# Contact Pro
We understand that our customers need to be confident using Contact Pro, and be aware of our data collection practices.
Note
This section is subject to change and we recommend that you check back quarterly for updates.
# Data Management Practices
Through the implementation of its different features, Contact Pro access, processes and stores several kind of data:
- Contact properties
- Contact Configuration
- Users data
Here is how we're managing data for these different categories:
Data | Accessed | Cached | Stored | Notes |
---|---|---|---|---|
User profiles | ✔ | ✔ | ✔ | Accessed and updated after each login. Stored as long as the organization is active. |
Contact Configuration | ✔ | ✔ | ✔ | Accessed and updated after creation of a tab. Stored as long as the organization is active. |
Contact properties | ✔ | 🚫 | ✔ | Accessed and updated of using the app. Stored as long as the organization is active. |
User data | ✔ | 🚫 | ✔ | Users data (AAD ID, UPN). Stored as long as the organization is active. |
Teams channel | ✔ | 🚫 | 🚫 | Name and unique ID of the channel. No cache. Stored as long as the organization is active. |
Teams conversations | 🚫 | 🚫 | 🚫 | No access. No cache. No storage. |
Teams files | 🚫 | 🚫 | 🚫 | No access. No cache. No storage. |
# Microsoft Graph
Scope | Description | Justification | Admin Consent Required |
---|---|---|---|
User.Read | Retrieve the properties and relationships of user object. | Allows Contact Pro to read user information and to display it in the UI. | No |
email | Gives the app access to the user's primary email address in the form of the email claim | No | |
openid | Used to sign in with OpenID Connect | No | |
offline_access | Gives thee app access to resources on behalf of the user for an extended time. | When a user approves the offline_access scope, Contact Pro can receive refresh tokens from the Microsoft identity platform token endpoint. Refresh tokens are long-lived. Contact Pro can get new access tokens as older ones expire. | No |
profile | Gives the app access to basic information about the user in the claims. | No |
TIP
The Azure AD App ID is: b2380441-bb33-439e-bf4a-8cd277dcebc8
# Architecture and flow diagram
# Microsoft Teams Apps Security and Compliance
Microsoft works with our Microsoft 365 developer partners to provide the information organizations need to expedite and inform decisions about Microsoft Teams Apps and add-ins they use. The information is supplemented with information from the Microsoft Cloud App Security app catalog and information provided by the developers when they submit their applications. This security, data handling, and compliance information is intended to help organizations assess and manage risk in using these apps.
# Resource Endpoints
All the traffic from and to the TeamsPro platform uses HTTPS protocol on port 443. Here is a short description of each flow:
Name | Comments |
---|---|
contacts.teams-pro.com | for the apps including help contents |
.msecnd.net and *.visualstudio.com | for performance metrics analysis |
# Dependencies
# Client
Name | Version | Url | Licence |
---|---|---|---|
@azure/msal-browser | 2.30.0 | https://github.com/AzureAD/microsoft-authentication-library-for-js | MIT |
@fluentui/react-northstar | 0.64.0 | https://github.com/microsoft/fluentui | MIT |
@microsoft/applicationinsights-react-js | 3.4.0 | https://github.com/microsoft/applicationinsights-react-js | MIT |
@microsoft/applicationinsights-web | 2.7.0 | https://github.com/microsoft/ApplicationInsights-JS | MIT |
@microsoft/microsoft-graph-client | 3.0.2 | https://github.com/microsoftgraph/msgraph-sdk-javascript | MIT |
@microsoft/teams-js | 2.12.0 | https://github.com/OfficeDev/microsoft-teams-library-js | MIT |
@microsoft/teamsfx | 2.0.0 | https://github.com/OfficeDev/TeamsFx | MIT |
