Network-based check-in
When Kadence Agent is running on a user's device, it checks whether the user is physically in an office by comparing their public IP address against a list of approved IP ranges.
These approved IPs:
Are configured by Global Admins in Kadence
Represent known corporate networks for specific office buildings
Can be individual IP addresses or CIDR ranges
Are fully managed by the customer inside the Kadence platform
Some organizations also enable Enhanced Network Detection, an optional feature that reads two additional signals from the device — its internal IP address and the WiFi access point (BSSID) it's connected to — to identify which floor a user is on, not just which building. This is configured by your Kadence admin; see Enhanced Network Detection for the Kadence Agent for full details.
What happens during check-in
The Kadence Agent sends a request to:
https://api.onkadence.co/v1/ip-check-inKadence determines the user's public IP address as seen by Kadence's cloud infrastructure
That IP address is compared in real time against the configured trusted IP ranges
If Enhanced Network Detection is enabled for the building, Kadence also compares the device's internal IP address and/or WiFi access point against the floor-level connections the admin has configured, to refine detection down to a specific floor
If:
Kadence Agent is installed
A match is found
Automatic check-in is enabled
The user has an active booking
The user is automatically checked in to the corresponding building (and floor, if Enhanced Network Detection is on and a floor-level match is found)
Privacy and security
Kadence Agent is designed with privacy and security as core principles:
Network details (public IP, and internal IP/WiFi access point when Enhanced Network Detection is enabled) are only used momentarily to perform the match
These details are not stored or retained beyond the request lifecycle
No GPS or geolocation data is used, on any platform. On Macs, if your organization enables Enhanced Network Detection, macOS requires a one-time Location Services permission prompt before it will share WiFi access point details with any app — this is an Apple operating system requirement for reading WiFi hardware information, not GPS tracking, and Kadence does not receive your geographic location through it
No browsing, traffic, or app-usage data is collected
All communication is encrypted using TLS
Processing is limited strictly to enabling check-in functionality
What Kadence Agent does not do
It does not track a user's real-world or geographic location
It does not monitor browsing or network activity
It does not store IP addresses or WiFi access point details
It does not use WiFi network names (SSIDs), Bluetooth, or broader device identifiers. When Enhanced Network Detection is enabled, it reads only the identifier (BSSID) of the specific access point the device is currently connected to — never nearby networks or other devices
Summary
Kadence Agent works by confirming presence in an office through network verification, not location tracking. It provides a secure, privacy-first way to automate check-ins using trusted corporate IP ranges configured by your organization — optionally extended to floor-level precision via Enhanced Network Detection.