We've created an app for internal use by our company employees.  Because it is sensitive customer information, we do not want to publish any URLs  because we do not want everyone in the world to see this information.

However, we want to embed forms and reports into our website, for employees to use there.  

Would we embed the forms and reports?  

Please clarify the difference between publishing and embedding.  

And can we embed all forms and reports?

In other words, what's the proper mechanism to use to get the app we've created into our website, but only allow employees to see it?

thanks