Security and privacy.
What TimeSpark does with your people's data, and how it's kept safe, in plain words.
At your site
- Nothing needs opening upThe site agent only ever makes outbound connections, the same as a web browser. Nothing on your network accepts connections from outside, and there are no firewall changes or VPNs to set up.
- Encrypted on the wayClockings travel from the agent to TimeSpark over HTTPS.
- Terminal passwords kept safeThe credentials TimeSpark uses to manage your terminals are stored encrypted.
- Nobody needs the terminal's passwordChecking who's on a terminal, and why someone would be refused, is done from TimeSpark. The device's password never has to be handed round.
Who sees what
Who can see an employee's sickness record in your business today? In most systems, any manager.
- Each manager sees their own teamSickness is health data. A manager sees their own team's attendance, holiday, timesheets and clockings, and nobody else's.
- HR sees everyoneHR and company administrators see the whole company. It's only managers who are limited to their teams.
- Five levels of accessPlatform admin, company admin, HR admin, manager and employee. Each sees only what their role needs.
- Requests stay with the right peopleHoliday requests go to the person's own managers, not to every manager in the company.
In TimeSpark
- Hosted in the UKTimeSpark runs on servers in the UK, with HTTPS throughout.
- Protected passwordsPasswords are stored as one-way hashes, never as plain text.
- Face ID and fingerprint sign-inPeople can sign in the way they unlock their phone, instead of typing a password.
- Backed up every nightAnd we test restoring from the backups, so we know they work.
Photos and faces
Face recognition is a door check, not surveillance.
- Only at the doorTerminals recognise people when they clock in and out. That's all they're used for.
- Kept for 30 daysEach clocking keeps a photo for 30 days so a disputed clocking can be settled. Then it's deleted.
- Only managers see themClocking photos are visible to managers, not to other staff.
- Leavers removedWhen someone leaves and is archived, their face is taken off every terminal.
A record you can stand behind
- Clockings are never changedWhat the terminal recorded stays exactly as it was.
- Every correction is signedEach one is a separate record with who made it, when, and why. Withdrawn corrections stay on the record too.
- Overtime is agreed firstIt's held until a manager approves it, and the approval is recorded.
If your data protection lead has questions, we'll answer them in detail. Ask when you book a demo.
See it working with your own rotas.
A fifteen-minute demo, with a real terminal. Bring your questions about rotas, nights, payroll and broadband.
- The morning check your managers see first
- A clocking at the terminal, appearing with its photo
- A timesheet traced back to its clockings
- A correction, with the original left untouched
- Holidays and rotas on the wallchart, and the phone app