Control that actually scales with your team
Most tools stop at file-level sharing. Callender goes further — because a calendar full of client details deserves better.
Paragraph-level permissions
Grant or revoke access to individual sections of a document. The receptionist sees booking notes; only the doctor sees the medical history in the same file.
Roles, teams and guests
Model your real organisation: owners, admins, staff, external partners. Each role carries its own default scopes, and one-off guest access expires on its own.
AI agents obey the same rules
The voice agent, workflow automations and integrations all act under scoped identities. An agent cannot read or write beyond the permissions you gave it.
24-hour audit log
Who viewed what, who changed what, when, and from where — every event is recorded and searchable, so reviews and compliance checks take minutes, not days.
A clinic, three roles, one file
Imagine a patient record shared across your practice. With Callender, one document safely serves three very different audiences at once.
Sees the contact details and the visit schedule — enough to greet the patient and manage bookings, nothing clinical.
Sees the full record, including treatment notes, and every edit is stamped with their identity in the audit trail.
Can read availability and write appointments, but the clinical paragraphs are simply invisible to it — enforced by the permission layer, not by prompt engineering.
Frequently asked questions
How fine-grained can permissions really get?
Down to a single paragraph within a file. You can also set permissions at the file, folder, calendar and workspace level — finer settings always override broader ones.
How long are audit logs retained?
Logs are captured continuously, 24 hours a day, and retained according to your plan and compliance needs. Export to your own SIEM or storage is supported.
Do permissions apply to the AI voice agent too?
Yes. Agents authenticate as scoped identities and go through exactly the same permission checks as human users — there is no side door.