Decryption (an encrypted app can't run, it has to be decrypted first - so does encrypted data) takes time. The better the encryption, the more time it takes. If it were me, I wouldn't bother. If I can't get to my corporate stuff in the time they like, let them buy me a phone that they can encrypt that I can use for corporate stuff, but let me keep my unencrypted phone for my private use. (That's why a phone with multiple boot is a good idea - boot the corporate OS and it's encrypted, boot your private OS and it's not. It can be the same version of Android, set up the same way. SafeStrap, written for all Android phones, would be the ideal "corporate safety net".)