Skip to content

Security

Most online time trackers keep all of their customers in one big shared database, separated only by a “company ID” on every row. One missing filter in the code is enough for data to show up in the wrong place.

Clocknico is built differently. When you create your company account, we create a brand-new database just for you.

Typical shared setup

One database
Company A · projectCompany B · invoiceCompany C · employee Company B · clientCompany A · time entryCompany C · salary rate

Everyone's data in the same tables — kept apart only by code.

vs

Clocknico

Company A
projectstimeinvoices
Company B
projectsCRMHR
Company C
projectstimecosts

A separate database per company — physically apart.

Shared databaseClocknico
How data is separatedA company ID on every rowA separate database per company
Risk of seeing another company's dataOne missed filter can expose itYour session only ever connects to your database
Deleting your accountRows removed table by tableYour whole database is removed
Uploaded filesOften one shared bucketA folder per company, access-checked

Layers of protection

Your own database

Every company account gets a separate, isolated database. Your projects, time, CRM, invoices and HR records are never stored next to another customer's data.

Isolated files

Receipts, sick notes and other uploads are stored in a folder per company, and every download is checked against the company of the person asking for it.

Encrypted connections

All traffic uses HTTPS with HSTS. Session cookies are secure and HTTP-only.

Roles & departments

Owner, admin, manager and member roles — plus departments and client assignments — decide who sees which clients, projects and records.

Sensitive data stays private

Hourly cost rates, profitability and finances are visible to managers and admins only. Medical documents are visible only to admins and the employee.

Modern sign-in

Sign in with Google or Microsoft, or with a password stored only as a strong one-way hash. Repeated wrong passwords are rate-limited.

One-time links

Invitation and password-reset links work once and expire (7 days and 1 hour). We never send passwords by email.

Leave any time

Export your time data to CSV whenever you like. If you close your account, your company's database is deleted as a whole.

Questions about security?

Ask us anything about how Clocknico stores and protects your data.

Contact us Start for free