Company Intranet Portal: Your Internal Digital Hub
The modules that belong in a first release, why SSO alone leaves leavers with access, buy-vs-build trade-offs and a realistic 90-day rollout plan.
A company intranet portal is a private, permission-aware website that pulls announcements, documents and approval workflows into one place. A focused first release takes 10 to 14 weeks. What decides whether it works is content ownership, not the software: on centrally managed intranets employees complete tasks in 78 seconds, versus 123 seconds where content ownership is spread out.
That gap explains why intranet projects should not start with a software shortlist. In most companies information is not missing — it is duplicated, scattered and unowned. The policy lives in a shared drive, the current price list lives in someone's inbox, the holiday request lives in a chat thread, and the approval lives in a manager's memory. This guide covers what belongs in a first release, how identity and permissions actually work, what the law expects when you monitor internal channels, and how to decide between buying a platform and building a light custom portal.
Table of Contents
- What a Company Intranet Portal Actually Does
- The Daily Cost of Scattered Tools
- The Five Modules That Belong in Version One
- Document Management: One Source of Truth
- Requests and Approvals: From Threads to Records
- SSO Is Only Half the Job
- Buy or Build: How to Decide
- What Drives the Budget and the Timeline
- Monitoring, Privacy and the Law
- Why Intranets Go Quiet and How to Fix It
- Four Metrics That Tell You It Works
- A 90-Day Rollout Plan
- Frequently Asked Questions
What a Company Intranet Portal Actually Does
An intranet is everything that lives on your internal network. A company intranet portal is the front door to it: it does not produce much content of its own, it gathers, routes and filters what already exists according to who is looking. In day-to-day conversation people use both words for the same project, so skip the terminology debate and describe the scope as a module list instead.
The problem a company intranet portal solves is simple to state: the same question gets different answers depending on who you ask. Sales quotes a price list from two years ago. A new hire cannot tell which onboarding form is current. Finance asks for the same expense receipt a third time because nobody can find the first one. Each of these looks trivial on its own. Added up, they consume hours every week and generate a steady stream of interruptions.
A company intranet portal does one more thing that rarely appears in feature comparisons: it holds institutional memory. When someone leaves, the process knowledge does not leave with their mailbox. For that reason, treat the portal as step one of any business process automation effort — get information and requests flowing through a single channel first, then talk about automating them.
The Daily Cost of Scattered Tools
Interruption data makes the case better than any vendor deck. Microsoft's Work Trend Index special report, published on 17 June 2025, found that employees using Microsoft 365 are interrupted every two minutes during core work hours by a meeting, email or notification. The report frames that as 275 interruptions a day, a figure based on the top 20% of users by ping volume.
The same report counts 153 Teams messages and 117 emails arriving for the average worker each weekday, says 57% of meetings are ad hoc calls with no calendar invite, and notes that meetings starting after 8pm rose 16% year over year. Nearly half of employees — 48% — describe their work as chaotic and fragmented. The findings combine anonymised Microsoft 365 signals through 15 February 2025 with a survey of 31,000 knowledge workers across 31 markets.
The link to your portal is this: a large share of those interruptions are information requests. "Which version is current?" "Where is the expense form?" "Who signs this off?" Every one of them breaks someone else's focus. When the answer is findable in one place, most of those questions never reach a colleague at all. That is where the productivity effect of a company intranet portal comes from — not from adding a channel, but from taking load off the channels you already have.
You can size the cost in your own company in a week. Ask team leads to tally the "where is it / which one / who approves" questions they field, then multiply the count by the average time to answer and the hourly cost of the person answering. Most teams that run this exercise discover the real loss sits with the person answering, not the person asking.
The Five Modules That Belong in Version One
Company intranet portal projects grow by module list, and they fail by module list. The five modules below show up in nearly every successful first release for companies between 50 and 500 people. Everything else can wait for phase two.
| Module | What it does | What happens without it |
|---|---|---|
| Announcements | Publishes company news filtered by team, site or role, with read tracking | News fragments across chat groups; nobody knows who saw what |
| Document centre | Serves policies, forms and templates with versions and owners | Outdated versions stay in circulation; three copies of one file |
| Requests and approvals | Runs leave, expense and purchase requests as auditable records | Approval history disappears; "who signed this off" has no answer |
| People directory | Keeps names, roles, teams, locations and contact details current | New hires guess who to ask; questions reach the wrong desk |
| Identity and permissions | Gives one sign-in across the portal and connected apps | A password per system, and leavers who keep their access |
Four more modules get requested constantly and will double your timeline: onboarding journeys, asset and equipment tracking, room or vehicle booking, and surveys. Each is useful. All of them together turn a three-month project into a nine-month one. A practical cap: at most five modules in version one, at most five screens per module. That limit is not about shrinking ambition — an intranet that never ships answers no questions at all, however rich its roadmap.
