Data Protection
Encryption in transit, secure credential handling, and regular access reviews.
Security
Security and trust are built into our scheduling platform through careful controls and operational best practices.
Infrastructure Controls
Redundancy, monitoring, and incident response workflows across production services.
Responsible Disclosure
Report security concerns at support@pinmycal.com for immediate triage.
🧪 Security Check: AuthPass
Verification Rule
Reject request if: - missing Bearer token - token expired - token scope mismatch
🔏 Security Check: WebhookSigned
Signature Validation
X-PMC-Signature: sha256=7e9...c1 Verify HMAC(payload, webhookSecret) Reject if timestamp drift > 5 min
🚫 Failed Security Response401
Response Body
{
"status": "error",
"code": "UNAUTHORIZED",
"message": "Token invalid or revoked"
}