Security engineered into every line of code.
Your calendar schedules, client intake submissions, and confidential voice calls are protected with bank-grade encryption and tenant isolation.
Encryption at Rest and in Transit
Client data, scheduling history and intake records are stored in encrypted databases and sent only over HTTPS.
OAuth 2.0 Token Vaulting
Calendar access uses OAuth: we never see your Google or Microsoft password, access is limited to the calendar permissions you approve, and you can disconnect at any time.
Strict Multi-Tenant Isolation
Data boundaries between organizations are strictly enforced at the database and application layers, preventing any cross-tenant data leakage.
Zero Public AI Training
Calendeur never uses your meeting audio, transcripts or contact records to train AI models.
Compliance & Regulatory Standards
GDPR
SupportedData Processing Agreement available on request, with data export and deletion when you ask.
CCPA / CPRA
SupportedAccess, export and deletion requests handled for California residents.
Healthcare data
Ask usIf you need to store protected health information, contact us about your requirements before you start, so we can tell you exactly what is covered.
Security reviews
On requestWe'll complete your vendor security questionnaire. We have not completed a SOC 2 audit.
Responsible Vulnerability Disclosure
We welcome security researchers to test and review our perimeter responsibly. If you discover a potential vulnerability, please email our security response team directly at security@calendeur.com. We acknowledge receipt within 24 hours and do not pursue legal action against ethical researchers following responsible disclosure.
Have questions about security?
Our infrastructure and security teams are available to complete vendor assessment questionnaires.