Skip to content

Sectors · Corporate groups

Corporate groups. Portals that pass the security review.

Polargate builds employee portals for corporate groups on Microsoft Entra ID single sign-on, delivered with the security evidence your review will ask for.

Book a callTell us about your project
Two executives in suits share coffee at a round table in a dim lounge while one points at a timeline on a laptop screen

The problem

What we hear on the first call.

If any of these sounds familiar, that is where we start.

  1. 01

    Everyone already has a Microsoft account. If the intranet asks for a second password, nobody will use it.

  2. 02

    Internal news goes out as a mass email and a PDF, and HR cannot publish anything without opening a ticket with an agency.

  3. 03

    The staff directory only exists inside Microsoft 365, so finding a colleague in another brand means asking around.

  4. 04

    Every proposal we like dies in the security review, and we lose a quarter starting again.

  5. 05

    We are several brands with several email domains, and every tool treats us as either one company or as strangers.

  6. 06

    We are locked into an intranet product: the roadmap belongs to the vendor, and our content is hard to get out.

For example: 99 automated tests written for the module, from zero at the start. NationwideLegal

Book a callTell us about your project

Projects · Corporate groups

What we build.

Each piece connects to the systems you already use, and everything stays in accounts your company owns.

  • 01

    Employee portals with Microsoft Entra ID single sign-on and role based access, including an administrator preview of each role

  • 02

    A corporate directory synced from Microsoft Graph with a resumable delta sync, proven at the scale of a large corporate group

  • 03

    An internal CMS in two languages for news, announcements and benefits, edited by communications and HR without a developer

  • 04

    A notification system with typed events, per-user preferences, mandatory notices and an in-app notification centre

  • 05

    Digital employee cards with signed Apple Wallet and Google Wallet passes, branded QR and vCard download

  • 06

    Native iOS and Android apps from the same codebase, signing in over a deep link, released by git tag and updated over the air

  • 07

    Security hardening and compliance pages: HTTP headers, content security policy, row level security review, cookie consent with an audit trail and GDPR rights forms

A laptop on a desk in an open-plan office: the employee portal with the directory, an approved holiday request, an internal announcement and shortcuts to payslips and training.

For example: 2 languages live on the site, Spanish and English. Global Dynamic Security Group

Book a callTell us about your project

Work · Corporate groups

Work in this sector.

Real projects. Open each one to see what we built and the figures we measured.

For example: 6 standard security headers missing before the work. B2B services company, Europe

Book a callTell us about your projectAll work

In detail · Corporate groups

What you should know.

For example: 100 / 100 / 100 Lighthouse mobile: accessibility, best practices, SEO. KD.tech

Book a callTell us about your project

What changes in this sector

In a corporate group the decision is almost never one person's. Internal communications wants the portal, IT owns identity, security reviews the architecture and procurement wants a closed number. So the work starts with an audit and a written scope, not with a design concept.

Three things separate this from a normal web project. Identity already exists: every employee has a Microsoft account, and asking for a second username and password is enough on its own to kill adoption. The organisation is plural: several brands, several email domains and several legal entities under one roof, and a person can belong to more than one. And nothing reaches production without passing a security review, so headers, content security policy, row level security, consent and audit trails belong to the build, not to a later phase.

How it is priced

The Discovery Sprint has a fixed price and ends with the scope and the exact figure for the build, in writing, before anyone writes code. A first phase of a portal is fixed price too, and what moves it is the number of modules and integrations. It can be paid in monthly instalments. After launch, a CARE retainer covers senior maintenance and evolution, with every ticket and the hours it consumed visible in the ServiceDesk. Book a call and you get a private quote.

How we work

From brief to production.

Every project starts with a paid Discovery Sprint that closes scope and price, and every change goes through the same loop of building, auditing and fixing until two passes come back clean.

01The four phases

  1. 01

    Discover

    Two paid weeks that end in a closed scope, an architecture and a fixed price.

  2. 02

    Build

    Senior engineers with AI, a review on every change and a production release in weeks.

  3. 03

    Grow

    Search, AI assistants and paid media, measured from the first week.

  4. 04

    Care

    Monthly maintenance with a first answer within 48 business hours.

For example: 536/536 translation keys present in each of the three languages. Estepona Golf

Book a callTell us about your project

FAQ

What people ask us.

Can an employee portal use our existing Microsoft 365 accounts?
Yes. Polargate builds these portals on Microsoft Entra ID single sign-on, so people enter with the account they already have and IT keeps control of who gets in. The directory stays in step through a Microsoft Graph delta sync, so joiners, leavers and role changes come from your tenant. On the reference project that sync covers the whole directory of a group with several brands.
How much does an employee portal cost?
A first phase has a fixed price that depends on the number of modules and integrations, and it can be paid in monthly instalments. Before that, a Discovery Sprint produces the scope and the exact figure. After launch, CARE keeps it maintained. Book a call and you get a first read of scope and price, then a private quote.
Will this pass our security review?
That is what the build is designed around. Polargate ships HTTP security headers, a content security policy without inline scripts, row level security enforced on every table, cookie consent with an append-only audit trail and a reporting endpoint. On the reference project the public grade moved from D to A on securityheaders.com, SSL Labs reported A+, and Supabase security advisors went from four to zero. We supply the evidence; your reviewer keeps the verdict.
Can it connect to the systems we already run?
Usually yes, if the system exposes an API or a database we can read. These portals already integrate Microsoft Graph for identity and directory data, Apple Wallet and Google Wallet for employee passes, and a transactional mail provider for notifications. Polargate checks each interface during the Discovery Sprint before promising anything, and says plainly when a system has no usable one and a file exchange is the answer.
Do employees get an app, or only a website?
Both, from one codebase. The portal is a web application that also ships as native iOS and Android builds through Capacitor, with Microsoft sign-in over a deep link and universal links from internal emails. Releases go out by git tag through GitHub Actions, and over-the-air updates put interface and content fixes on employees' phones without waiting for a new store review.
What happens if we stop working with you?
You keep everything. The code sits in your repository, the database in your own Supabase project, hosting in your own Vercel account and the apps in your own App Store and Google Play accounts. Handover includes environment variables, administrator accounts, the migrations and the audit report. Another team can take over without rebuilding anything, and there is no per-user licence tying you to Polargate.

For example: 4 days from diagnosis to the new backend running. Concert Music Festival

Book a callTell us about your project

Get started

Tell us what you want to build.

Websites, apps, custom systems and AI for companies that need them in production in weeks. Fill in the form or book a 30 minute call: a senior engineer answers within 48 business hours with a first take on scope, timeline and price.

Book a 30 minute call
What do you need?
Budget
When

At least ten characters.

Answer in writing within 48 business hours. No newsletter, no automatic sequence.

Rather answer the full brief?

First step

Discovery Sprint

Two weeks to close scope, architecture and price before anything is built.

No price list. You get a private quote, in writing, after a short call.

Then, to build, always at a fixed price

Ask for your quoteHow we quote

Not ready yet?

AI-native digital studio for mid-market companies

POLARGATE, S.L. · CIF B24895005
Calle Electrónica 6, 28027 Madrid, Spain