@reduxjs/toolkit | 1.9.5 | https://github.com/reduxjs/redux-toolkit | MIT |
@types/react | 18.2.18 | https://github.com/DefinitelyTyped/DefinitelyTyped | MIT |
@types/react-dom | 18.2.7 | https://github.com/DefinitelyTyped/DefinitelyTyped | MIT |
@types/react-router-dom | 5.3.3 | https://github.com/DefinitelyTyped/DefinitelyTyped | MIT |
axios | 1.4.0 | https://github.com/axios/axios | MIT |
env-cmd | 10.1.0 | https://github.com/toddbluhm/env-cmd | MIT |
2.1.0 | https://github.com/jprichardson/node-google | MIT | |
history | 5.3.0 | https://github.com/remix-run/history | MIT |
moment | 2.29.3 | https://github.com/moment/moment | MIT |
react | 18.2.0 | https://github.com/facebook/react | MIT |
react-dom | 18.2.0 | https://github.com/facebook/react | MIT |
react-hook-form | 7.47.0 | https://github.com/react-hook-form/react-hook-form | MIT |
react-query | 3.39.3 | https://github.com/tannerlinsley/react-query | MIT |
react-quill | 2.0.0 | https://github.com/zenoamaro/react-quill | MIT |
react-redux | 8.1.1 | https://github.com/reduxjs/react-redux | MIT |
react-router-dom | 6.14.2 | https://github.com/remix-run/react-router | MIT |
react-scripts | 5.0.1 | https://github.com/facebook/create-react-app | MIT |
sass | 1.64.2 | https://github.com/sass/dart-sass | MIT |
tinycolor2 | 1.6.0 | https://github.com/bgrins/TinyColor | MIT |
typescript | 5.1.6 | https://github.com/Microsoft/TypeScript | Apache-2.0 |
web-vitals | 2.1.4 | https://github.com/GoogleChrome/web-vitals | Apache-2.0 |
# Server
Name | Version | Url | Licence |
---|---|---|---|
AspNetCore.HealthChecks.Publisher.ApplicationInsights | 3.1.1 | https://github.com/xabaril/AspNetCore.Diagnostics.HealthChecks | |
AutoMapper | 10.1.1 | https://github.com/AutoMapper/AutoMapper | MIT |
AutoMapper.Extensions.Microsoft.DependencyInjection | 7.0.0 | https://github.com/AutoMapper/AutoMapper.Extensions.Microsoft.DependencyInjection.git | |
Azure.Storage.Blobs | 12.17.0 | https://github.com/Azure/azure-sdk-for-net | MIT |
Azure.Storage.Queues | 12.15.0 | https://github.com/Azure/azure-sdk-for-net | MIT |
ClosedXML | 0.95.4 | https://github.com/ClosedXML/ClosedXML.git | MIT |
Microsoft.AspNet.WebApi.Client | 5.2.7 | https://github.com/aspnet/AspNetWebStack | |
Microsoft.ApplicationInsights | 2.16.0 | https://github.com/Microsoft/ApplicationInsights-dotnet | MIT |
Microsoft.ApplicationInsights.AspNetCore | 2.16.0 | https://github.com/Microsoft/ApplicationInsights-dotnet | MIT |
Microsoft.ApplicationInsights.SnapshotCollector | 1.3.7.5 | https://www.nuget.org/packages/Microsoft.ApplicationInsights.SnapshotCollector/1.3.7.5 | |
Microsoft.AspNetCore.OData | 7.5.12 | https://github.com/OData/WebApi.git | MIT |
Microsoft.Azure.Cosmos | 3.22.1 | https://github.com/Azure/azure-cosmos-dotnet-v3 | |
Microsoft.Identity.Web | 2.13.2 | https://github.com/AzureAD/microsoft-identity-web | MIT |
Microsoft.Identity.Web.MicrosoftGraph | 2.13.2 | https://github.com/AzureAD/microsoft-identity-web | MIT |
Swashbuckle.AspNetCore | 6.2.3 | https://github.com/domaindrivendev/Swashbuckle.AspNetCore.git | MIT |
Swashbuckle.AspNetCore.Swagger | 6.2.3 | https://github.com/domaindrivendev/Swashbuckle.AspNetCore.git | MIT |
Swashbuckle.AspNetCore.SwaggerGen | 6.2.3 | https://github.com/domaindrivendev/Swashbuckle.AspNetCore.git | MIT |
Swashbuckle.AspNetCore.SwaggerUI | 6.2.3 | https://github.com/domaindrivendev/Swashbuckle.AspNetCore.git | MIT |
Microsoft.AspNetCore.Mvc.NewtonsoftJson | 6.0.20 | https://github.com/dotnet/aspnetcore | MIT |
Microsoft.AspNetCore.SpaServices.Extensions | 6.0.20 | https://github.com/dotnet/aspnetcore | MIT |
Microsoft.Extensions.DependencyInjection | 6.0.1 | https://github.com/dotnet/runtime | MIT |
Newtonsoft.Json | 13.0.3 | https://github.com/JamesNK/Newtonsoft.Json | MIT |