Enterprise Security & Infrastructure
How Expo Wizard hosts your data, controls who can reach it, records every change and deletes it when you say so.
Google Cloud Architecture
Deployed on Google Cloud Platform to deliver 99.9% uptime, global availability, and high-performance processing during peak conference traffic.
Bank-Grade Data Protection
Built to comply with stringent enterprise data privacy, encryption, and security protocols.
Your identity provider. Your cloud project.
For organisations that need the app inside their own security boundary, we run a dedicated tenant on your private Google Cloud project, signed in through Azure AD.
Isolated tenant on your private GCP
A single-tenant deployment in your own Google Cloud project. Your data never shares infrastructure with other customers.
Azure AD SSO
Staff sign in with their Microsoft work account. Leavers lose access when they leave your directory.
Emergency local login
If SSO is unavailable, admins sign in with username, password and an authenticator code. Every use is recorded in the audit log.
Access, records and your data.
One sign-in method per workspace
A one-time code by email, or SSO. No shared passwords. Guests never sign in.
People see what their role allows
Event Manager, Executive Admin and Requestor, each with its own rights per event.
Every change is recorded
A read-only log of who changed what and when, filterable and exportable. Enterprise streams it to your SIEM.
Microsoft Teams, kept contained
One connector account owns the Teams meetings the app creates. Its secret is held in Google Secret Manager.
Kept as long as you decide. Then gone.
Admins set each period. Alert emails list what will be deleted the next day.
| DATA | DEFAULT |
|---|---|
| Meetings deleted automatically after | 7 years |
| Deleted events and meetings kept in trash | 30 days |
| Grace period before a deleted user is erased | 30 days |
| Audit log entries | 365 days (90 – 2,555) |
| Per-person data export, soft and hard delete | Always on |
Need our security documentation?
We share architecture details, subprocessors and our DPA with your security team on request.