Skedda

Description Features Permissions Security & Compliance

Hybrid work. People first.Skedda is the world’s leading workspace management solution, helping organizations use their space efficiently, reliably, and securely, so their teams can focus on collaboration and thrive. Skedda equips your people with a simple tool to book desks, rooms, parking spaces, and more; ensuring that they spend their time in the office collaborating with the right people and gathering in the right places. With comprehensive analytics, customizable booking rules, and interactive floorplans, Skedda makes sure that every square foot of your office supports employee productivity and engagement.With the Skedda integration for Slack, your team can::man-raising-hand: Get notified when it is time to check in to their booking
:white_check_mark: Get notified immediately when their visitor has checked in.
:star: Use command /skedda-in to receive a summary of booked-in teammates for the week ahead!Want to learn more about Skedda and workspace management? Schedule a call with one of our experts.

Permissions

Skedda will be able to view:

Skedda will be able to do:

Review the details to better understand this app’s security practices. To learn more about assessing apps for your workspace visit our Help Center.

General

Privacy & data governance

Data retention policy

Skedda collects personal data, including registration details (e.g., name, email), payment information, technical data (e.g., IP addresses, device info), and third-party authentication identifiers (e.g., from Google, Facebook). Venue administrators may also provide user data for managing bookings. The personal data is used for identity verification, managing bookings, improving services, processing payments, and preventing unauthorized use. Skedda also uses data to analyze trends and optimize services. Skedda does not sell personal data. It may share data with third-party service providers for service functions, comply with legal obligations, or during company mergers/acquisitions. Payment data is processed by Stripe, a secure third-party processor. Personal data is retained as necessary to fulfill legal obligations or user requests, with specific time limits for different types of data (e.g., booking logs retained for 90 days, user profile data retained indefinitely unless deleted by the user or venue). Users can access, correct, or delete their personal data by logging into their account or contacting Skedda. Skedda complies with GDPR and other similar privacy laws, offering rights like data access, correction, and erasure to users in applicable regions. Skedda implements reasonable security measures to protect personal data, though no method is 100% secure. Users are responsible for safeguarding their login information. Data may be transferred and stored in countries with different data protection rules. Skedda ensures that these transfers are protected according to the policy. The privacy policy may be updated periodically. Users are encouraged to review it regularly. For questions or concerns about the policy, users can contact Skedda at info@skedda.com. Full privacy policy of Skedda Inc. is found here: https://support.skedda.com/en/articles/663173

Data archiving and removal policy

User data The automatic deletion feature helps minimize the storage of personal data by automatically deleting user accounts that no longer have active bookings or visits, aligning with GDPR and similar data protection regulations. Users older than a specified threshold (e.g., 3 months) are automatically deleted if they have no remaining bookings or visits. A user who created a booking but later leaves the organization will be deleted from the system once their bookings expire and their account exceeds the retention threshold. Admins can configure retention periods for both bookings and user data in the system settings. The user retention period should be set based on the organization's data retention goals. Deleted users can re-register as new users if they wish to return, with no loss of prior data, as their account had no active bookings or visits when deleted. System-level users (e.g., admins) are not subject to automatic deletion. The feature processes deletions in small batches periodically. Organizations should carefully configure retention settings and communicate policies to users. Even after a user is deleted from the live system, their data remains in backups for a short period before being permanently erased. Complete user data retention policy of Skedda Inc. is found here: https://support.skedda.com/en/articles/6294354 Booking and visit data Skedda allows you to set a data retention period for past bookings and visits, with options ranging from 0 days to 7 years. The default retention period is one year. Bookings and visits older than the set retention period are automatically deleted. Repeating bookings are only deleted after the last occurrence falls outside the retention period. A shorter retention period helps comply with GDPR and similar regulations by minimizing unnecessary data storage, improving account performance. The retention period can be extended depending on your Skedda subscription, but changes in your subscription plan won’t automatically adjust this setting. For retention beyond 7 years, Skedda offers data export options so you can store booking and visit data externally. Complete booking and visit data retention policy of Skedda Inc. is found here: https://support.skedda.com/en/articles/5707504 Backup policy Skedda uses industry-standard encryption (AES-256) to protect all stored data, including databases, backups, and transaction logs. Access to the data is tightly controlled through firewalls, authentication, and role-based permissions. Data is regularly backed up with geo-redundancy, enabling restoration to a specific point in time in case of data loss. Backups are retained for 35 days. Skedda employs advanced database auditing, threat protection, and vulnerability assessments to monitor and secure data. These measures help detect and prevent unauthorized access and meet regulatory compliance, including GDPR. Data in transit is encrypted using TLS 1.2 or higher. All connections to Skedda are forced to use HTTPS, and additional security headers are implemented to prevent various attacks. Skedda supports secure login options like Single Sign-On (SSO) and OAuth 2.0. For password-based logins, strong encryption and multi-factor authentication are used. Staff access to customer data is restricted and monitored. Skedda adheres to various regulatory standards (e.g., ISO 27001, PCI DSS) and undergoes regular independent security assessments, including penetration testing. Skedda has a dedicated security team and processes in place for quickly addressing vulnerabilities and security incidents. Skedda Inc.'s complete backup policies can be found here: https://support.skedda.com/en/articles/589357

Data storage policy

Skedda ensures data security through industry-standard encryption, secure backups, advanced threat protection, and rigorous access controls. We use TLS encryption for data in transit, enforce strong password policies, and comply with regulatory standards like ISO 27001 and PCI DSS. Regular vulnerability assessments, automated monitoring, and independent penetration testing further enhance security. Skedda's team promptly addresses any security issues and provides real-time updates on service incidents. Skedda Inc. employs industry best-practice Technical and Organizational Measures for the protection of stored data. Please see our support article here: https://support.skedda.com/en/articles/589357 Additionally, Skedda offers a Data-Protection Agreement which can be requested from Skedda sales contacts.

Data center location(s)

United States

Data hosting details

Cloud hosted

Data hosting company

Azure

App/service has sub-processors

yes

Guidelines for sub-processors

https://support.skedda.com/en/articles/1719001

App/service uses large language models (LLM)

Certifications & compliance

Security