Security is part of the product, not an add-on

Account protection

Every new or untrusted device must complete two-factor authentication. Trusted-device sessions can be revoked, and passkeys can be used where supported.

Privacy-aware planning

Availability can be shared without exposing full meeting details. Calendar feeds can be limited to Busy only and can be revoked or rotated if a private URL is exposed.

Operational controls

Security-sensitive changes and administrative actions are recorded in audit logs. AgendaRelay stores application timestamps in UTC and applies display time zones separately.