Skip to content
Joan Help

Security and data protection in Microsoft Exchange 2010, 2013, 2016 (Outlook)

With Exchange 2010, 2013 and 2016, Joan uses NTLM authentication and the EWS API, stores some credentials encrypted and only the room's email, and caches events briefly.

All communication between Joan devices, MyJoan, and the Microsoft Exchange calendar is managed through the official, standard NTLM authentication using the EWS API with access granted and certain credentials stored in encrypted form.

Joan synchronizes the room calendar events from Microsoft Exchange to Joan's secure, EU-based infrastructure. This includes event details (title, description, time, status, visibility and conference link) and the names, email addresses and response status of the organizer and attendees. We use this data to power room booking across Joan apps and devices and to provide Joan Analytics. Events are synchronized for the next three months. See Security and data protection for what is stored, how long it is kept and how to request deletion.

As for user information, such as usernames and passwords, they are kept encrypted in our database for seamless use. No information is or will be shared or sold to third parties as stated in our Privacy Policy.

*For more information regarding our data protection and security policy, please take a look at our security section on our website here -> https://getjoan.com/security/

Was this helpful?