Once the module list is short, the integration list matters more. A portal's value comes from talking to the systems you already run: payroll, ERP, email, CRM and your HR software. How those connections are built is covered in detail in our guide to API integration.
Document Management: One Source of Truth
Nielsen Norman Group's intranet usability research, published 19 January 2024, draws on usability testing of 57 intranets over 18 years with more than 285 employees. In the latest round of 15 organisations, the researchers sorted content management into three models — centralised, distributed and hybrid — and measured task times. Employees completed tasks in an average of 78 seconds on centrally managed intranets, 84 seconds on hybrid ones and 123 seconds where content ownership was distributed. The difference between centralised and distributed was statistically significant (p < 0.001).
The practical reading: your portal's speed is set by who owns the content, not by the platform underneath it. Telling every department to "manage your own pages" sounds democratic and lengthens the time employees need to find anything by more than half. The healthier pattern is a central owner who sets standards, with departments publishing inside those standards.
The same study is just as direct about search. One search field that indexes content, people and tools from a single place is the most usable approach, and it matches what employees expect from consumer search engines. When several search fields existed, people slowed down working out which one to use; in one organisation the search box appeared in five different locations, leaving users asking whether they were still searching the whole intranet. Type-ahead suggestions need care too: people who press Enter while suggestions are still loading end up searching for the first suggestion instead of what they typed.
Migrating the old shared drive gets easier with one triage rule: if a file has not been opened in 12 months, leave it in the archive rather than moving it to the portal. In practice that filter removes most of the volume and brings the migration down to a few hundred documents. Give every document you do move a single owner, a version number and a review date. You do not have to delete the archive — just make sure only the current version appears in the portal.
Requests and Approvals: From Threads to Records
Request workflows pay back fastest, because they move a measurable piece of work. A leave request has an obvious path: the employee asks, the manager approves, HR records it, the balance updates. Run that in a chat thread and three things vanish — the accuracy of the balance, the evidence of approval, and any sense of how long the process takes.
Three settings separate a working approval flow from a digitised paper form. The first is delegation: when an approver is away, the request moves to a named deputy instead of sitting idle. The second is thresholds, so a small expense clears with one approval while a large one needs two. The third is escalation: define how many days a pending request waits before it moves up. Without these, you have rebuilt the paper process on a screen.
Keep the number of flows small as well. Leave, expenses and purchase requests are enough for a first release. Every additional flow brings a new form, a new permission matrix and a new set of exceptions. Moving a messy process into software without simplifying it first just repeats the hidden cost of running your business on spreadsheets behind a nicer interface.
Records matter beyond convenience. Approval trails are what you reach for during an audit, a dispute over overtime, or a question about who authorised a payment. Design each flow so the record it leaves behind answers those questions without anyone having to reconstruct a chat history.
SSO Is Only Half the Job
Single sign-on lets employees reach the portal and connected apps with one identity. Two standards dominate the enterprise side: SAML 2.0 and OpenID Connect. If you already run Microsoft Entra ID or Google Workspace, your identity source exists — the portal connects to it instead of creating another set of passwords.
Here is the half most projects skip: granting access is easy, removing it is not. SSO solves sign-in; it does not guarantee that a leaver loses access. Microsoft's application provisioning documentation explains that the SCIM 2.0 protocol automates both provisioning and deprovisioning: a user who moves out of scope is disabled in the target system, and a user hard-deleted in the source system is deleted in the target system too. The same documentation notes that in Microsoft Entra ID, users are hard-deleted 30 days after they are soft-deleted.
One warning in that documentation matters directly for portal projects: SAML-based just-in-time provisioning creates and updates users at first sign-in, but it cannot delete or deactivate them. A portal wired up with SAML alone therefore keeps a departed employee's access open until somebody closes it by hand. So put one question in your requirements: when an employee leaves, which mechanism closes their access, and within how many hours?
Add a second layer on top of identity: multi-factor authentication. A company intranet portal carrying payroll and personnel records should not rest on passwords alone. Conditional access rules in your identity provider let you require a second factor for sign-ins from outside the corporate network. Schedule a quarterly access review as well, comparing leavers, internal transfers and long-term absences against the live permission list.
On permissions themselves, a role-based model is enough and should stay simple. Four roles cover most companies in a company intranet portal: employee, manager, department head and administrator. Add a location and department filter and "who sees what" fits on one page. Permission matrices built from hundreds of exceptions become unmaintainable within a year.
