Enterprise-Grade Security
Your employee data is sensitive. We treat it that way. Here is what Cloud Time Manager does to protect it.
Security & Data Protection
- Encrypted in Transit
Every connection to Cloud Time Manager is encrypted in transit with TLS 1.2 or higher.
- Biometric Consent
Workers consent before face enrollment, and that consent is recorded with the template.
- Retention You Control
Biometric data is deleted after a retention period your admin sets.
- Hashed PINs
Kiosk PINs are stored as keyed hashes, never in plain text.
- Encrypted at Rest
Biometric templates and consent records are encrypted at rest with AES-256.
- Role-Based Access
Admins, managers and workers each see only what their role allows.
Security Features
Role-Based Access Control
Granular permissions ensure employees only see their own data. Managers see their team. Admins see everything.
Single Sign-On (SSO)
Enterprise SSO via SAML 2.0 with Okta, Azure AD, Google Workspace, and other identity providers.
Audit Logging
Administrative actions are logged with user, timestamp and IP address.
Session Control
Admins can revoke every active session for a user in one step, on every device.
Security Questions?
Our security team is happy to answer any questions about our infrastructure or
data practices.