Security Policy

Last updated: March 13, 2026. Availi uses OAuth 2.0 for all calendar integrations — we never store your calendar password. All data is encrypted in transit via TLS with HSTS enforced. Sessions are HTTP-only, Secure-flagged, and expire after 7 days.