What changed
Microsoft has expanded the list of protected apps available in Microsoft Intune. Protected apps are third-party and Microsoft applications that support the Intune App SDK or app wrapping, which means you can target them with app protection policies (APP, also known as MAM policies) to control how corporate data is handled inside the app.
Apps added to the list
The following apps are now listed as protected apps in Intune:
- Notion
- Superhuman Mail
- Calven
Why it matters for admins
Every app added to the protected apps list is one more place where you can enforce data protection without needing to fully manage the device. That is particularly useful in BYOD scenarios, where enrolling personal devices is not practical or acceptable to users.
With app protection policies applied, you can restrict actions such as copying or moving company data into unmanaged apps, require a PIN or biometric check to open the app, block saving files to personal locations, and selectively wipe corporate data if a user leaves the organisation or a device is lost.
What to do next
Review whether any of these apps are already in use across your organisation, either sanctioned or as shadow IT. If they are, create or update an app protection policy that targets them so the data flowing through them is covered by the same rules you apply to Outlook, Teams, and other core apps.
As always, test policy settings with a pilot group before broad deployment. Some protection settings — particularly data transfer restrictions and save-as controls — can change day-to-day behaviour and generate support calls if rolled out without warning. Communicate the change to affected users, and confirm in the Intune admin centre that each app appears with the expected platform support before you rely on it.
Source: Microsoft Learn. Summarised independently — check the source for the latest detail.