Cisco Spark Security

End-to-end encryption of content

Cisco Spark uses industry-leading encryption to ensure data remains confidential, available and secure at all times.

The Cisco Spark app encrypts your data before it leaves your device. Data stays encrypted when it's in transit to our cloud servers; when we process your data (data in-use) and when we store it (data at-rest).

Encryption of all content is done using dynamic keys from the key management server (KMS). There is a unique key per Cisco Spark space, which only authorised members of the space will be allowed access to obtain. Cisco Spark messaging content, files and Cisco Spark Board content are encrypted using keys from key management server.

Encryption in transit

We use Secure HTTP (HTTPS) to encrypt data in transit between your device and our servers, which protects the identities of the senders and receivers of the encrypted content.

All media in Cisco Spark, such as voice, video, desktop share and white boarding are transmitted using Secure Real-Time Transport Protocol (SRTP; is defined in RFC 3711). Currently, the Cisco Spark Platform decrypts real-time media for mixing, distribution and public switched telephone network (PSTN) trunking and demarcation purposes.

Authorisation and authentication

Only people who have successfully authenticated with our service can view messages and files in Cisco Spark spaces. Unauthorised people who try accessing the URL of a space can’t see what has been shared.

Cisco Spark Hybrid data security (Spring 2017)

The cornerstone of end-to-end content encryption in the Cisco Spark Platform is a component known as the key management server (KMS). The KMS is responsible for creating, storing, authorising and providing access to the encryption keys that the Cisco Spark app uses to encrypt and decrypt messages and files. End-to-end encryption in Cisco Spark is possible because of the architectural and operational separation between the KMS and the rest of the Cisco Spark Platform. Think of them as being in separate realms, or trust domains, in the cloud: The KMS is in the security realm and all other component services that make up Cisco Spark are in the core. Security-conscious enterprise customers may choose to deploy the security realm services, including the KMS, on their own premises.

The upcoming Hybrid Data Security (limited availability release) will include:

  • On-site deployment of the security realm through the Cloud Collaboration Management portal (CCM)
  • Key management services. (Bring your own DB for storage of keys.)
  • Search indexer: Create and encrypt search indexes, submit encrypted search terms for content searches.
  • eDiscovery on-site engine: While the eDiscovery UI will be hosted in the cloud, the engine remains on-site for customers who opt to deploy HDS in their data centres.
  • Auto-upgrades, alerts and notifications.
  • Local logs/audits of access to keys.

Compliance with legal and regulatory obligations

Compliance that works on encrypted content (Spring 2017)

Organisations using Cisco Spark need access to the content stored in their spaces for compliance and governance purposes.

The Cisco Spark compliance module is a distributed component in the Cisco Spark security architecture that sits in the security realm along with the Key Management Server (KMS). The Cisco Spark compliance module works with the encrypted content in the Cisco Spark Platform and produces a clear-text feed of activities and content to enable monitoring and extraction into a separate company-owned repository.

The search and extraction console for eDiscovery is the first tool in the Cisco Spark compliance portfolio to use the Cisco Spark compliance module to provide ad-hoc access to data.

Extraction console for eDiscovery and auditing (Spring 2017)

Cisco Spark compliance administrators with sufficient access privileges can query Cisco Spark for content in the spaces they own and download the results in the form of a JSON or CSV file. Results can be imported into Microsoft Excel or full eDiscovery software for further processing.

The Cisco Spark compliance console supports search based on space ID, email ID, date, keywords or a combination of attributes.

The resulting space activity details and content, including text messages and file names, sizes, types and URLs are consolidated in the form of a CSV or JSON file. Files (pictures, Microsoft Office documents, PDFs, etc.) are also attached in original format.

Organisation-wide retention policy (Spring 2017)

In the Cisco Cloud Collaboration Management portal (CCM), Cisco Spark administrators can define how long content is stored in all the spaces owned by the organisation. Cisco Spark will delete messages and files when their timestamps match the retention limit. The default for this setting is “indefinitely”.

Users can view the retention policy of spaces in which they are participating, by accessing the information icon.

Mobile device management (Spring 2017)

Mobile devices running Cisco Spark can be further secured by requiring that the PIN device be configured. This is an organisation-wide admin setting. This is in addition to all Cisco Spark content being encrypted at-rest in the device.

