Intune Company Portal Security & Privacy Scorecard

What This Means for You

Device usage and app activity is reported to the employer through Microsoft telemetry services. Microsoft collects diagnostic and usage data via ARIA Telemetry, and Firebase handles push notifications from the organization. The employer can enforce security policies on the device through this app.

Recommendation: Trustworthy

Best For: Employees accessing work resources on personal devices

Key Findings

Data Security - 0 findings

Network Security - 0 findings

Code Safety - 0 findings

Privacy - 0 findings

Privacy Concerns

What Data is Collected

The app collects device information, app activity, and diagnostic data on behalf of the organization. This information supports mobile device management and is used to enforce the employer's security policies and troubleshoot device issues.

Third-Party Data Sharing

Diagnostic and usage data is shared with Microsoft ARIA Telemetry for service monitoring. Firebase Messaging and Firebase Remote Config receive data to deliver organizational notifications and configuration updates. Google Play Services and Samsung Knox SDK receive device-level signals to support security enforcement. YubiKit is present for hardware security key support, and OkHttp and BouncyCastle handle secure network communication on the device.

Understanding the Scores

• Security: 88/100
• Privacy: 100/100
• Data Security: 100/100
• Network Security: 100/100
• Code Safety: 82/100
• Data Collection: 100/100
• Data Sharing: 100/100
• User Control: 100/100

Positive Security Features

• Network communications between the device and the organization's systems are handled with strong protective practices.
• Data storage and handling practices meet high standards for enterprise mobile management.
• Data collection and sharing practices are consistent with what an employer-managed app is expected to do, with no unexpected third-party advertising or behavioral profiling observed.

Areas for Improvement

• Code safety scored below the top tier, suggesting certain coding practices could be hardened in future releases to further reduce risk to user devices.
• Diagnostic data collection is automatic and required by the device management function, meaning users cannot opt out while the app is active on the device.
• The number of integrated third-party services adds complexity to the data flow between the device and external systems, which is worth being aware of for employees using a personal device.

About This Analysis

This scorecard is based on automated static analysis of the app's code and behavior patterns. Scores reflect security and privacy practices observed at the time of the scan and may change as the app is updated.

App Details

• Package: com.microsoft.windowsintune.companyportal
• Version: 5.0.6923.0
• Scan Date: March 27, 2026