Security overview for IT admins
Last updated November 2026
This page is written for Zoom administrators evaluating whether to approve RegistrantReminders for their account.
What the app does
It emails registrants of Zoom Meetings with registration: a calendar invite when they register, reminders before the meeting, and calendar updates if the meeting moves or is cancelled. It is read-only with respect to Zoom.
Zoom scopes requested
| Scope | Why |
|---|---|
user:read:user | Identify the connecting host (name, email, timezone). |
meeting:read:list_meetings | List upcoming meetings to find those with registration. |
meeting:read:meeting | Read meeting settings and recurring occurrences. |
meeting:read:list_registrants | Read registrant names, emails and personal join links. |
No write scopes. The app cannot create, edit or delete meetings, registrants or recordings.
Webhooks
We subscribe to meeting created/updated/deleted, registration created/approved/cancelled/denied, and app deauthorized. Every webhook is verified with Zoom's HMAC signature and timestamp before processing.
Data stored
- Host: name, email, Zoom user id, OAuth tokens (encrypted at rest with AES-256).
- Meetings: topic, agenda, schedule, settings.
- Registrants: name, email, registration time, personal join URL (encrypted at rest, never written to logs).
- Email log: what was sent to whom, when, and the delivery outcome.
Retention and deletion
When the app is removed from a Zoom account (deauthorized), all Zoom-derived data for that account is purged within 3 days, inside Zoom's 10-day requirement. Hosts can also disconnect from inside the app at any time. Account deletion removes everything.
Infrastructure
- Hosted on managed servers provisioned by Laravel Forge, behind Cloudflare, TLS everywhere.
- Email is delivered by Postmark over authenticated SMTP with DKIM; customer domains are verified before use.
- Payments are handled by Stripe. We never see card numbers.
- Admin access is limited to an allowlist; impersonation for support is logged and visible to the user by a banner.
Approving the app
In the Zoom Marketplace, open Manage → Admin App Management, find RegistrantReminders and choose Approve. Zoom's documentation: Managing app approval.
Questions: support@registrantreminders.com.