> ## Documentation Index
> Fetch the complete documentation index at: https://docs.humanintelligence.com/llms.txt
> Use this file to discover all available pages before exploring further.

# Envoy

> Connect workplace data—visitors, employees, locations, and reservations—to analyze attendance and space utilization.

Envoy uses **OAuth 2.0** to securely authorize access to your workplace data. When you click **Connect**, you'll be redirected to Envoy to sign in and approve the requested permissions. After approval, Envoy returns a short-lived access token plus a refresh token that we use to keep the connection live without storing your password.

## Who can connect

Envoy requires a **Global Admin** account to authorize the integration. The connection requires approval of requested scopes.

## What we read

We request **read-only** access to the following resources. You can revoke these permissions at any time from your Envoy admin settings.

| Data Type                    | What it enables                                            |
| ---------------------------- | ---------------------------------------------------------- |
| Companies & Locations        | Mapping office sites and tenant configuration.             |
| Employees                    | Linking workplace activity to your people roster.          |
| Visitors, Invites & Entries  | Tracking on-site visits, sign-ins, and host activity.      |
| Spaces, Desks & Reservations | Measuring desk and room utilization across your locations. |
| Work Schedules               | Understanding scheduled in-office attendance patterns.     |
| Sign-in Flows                | Configured visitor sign-in workflows.                      |
| Devices                      | Inventory of registered devices.                           |
| Blocklists                   | Configured visitor blocklist rules.                        |
| Deliveries                   | Inbound package and mailroom activity.                     |
| Audit Logs                   | Admin activity history for the workplace tenant.           |

## Security

* **Read-Only Access:** All scopes are read-only. We never write back to your Envoy account.
* **Token Rotation:** Access tokens expire every 24 hours and are refreshed automatically. Refresh tokens rotate every 30 days.
* **Revocation:** You can disconnect at any time from this page or by removing the app from your Envoy admin dashboard.