Data security and sharing in Intune
Microsoft Intune is a key component of the Microsoft Enterprise Mobility and Security Suite cloud service offering. To support the data governance strategy, all Microsoft cloud services are developed with Microsoft Privacy and Microsoft Security methodologies.
Microsoft Intune follows the same technical and organizational measures that the Microsoft Azure service teams take for securing against data breach processes.
For more information, see the Service Trust Portal.
Data breach reporting
When a Customer-Reportable Security Incident (CRSI) is identified, customers are notified. This process includes working with the Microsoft 365 team to communicate breach notification for any Microsoft 365 customers using Intune.
When tenant admins turn on certain functionality (like the Apple Device Enrollment Program), Microsoft Intune obtains admin consent for sharing data with the appropriate third parties. In such cases, Intune may share personal data with:
- Third parties acting as Microsoft's agents.
- Third parties not acting as Microsoft's agents, but only when tenant admins explicitly grant Intune permission to do so.
All third parties acting as Microsoft agents are included in the Online Services Subcontractor list.
Sharing data with such entities is done to aid customer and technical support, service maintenance, and other operations.
A tenant's contract with the third party governs the Intune personal data held in the third party's service. It also grants Intune the permission to transmit data to the third party service.
For information about data shared with certain third parties, see the following articles:
- Data Intune sends to Apple
- Data Intune sends to Google
- Data Apple sends to Intune
- Data Google sends to Intune
- Data Jamf Pro sends to Intune
Microsoft Endpoint Configuration Manager data sharing
Microsoft Intune does not share any data with Configuration Manager. Configuration Manager is an on-premise product deployed, managed, and operated directly by the customer. The diagnostics and usage data that is collected by Configuration Manager are only to improve the installation experience, quality, and security of future releases.
To learn more, see Diagnostics and usage data for Configuration Manager.
Find out how to view and correct personal data in Intune.