All communication between Joan devices, MyJoan account and the Microsoft 365 calendar is managed through the official, standard authentication, and APIs with access granted and certain credentials stored in encrypted form.
Joan synchronizes the room calendar events from Microsoft 365 to Joan's secure, EU-based infrastructure. This includes event details (title, description, time, status, visibility and conference link) and the names, email addresses and response status of the organizer and attendees. We use this data to power room booking across Joan apps and devices and to provide Joan Analytics. Events are synchronized for the next three months. See Security and data protection for what is stored, how long it is kept and how to request deletion.
Global Admin accounts are managed through Oauth2 authentication using the Outlook API and for Delegated users, standard, basic authentication using the EWS API is employed. User information, such as usernames and passwords, for Delegated users are kept encrypted in our database for seamless use but no worries, no information is or will be shared or sold to third parties as stated in our Privacy Policy.
*For more information regarding our data protection and security policy, please take a look at our security section on our website here -> https://getjoan.com/security/
- Security and data protection: the general overview, including what calendar data is stored and how long it is kept
- Security and data protection in Google Workspace, Microsoft Exchange 2010, 2013, 2016 (Outlook) and iCalendar