Administrators can force the Cisco Spark browser session to time out when accessing Cisco Spark outside of the company’s intranet. This offers protection against users leaving browser sessions open inadvertently in public places.

Cisco Spark administration

Programmatic APIs for user provisioning

Cisco Spark for Developers includes administration APIs that allow administrators to programmatically provision a user or the entire organisation. By automating administration, user management and provisioning can be centralised in an existing tool. For example, a partner selling multiple collaboration tools to customers can use these APIs to enable Cisco Spark provisioning through a centralised portal.

Using these APIs, an admin can:

  • Create a user
  • Update a user
  • View licence usage of an organisation
  • View available roles of an organisation

Cisco Spark meetings, messaging and calling


Cisco Spark brings people together to collaborate, discuss and make decisions in instant and scheduled meetings. In-app audio and video calling pulls the people in your space together for a huddle, with one tap. Meetings powered by Cisco WebEx provide an even more productive meeting environment. All Cisco Spark meetings allow screen sharing and a variety of tools for interactive creative work.

Basic Meetings

Instant meetings

Share video, screen share and use interactive drawing and white boarding within the Cisco Spark app with up to 25 users. Just tap the Call activity circle to start your meeting. Anyone in the space can join or add guests from outside of the space.

Join from desktop, mobile or room device endpoints

Join a meeting in the Cisco Spark app from Cisco Spark Board, any Cisco Spark room device or Cisco phones registered to Cisco Spark.

Simplified scheduling with @spark

With Hybrid Calendar Service, you can add @spark to your Microsoft Outlook invite to automatically create a new Cisco Spark space for all the people in your meeting. People can just click the link at the bottom of your invite to join.

Advanced Meetings (Summer 2017)

Instant meetings

Share video and screen share with up to 200 people.

Join from any device

Join meetings from any browser, from desktop and mobile devices, on phones via the public switched telephone network (PSTN), from Cisco Spark room devices, Cisco phones registered to Cisco Spark, Microsoft Skype for Business endpoints, third-party standards-based video endpoints and more.

Personal meeting room with a unique url

Each user gets a Personal Room with its own, customisable persistent URL and URI to make scheduling and joining meetings easy.

Simplified scheduling with @spark and @webex

Using Cisco Spark Hybrid Services makes it easier to schedule meetings and create Cisco Spark spaces. The Calendar Service in Advanced Meetings allows you to add @webex to your Microsoft Outlook invite, which automatically populates the body of your email invite with your Cisco WebEx meeting information. Users can also add @spark to their Microsoft Outlook invite, which will create a Cisco Spark space and add the meeting to that space.

Cisco Spark Board

The Cisco Spark Board is a touch-based, three-in-one collaboration device that combines wireless presentation, interactive digital white boarding and video conferencing. It’s designed for rich team collaboration, securely connecting physical and virtual meeting spaces so that teams can work together any time before, during and after meetings.


The mobile-first Cisco Spark messaging experience is designed to keep agile, remote teams connected in secure virtual work spaces. Persistent individual and group conversations with contextual file sharing allow people to jump in and contribute as time permits. Teams discuss, share and make decisions on a rolling basis. Audio and video calling capabilities are right there in the app.


Create and name Cisco Spark spaces for individual projects or topics so users can find conversations easily.

Search and Filter

Do secure searches for information, files, people, teams or spaces. Filter a search to limit it to specific spaces or specific people’s messages.


Call attention to important messages by tagging a person’s name in the message. Prioritise for your own reading those messages someone has tagged for you.


Prioritise important spaces by making them favourites. Then filter for favourite spaces for easy viewing.


Flag any message to make sure you view it later.

Filter view

Zero in on relevant information (unread messages, private messages, favourites, mentions or flags).

Content preview

Preview files on any device, so you can view before downloading.

Content upload from mobile

Upload files stored in the cloud to Cisco Spark – from your mobile device.


Receive notifications on all the devices you use for Cisco Spark. You can choose to be notified when a message is posted to a space in which you are mentioned, when you are added to a conversation or when you receive a call. Tailor your notifications for individual spaces and teams. Turn them on and off as needed.