Buy or Build: How to Decide
The decision turns on how standard your processes are. If they look like everyone else's, a platform gets you live quickly and cheaply. If a process is part of how you compete, a custom portal puts fewer obstacles in your way over time. The table below lays out the axes.
| Criterion | Platform you buy | Light custom portal |
|---|---|---|
| Time to first release | Days | Weeks |
| Cost model | Per-user monthly subscription | One-off build plus maintenance |
| Process fit | You adapt your process to the tool | The tool follows your process |
| Integration | Easy with a ready connector, limited without one | Written against your own systems |
| Data location | The vendor's cloud | The server or cloud you choose |
| Exit cost | Data migration and retraining | You keep the source code |
| Right choice when | Processes are standard, no in-house IT | Processes are distinctive, integration-heavy |
There is a third route, and in practice it is often the sensible one: a hybrid. Keep documents and announcements in the office suite you already pay for, build only your company-specific request and approval flows as a light custom portal, and connect the two behind one sign-in. You get the maturity of the platform where processes are generic, and spend build budget only where you genuinely differ. The question to ask module by module is whether running it the standard way costs you anything real.
Technology choice follows the same logic. A portal is web-based by nature: nothing to install, one place to update, reachable from a browser. The advantages of that model over desktop software are set out in our guide to web-based software, and the buy-versus-build trade-off plays out similarly in ERP for SMEs. If your portal will eventually face customers or resellers as well as staff, the patterns in B2B dealer portal development apply.
What Drives the Budget and the Timeline
Company intranet portal budgets are not a single line item, and projects usually get surprised by the lines nobody quoted. A realistic estimate has six parts:
- Discovery and process mapping. Which request follows which path, who approves it, where the data sits today. Skip this and the software automates the wrong process.
- Information architecture and interface. Navigation, a role-aware home page, search design and the mobile view. Half your staff will open the portal on a phone.
- Build. The single largest line, scaling with the number of modules, screens and workflow branches.
- Integrations. Payroll, ERP, email and the identity provider. If a target system has no API, this line grows fast.
- Content migration. Triaging, versioning and tagging the documents you keep. Usually more effort than the software itself.
- Maintenance and support. Upgrades, permission changes, new flows and security patches.
On timing, a first release with five modules and two integrations realistically runs 10 to 14 weeks from discovery to launch. Each additional integration adds a step change rather than a smooth increment, because every connection brings its own testing and access-approval cycle. To see how scope moves cost on a web project, our website cost calculator gives a quick picture, and software project budgeting covers the wider framework.
The most effective way to protect a budget is to phase the scope. Phase one launches with announcements, documents and leave requests. Phase two adds purchasing and expenses. Phase three brings reporting and analytics. Each launch produces usage data, so the next phase gets scoped from evidence instead of opinion.
Monitoring, Privacy and the Law
A company intranet portal processes more employee data than almost any other internal system: identity records, leave history, performance notes, sometimes health information. Under the GDPR and UK GDPR that makes your design choices compliance choices. It also means you need a position on monitoring before you ship, because portals log sign-ins, message activity and document access by default.
The UK Information Commissioner's Office published guidance on monitoring workers in October 2023, and it translates into concrete requirements:
- Pick a lawful basis, and do not default to consent. The ICO states that consent "is not usually appropriate in the employment context, due to the imbalance of power between you and your workers", because workers are likely to feel they have no choice.
- Proportionality decides. The guidance gives an employer rolling out webcam monitoring to check start times as an example that is "likely to infringe data protection law because it is disproportionate, and there are less intrusive ways to check start times" — such as checking log-on times and letting people explain discrepancies.
- Run a data protection impact assessment before you start monitoring, and document it.
- Tell workers what you monitor, why and how. A one-line notice buried in a handbook does not meet a transparency obligation.
- Restrict and log access. Keep monitoring data available only to named roles, record who looked at it, and set a retention period rather than keeping it indefinitely.
- Expect higher privacy expectations at home. The ICO notes that people working from home expect a greater degree of privacy than they do on site.
Each of those lines has a software counterpart: role-based permissions, an access log, a retention field on every record type, a per-module privacy notice, and an automated flow that closes a leaver's account. The baseline technical controls in our website security guide are the floor for a portal, not the ceiling.
Why Intranets Go Quiet and How to Fix It
The usual ending for an intranet project is not a crash but silence: the system is up and nobody signs in. As Nielsen Norman Group put it in its assessment of portal projects, technology accounts for roughly one-third of the work in launching a good portal. The rest is getting departments to follow the rules, securing senior backing, and making it easier to join the portal than to run something separate.
Four moves reliably lift adoption. Make the portal the browser home page and put something there that exists nowhere else, such as payslips. Get search working properly on day one, because poor search sends people straight back to asking a colleague. Retire old channels gradually — once leave requests only arrive through the portal, the habit forms within weeks. Finally, name a content owner in every department and give each of them half a day of training.
