Devices establish connections to the Joan cloud services using modern encryption algorithms :
- Joan 6 Pro - TLS 1.3 (default) or AES 128 encryption (fallback).
- Joan 6 / Joan 13 and other regular Joan devices: AES 128 encryption is supported.
Wi-Fi connectivity between devices and local wireless access points uses standard WPA2, WPA3 or WPA2 EAP (TLS, TTLS or PEAP).
Access to Joan services is protected using industry standard approaches, using the latest encryption standards.
Joan services connect to your infrastructure in order to provide room booking information from your Google Workspace, Microsoft 365 or other data sources. We adhere to the latest integration approaches and follow the latest security standards.
Room calendar events, including event details and the names, email addresses and response status of the organizer and attendees, are synchronized to Joan's secure, EU-based infrastructure for the next three months to power room booking and Joan Analytics. Read more about what we store and how long we keep it.
All communication between Joan devices, MyJoan account, and the Google Workspace calendar is managed through the official, standard OAuth2 authentication and the Google API with no credentials stored, only access granted.
All communication between Joan devices, MyJoan account, and the Microsoft 365 calendar is managed through the official, standard authentication, and APIs with access granted and certain credentials stored in encrypted form.
Integration is done in following ways:
- Global Admin -> MS Graph API
- Delegated user -> MS Graph API
Global Admin/Delegated user credentials are stored encrypted and will not be shared with any 3rd party.
All communication between Joan devices, MyJoan account, and the Microsoft Exchange calendar is managed through the official, standard NTLM authentication using the EWS API with access granted and certain credentials stored in encrypted form.
As for user information, such as usernames and passwords, they are kept encrypted in our database for seamless use. No information is or will be shared or sold to third parties as stated in our Privacy Policy.
All communication between Joan devices, MyJoan account, and iCalendar is managed through the official, standard XML feed with no credentials stored, only read support granted.
INTERFACE | SERVICE | ENABLED BY DEFAULT | DESCRIPTION |
|---|---|---|---|
Wi-Fi Ethernet* | DNS, DHCP, and SNTP clients | YES | Utilizes standard network resources to manage addressing, naming, and time synchronization. The device operates strictly as a client. |
Proprietary bootloader protocol | YES | Enables remote firmware upgrades via Visionect’s official deployment servers. |
Server communication | YES | Connects to the Visionect server to fetch and synchronize user calendar data. |
USB-C | Service interface (CLI) | YES | Exposes a Command Line Interface for the device onboarding via text-based commands. |
Bluetooth | Service interface (CLI) | YES | A wireless "twin" of the USB-C interface, intended for use with the official Joan Configurator mobile application. |
Display | User interface | YES | The Display serves as the primary visual input/output for the user. |
*Ethernet port is supported only on the PRO devices.
Hosted services (e.g. MyJoan) are deployed on Google Cloud (Belgium, EU)
Yes, We create daily database snapshots.
Estimated RPO is 24 hours, estimated RTO is 4 hours.
Yes, Data is encrypted both during transmission and at rest.
As an EU company we comply to GDPR. For more information check our legal section (https://getjoan.com/legal/).