Security and encryption

Cisco Spark encrypts messages, files and room names on your device before sending them to the cloud. Content arrives at our servers in encrypted form and is processed (data in use) and stored (data at rest) in its encrypted state until it is decrypted on the intended recipients’ devices.

Learn more

Space moderation and team moderation

When the teamwork is sensitive, lock spaces and assign moderators. Then only a moderator can add or remove people, edit the space name or delete others’ messages and files. Moderators can also assign co-moderators.

Care Assistant (paid plans)

Cisco Spark's built-in Care Assistant automatically connects people to subject matter experts, making it ideal for internal support and help desks.

Languages supported

Cisco Spark messaging supports multiple languages.


Cisco Spark calling is built on a cloud-based phone service perfect for small to mid-size organisations, offering the benefits of traditional phone systems without the expense and complexity of on-site deployment. Alternatively, connect your existing Cisco Unified Communications Manager call control infrastructure to your Cisco Spark service through Cisco Spark Hybrid Services. Our partners can help with your PSTN and other connectivity services.

Cisco Spark also offers a range of IP and video IP phones.

Learn more: Cisco Spark Hybrid Services


Audio and video calls with internal and external participants

  • Make and receive audio calls from phones registered to your Cisco Spark service. Dial international, national or local formats.
  • Make and receive internal video calls through registered phones, or within the app.
  • Place video calls to other businesses or people by dialling their SIP user/room identifier.

Calls from the Cisco Spark app

Make and answer your calls in the Cisco Spark app. When called, your phone and the app ring at the same time.

Apple iOS 10 integration

The Cisco Spark Call app for Apple iOS 10 tightly integrates with your Apple iPhone via Apple’s Callkit. Use the built-in dialler to make Cisco Spark calls.

Turn calls into meetings

Calling another Cisco Spark user automatically creates a Cisco Spark space for screen sharing, file sharing and messaging.

Cisco Spark Phone – Cisco Spark app integration for desk phone control

Initiate, end, answer or decline a phone call using your Cisco Spark IP desk phone, by clicking a button from within the app.

My Cisco Spark portal for users

Customise your phone settings, generate a device activation (QR) code and personalise call features such as single number reach, do not disturb and call forward.

Directory-based dialling

Access and call corporate directory contacts from the Cisco Spark phone or app.

Personal contacts on IP phones

Add your personal contacts on Cisco Spark IP phones. Then add shortcuts to a local contact in your directory or call history.

Speed dials with status monitoring

Configure speed dials in your Cisco Spark IP phone. If you’re calling a Cisco Spark user, the line status is shown in the line key.

Single number reach

Give people a single number at which to reach you. Answer your calls on your desk or mobile phone.

Do not disturb

Turn off your ringer for incoming calls.

Decline a call with a message on Cisco IP phone 8800

Decline a call and send a Cisco Spark message (“Can I call you later?”) with the touch of a button.

Call hold and resume, with video

Let callers hear music with video while waiting for you.

Caller ID mapping

Set your caller ID to display during a call. Choose to display your personal line or the official company number.

Shared lines

Configure a single phone or extension number for multiple users.

Multiple calls per Line

Receive eight simultaneous calls per line – ideal for receptionists and broadcast hunt groups.

Call forward

Forward your calls to any number you choose.

Call transfer

Transfer a call in progress to another person.

Call park

Put phones in common areas such lobbies (for assistance) or classrooms.

Ad-hoc video conferencing

Initiate an unscheduled audio or video call with up to two other parties.

Emergency services dialing

Dial emergency services (999 in UK). Providing your organisation, phone number and device is supported, so that the emergency service has your address and callback number.

Hunt groups

Configure a collection of telephone numbers to ring in a specific order based upon a ringing algorithm. Monitor your login status through a line key.

Auto Attendant or virtual receptionist

Set Auto Attendant to greet callers and route them to employees or departments. Includes time-of-day routing with time-zone support, holidays, route-to actions and submenus.

Message waiting indicator

You’ll be notified by the message waiting indicator (MWI) when you have unheard voicemail.

Voicemail and voicemail to email

Check voicemail from any phone. Your voicemail follows you so you can listen and respond promptly. You can also receive an email with the audio file as an attachment.

Key expansion module on Cisco IP Phone 8800 family

Add line keys for additional functionality – ideal for receptionists.