Deskless teams need separate thought. Warehouse, field service, retail and production staff rarely sit at a desk, so for them the portal is a screen on a phone. Announcements, payslips and leave requests should be reachable in three taps, and showing fewer modules on mobile than on desktop increases use rather than limiting it. A common reason a company intranet portal fades out is that the people furthest from a desk failed to find what they needed on the first attempt.
Four Metrics That Tell You It Works
Four numbers are enough, and you can instrument all of them in version one.
| Metric | How to measure it | Healthy signal |
|---|---|---|
| Weekly active share | Unique sign-ins divided by headcount | Above 60% after month three |
| Search success | Share of searches returning no result | Under 10% |
| Cycle time | Average time from request submitted to approved | Half the previous duration |
| Content freshness | Documents past their review date | Under 5% of the library |
Report these on one page each month. The point is not to show management a success story; it is to scope the next phase. Your list of zero-result searches tells you exactly which content is missing, and your slowest workflow tells you which approval step is unnecessary.
Watch the trend rather than the absolute number. A portal that reaches 70% weekly active use and then slides to 45% over two quarters is usually telling you that content has gone stale or that an old channel quietly reopened. Both are cheap to fix early and expensive to fix after people have stopped looking.
A 90-Day Rollout Plan
The schedule below is a realistic example for a first release with five modules and two integrations. Add modules or integrations and the dates stretch.
| Week | Work | Output |
|---|---|---|
| 1-2 | Process mapping, top 10 employee tasks, content inventory | Scope document and module list |
| 3-4 | Information architecture, role and permission matrix, privacy notices | Approved structure and permission table |
| 5-6 | Interface design, role-aware home page, mobile view | Clickable prototype |
| 7-9 | Build: announcements, documents, directory, leave flow | Working release in a test environment |
| 10-11 | Identity provider connection, payroll or ERP integration | Single sign-on and data flow live |
| 12 | Content migration, pilot with one department, training | Pilot feedback report |
| 13 | Launch, phased retirement of old channels, analytics setup | Live portal and metrics dashboard |
The step teams most often skip is the week 12 pilot. One department running the portal for one week surfaces most of what would otherwise appear after launch: a missing permission, a form label nobody understands, a delegation rule pointing at the wrong person. Launch without it and those problems shape the first impression for the whole company, where second chances are rare.
Frequently Asked Questions
Is a company intranet portal the same thing as an intranet?
Not exactly. The intranet is the whole set of systems running on your internal network, while the portal is the permission-aware front door to that set. A portal gathers and filters rather than producing content of its own. In everyday use the two words describe the same project.
Does a small company need a company intranet portal?
Teams under ten people usually manage with a shared drive and a chat app. Three signals say it is time: the same question comes up several times a week, approval history keeps getting lost, and you operate across more than one site or shift. With all three present, a portal pays for itself well below 50 employees.
Is buying a platform cheaper than building one?
In the short term, almost always yes. Two factors change the maths: headcount and integration depth. Above roughly a hundred users, and where the portal must exchange data with several internal systems, the total cost of ownership for a custom build can overtake subscriptions from about year three.
How long does it take to launch a company intranet portal?
Ten to fourteen weeks is realistic for a first release with five modules and two integrations. What stretches the timeline is rarely development. It is decisions and content: approving the permission matrix, triaging old documents, and obtaining the access needed for integrations.
Can we run a portal without single sign-on?
Technically yes, but we do not recommend it. A separate set of passwords creates both support load and security risk. If you already use Microsoft Entra ID or Google Workspace, the identity source exists and the portal connects to it over SAML 2.0 or OpenID Connect.
Can we monitor what employees do in the portal?
Within limits, and only transparently. The ICO's guidance expects a lawful basis other than consent in most employment contexts, a data protection impact assessment before monitoring starts, proportionate methods when less intrusive options exist, and clear information to staff about what you monitor and why.
Can our existing software connect to the portal?
If it exposes an API, yes. If it does not, you are looking at workarounds such as read-only database access or scheduled file transfers. During procurement, ask for a written answer per system: is there an API, where is the documentation, and which authentication method does it use?
Who should own the portal internally?
Technical ownership belongs with IT; content ownership belongs with internal communications or HR. The usability evidence is clear that employees find information noticeably faster where a central team manages content. Departments publish, the centre sets the standards.
A company intranet portal is not a project to add another channel — it is a project to take load off the channels you already have. Judge it on three numbers rather than on its feature list: how many seconds an employee needs to find something, how many days a request waits for approval, and how many hours pass before a leaver loses access. A portal that improves those three is doing its job, whether you bought it or built it.
If you want to work through which modules belong in your own first release, take a look at our web software development services, or send us your current systems and scope through the contact page and we will map it out with you.
Need professional help with this?
Talk to our team about your project — same-day response, free quote.


