NDR Inside

Opening the app and what you see first

Installing the NDR Inside app from the Play Store gives you access to a private employee intranet for Norddeutscher Rundfunk. The app opens to a login screen that does not accept a regular username and password. You must log in with your Microsoft 365 corporate credentials. This is the first sign that this app is not for the general public. It is built exclusively for NDR employees. The app does not offer a demo mode or a guest account. Without a valid NDR Microsoft 365 account, you cannot proceed past the login screen. The interface is clean and minimal. There is no onboarding tour, no tutorial video, and no welcome screen explaining features. The app assumes you already know what it does and why you are using it.

The login process requires two-factor authentication. After entering your Microsoft 365 credentials, you need to confirm your identity through a second method. This could be a code sent to your phone, an authenticator app, or a biometric check. The app supports biometric authentication, as indicated by the USE_BIOMETRIC permission in the APK. The combination of Microsoft 365 SSO and 2FA creates a security barrier that protects NDR's internal communications. For employees, this means carrying work security protocols onto personal devices if they choose to install the app privately.

How the intranet features work together for NDR employees

The app is built on the Haiilo social intranet platform. Haiilo provides a digital home for communication, knowledge sharing, and everyday tools within organizations. More than 3 million employees worldwide use Haiilo daily for secure internal communication. For NDR, this means the app serves as a centralized hub where employees can access company news, connect with colleagues, view personal profiles, and participate in internal discussions. The platform combines social intranet features with communication tools and employee engagement surveys.

Christian Fremy, Team Leader for Internal Communication at NDR, built an editorial community within the NDR inside social intranet. This community increased visibility across all company departments and strengthened networking within the decentralized media organization. The app enables employees to post content, comment on others' posts, and communicate via chat. The NDR inside newsletter, sent monthly via email, keeps employees connected to what is happening at the broadcaster. The app and the newsletter work together to ensure internal information reaches all staff members efficiently.

Comparing NDR Inside with other employee intranet apps

Most employee intranet apps fall into one of two categories: basic company bulletin boards that display static information, or full-featured enterprise social networks that require extensive training. NDR Inside sits closer to the latter but is specifically tailored for a single organization. Apps like LumApps focus on intranet features, while Haiilo provides a complete employee experience platform with integrated advocacy, recognition, and engagement tools. NDR Inside leverages Haiilo's capabilities but is branded and configured exclusively for Norddeutscher Rundfunk.

Unlike general-purpose communication apps like Slack or Microsoft Teams, NDR Inside is not designed for external collaboration. It is a closed system accessible only to NDR employees with valid corporate credentials. The app supports private device installation, which is a notable feature. Many corporate intranet apps restrict access to work-issued devices only. NDR Inside allows employees to install it on personal phones, provided they complete two-factor authentication. This flexibility increases accessibility but also introduces security considerations. The app requests extensive permissions including camera, audio recording, biometric authentication, and phone state. These permissions enable features like profile photos, voice messages in chat, and biometric login. However, the permission list is long compared to basic communication apps.

What the app actually does in practice

The app does not crash during normal operation. The login flow works as expected for authorized users. The interface is responsive. Content loads without significant delays. These are basic expectations, but they are not always met by internal enterprise apps that are often developed with less polish than consumer-facing products. NDR Inside, built on the established Haiilo platform, benefits from a mature codebase. The app has been updated with bug fixes and improvements, as indicated by the changelog. The update history suggests ongoing maintenance rather than aggressive feature development.

The app's data safety section on Google Play states that no data is shared with third parties. Data collected includes location, personal information, and five other data types. Data is encrypted in transit. However, the privacy policy notes that data cannot be deleted. This is a significant limitation for employees concerned about data retention. The Exodus Privacy report for version 6.43.0 identified three trackers in the app. Trackers are often used for analytics and crash reporting in enterprise apps, but their presence is worth noting for privacy-conscious users.

The practical limitations of a closed employee intranet app

The most obvious limitation of NDR Inside is that it is completely useless without NDR employment. There is no public content. No trial mode. No way to preview what the app offers. If you are not an NDR employee with a valid Microsoft 365 account, the app is a locked door. This is by design. The app is not meant for public consumption. It is a tool for internal communication, not a public-facing product.

The app's permission requirements are extensive. It asks for camera, microphone, storage, phone state, and biometric authentication permissions. Some of these permissions are necessary for core features like profile photos and voice messages. Others, like READ_PHONE_STATE and WRITE_EXTERNAL_STORAGE, are more intrusive. Employees installing the app on personal devices must weigh convenience against privacy. The app also requires permission to run at startup (RECEIVE_BOOT_COMPLETED) and post notifications. These permissions enable the app to function as a persistent communication tool but may impact battery life and notification behavior. The app does not provide granular control over which permissions are required for which features. It is an all-or-nothing installation for most users.