Customer content is not an administrator feature
Meeting details, messages, notes, attachments, availability, and provider connections are scoped to the account and participants authorized for that record. The administration console exposes account health, access state, configuration readiness, and security operations. It does not include a screen for staff to browse customer meetings or conversations.
The controls we apply
- Private by default and limited to the people involved.
- Least privilege for application and infrastructure roles.
- Purpose limitation and data minimization for connected services.
- Separation of duties for exceptional support access.
- Short-lived grants, revocation, and auditable evidence.
- Clear labels for controls operating today and work still planned.
Encryption and credentials
Taiega protects network traffic with TLS and uses managed storage encryption for production databases and object storage. Connected-provider credentials are encrypted at the application layer with authenticated encryption before storage. Secrets stay in server-side systems and are excluded from account exports and administration pages.
- Authentication passwords are handled by the identity provider and are not stored as readable application data.
- Invitation tokens and API credentials use scoped, revocable paths.
- Production secrets are inventory-tracked, restricted to the integration that needs them, and rotated.
Operational access
Infrastructure operators with direct production privileges remain technically capable of operating the service. Those privileges are governed separately through strong authentication, restricted roles, change review, and audit logs. Taiega does not claim that ordinary server-processed meeting data is zero-knowledge or end-to-end encrypted.
Connected services
Calendar, conferencing, email, and messaging providers receive only the information needed for the action the user selected. Their handling is governed by their own terms. Disconnecting stops new use of a connection but cannot recall information already delivered to an inbox, calendar, conference provider, or participant.
Standards and assurance
Taiega’s engineering program follows least privilege, separation of duties, explicit purpose limitation, short-lived access, data minimization, revocation, and auditable events. It is informed by the NIST Privacy Framework, NIST SP 800-53, and GDPR privacy principles. These references describe the standard guiding the product; they are not a claim of certification.