1. Purpose of the Integration

Kickscale offers an integration with Microsoft Outlook/Microsoft 365 that lets users connect their calendar. This allows Kickscale to automatically detect meetings and, if desired, send a recording bot (“notetaker”) to join and record them.

2. Technical Implementation

Item Details
Platform Microsoft Azure AD / Entra ID app registration (“Kickscale”)
Authentication OAuth 2.0 (delegated permissions)
Requested permissions (Microsoft Graph scopes) Calendars.Read (read calendar), User.Read (sign-in, basic profile) – no write access
Admin consent Required for organization-wide authorization. Can be granted by the tenant admin either selectively (per user) or for the entire organization. Guide: Granting Administrative Consent for Kickscale in Microsoft Entra

3. Data Processing

Item Details
What data is read Calendar events (title, time, participants, meeting link)
Write access No – the integration only reads calendar data; no events are created or modified
Handling of access tokens Handled through our specialized subprocessor Recall.ai. Recall.ai manages OAuth token handling and calendar synchronization on Kickscale’s behalf (Trust Center: security.recall.ai, SOC 2 monitoring via Vanta). Calendar data is retained by Recall.ai for a maximum of 60 days in the past.
Storage location (Kickscale platform) GCP EU, MongoDB Atlas – same as the Salesforce integration
Encryption in transit TLS 1.2+
Encryption at rest AES-256
Retention period For the duration of the active customer subscription; deleted after contract termination per the DPA – same as the Salesforce integration

4. Compliance

5. Revocation

Users can disconnect the calendar connection themselves at any time: Kickscale Settings → Calendar Integration → “Disconnect Calendar” (app.kickscale.com/platform/settings). Access can also be revoked centrally via the customer’s Azure AD tenant.