comprises: receiving, from an enterprise resource, an attachment to a message, the message addressed to a mobile device; determining whether to encrypt the attachment based on one or more configurable access policies of an enterprise; and when a determination is made to encrypt the attachment, encrypting the attachment; and causing transmission of the encrypted attachment to the mobile device in place of the attachment, the mobile device configured to detect that the encrypted attachment is encrypted and to decrypt the encrypted attachment.