Analogue telephone adaptor 190sc

Connect analogue phones, fax machines and other UK FXS devices to make and receive calls and DTMF. With support for T.38 Fax.

Cisco Spark calling hardware

Cisco IP Phone 7832

An effective conferencing station with superior HD audio. Recommended for executive offices and small meeting rooms with up to six participants.

Video conferencing room-based endpoints

Connect your physical conferencing rooms to your Cisco Spark service with Cisco Collaboration Endpoints (DX, SX and MX product families). Requires an additional room licence.

Cisco Spark calling administrative features

Administration, management and analytics (Cloud Collaboration Management)

Use the Cisco Cloud Collaboration Management Portal

  • Manage your users, services and your global and granular configurations.
  • Access support, trouble ticketing and service performance.
  • Analyse how Cisco Spark is being used.

Connection tests

Run a health check from Cisco Spark or perform the Cisco Spark Network test (Mozilla Firefox or Google Chrome).

Get notifications about maintenance events and reported incidents. Choose email or SMS alerts.

Single sign-on (SSO)

Simplify authentication for your users and user management by authenticating against a directory using SAML2.0. Includes ADFS2.0 and 3.0, Google Apps, Okta, Microsoft Azure AD, Shibboleth and more.

Active directory synchronisation

Synchronise your company’s Active Directory and mirror it to the cloud for Cisco Spark user accounts. Your user list remains the single source of truth.

Manage telephone (DID) numbers

Get a visual aid of the mapping between DIDs, users and extension numbers.

Company Number configuration

Designate a telephone number as your company number. Use it as a Caller ID option for any user dialling out from the company.

Multiple extension number ranges

Configure multiple extension ranges for your users’ extensions.

Variable length extension number

Configure your system extension numbers with 3–5 digits.

Class of service – international

Configure international numbers dialling on a per-company and per-user basis.

Department and foyer phone configuration

Put phones in common areas such foyers (for assistance) or classrooms.

Local time display

Maintain your company time zone, and separately configure local time on a per-device basis –ideal for remote workers.

Preferred language settings

Set up a preferred language for your users to interact with their phones and portal. Languages supported: English (US and UK), Spanish (for Latin America), French (Canada).

Customer reports

Monitor your users’ system usage, quality experienced and endpoints registered.

Cisco Spark PSTN Preferred Media Partner Ecosystem

Cisco Spark service does not include PSTN services. Customers need to purchase PSTN services from a third-party provider listed below. Our partners can provide PSTN local, long-distance and direct-inward-dial services.

Intelepeer (USA)

PSTN voice services fully integrated with Cisco Spark calling for a complete business calling solution.

Visit Intelepeer

TATA Communications (USA)

Global SIP Connect for Cisco Spark calling offers a suite of basic PSTN calling features with a single flat rate for domestic calls. This enables smaller businesses to access Tata Communications’ worldwide network and international calling rates that were previously only available to the largest multinational enterprises.

Visit TATA Communications

Supported devices and applications for Cisco Spark

Cisco Spark app

  • Android Smartphones – Jellybean 4.1 and later
  • iPhone and iPad – iOS 9.0 and later
  • Mac – OS X Maverick 10.10 and later on a supported Mac
  • Web – Google Chrome (latest), Mozilla Firefox (latest), Internet Explorer 11
  • Note Cisco Spark calling is available only on Mozilla Firefox.
  • Windows PCs – Windows 7 and later

Cisco Spark Room devices

  • Cisco Spark Board
  • Cisco TelePresence SX10 Quick Set
  • Cisco TelePresence SX20 Quick Set
  • Cisco TelePresence SX80 Codec
  • Cisco TelePresence MX200 G2
  • Cisco TelePresence MX300 G2
  • Cisco TelePresence MX700
  • Cisco TelePresence MX800
  • Cisco Spark Board

Desktop devices and IP and video IP phones (desk phones)*

  • Cisco DX70
  • Cisco DX80
  • Cisco IP Phone 7811, 7821, 7841, 7861
  • Cisco IP Phone 8811, 8841, 8845, 8851, 8861, 8865

Phone accessories

  • Key expansion modules: add buttons to your phone
  • Add line keys for additional functionality – ideal for admin assistants.
  • Supported on 8851, 8861, 8865 Phones.

* Cisco IP Phone models 8821 and 8831 are not supported