Skip to content
English
Submit a Support Ticket
Visit Talentcare
  • There are no suggestions because the search field is empty.

Cal.com FAQs

Talentcare uses Cal.com to check hiring manager availability, prevent booking conflicts, and create or manage interview bookings. Access is delegated through the signed-in user and governed by Microsoft Entra consent controls.

What service does Cal.com provide?

Cal.com supplies the scheduling layer used to retrieve busy times, avoid conflicts, present available interview slots, and create or manage bookings on connected calendars.

Why does Talentcare use it?

Talentcare uses Cal.com to automate interview scheduling around a hiring manager’s actual availability. This reduces manual coordination and helps candidates move from invitation to a confirmed interview more quickly.

What type of Microsoft access is used?

Cal.com uses delegated Microsoft Graph permissions and acts on behalf of the signed-in user within the permissions that have been granted.

Does Cal.com receive unrestricted Microsoft 365 access?

No. The connection is limited to the delegated Microsoft Graph permissions approved for the Cal.com Enterprise Application. The permissions support calendar availability and interview scheduling.

Which permissions are required?

  • User.Read: identify the connected Microsoft account
  • Calendars.Read: read availability and busy-time information
  • Calendars.ReadWrite: create, update, or cancel interview events
  • MailboxSettings.Read: use mailbox settings such as Outlook time zone
  • offline_access: maintain the connection when the user is not actively signed in

            What security and compliance controls are in place?

            Cal.com states that it maintains the following security and compliance controls:

            • SOC 2 Type II compliance
            • ISO/IEC 27001 certification
            • Encryption in transit and at rest
            • Continuous monitoring and vulnerability management
            • Independent audit materials available through the Cal.com Trust Center

                      How is access limited and controlled?

                      Microsoft Entra controls whether users can access and consent to the enterprise application. Admin consent can be limited to the approved delegated permission set. Talentcare uses Cal.com Application ID c35353fa-4a5d-417b-96ad-c555f19fe7f8.

                      How are calendar and booking data used?

                      The integration checks connected calendars for conflicts and manages interview bookings. Booking records may include attendees, meeting titles or locations, guest information, notes, and cancellation or rescheduling details.

                      What happens when a calendar is disconnected?

                      Microsoft Entra administrators retain control over OAuth access and can revoke authorization. Additional implementation details regarding Cal.com’s refresh-token storage, retention, encryption, and vendor-side revocation lifecycle can be validated through Cal.com’s Trust Center, SOC 2 documentation, DPA, or a written vendor security review.

                       

                      Why might a connected calendar become disconnected?
                      A calendar connection may require reauthorization when the underlying Microsoft authorization is no longer valid. Potential causes include password or credential changes, Microsoft Entra identity policies, administrator or user session revocation, Conditional Access or sign-in-frequency requirements, account/device security-state changes, or other Microsoft 365 security controls.