Security and your data

How your data is kept, and kept apart

ReliTime holds your people's hours, your rates and your invoices. This is how that data is kept, who can see it, and what the application itself is not allowed to do with it.

Where it lives and who can get in

Hosted in Singapore

The application's servers and its database both run in Singapore, and everything is served over HTTPS.

A second factor for administrators

Owners and administrators sign in with an authenticator app as well as a password, set up by scanning a code on screen. Repeated sign-in attempts are limited.

Access checked on every request

Whether someone still belongs to your organisation is checked on every request, not only at sign in, so a person who leaves loses access straight away.

Your organisation, kept apart

Separated where data is read

Every query is scoped to your organisation by the code that reads the database, which cannot be built without it. It is not a filter somebody has to remember to add.

Linked records cannot cross over

A job, a phase or a time entry is tied to its organisation in the database itself, so a record in one organisation cannot point at one in another.

Roles that mean something

Members see their own time. Approvers see the work and what it is worth. What a person costs the business is visible to administrators only.

Records the application cannot quietly change

Nothing is deleted

Time entries, approvals, invoices and payments cannot be deleted, even by the application itself: the database refuses the request. A correction is a new entry that keeps the original.

The application is not the owner

The application connects to its database with an account that owns nothing and may change only named columns, so it cannot switch off the rules that protect the records.

Everything is audited

Every change of state is written to an audit log with who made it, when, and what it was before and after. Downloading everyone's time entries is recorded there too.

No third parties in the page

The application loads no scripts, fonts or analytics from anyone else, and its security policy refuses them. It switches off the browser's access to location, the camera and the microphone. This site goes further and runs no script at all.

See it on your own kind of work

ReliTime is sold with a walkthrough rather than a free trial. We will take you through a working organisation, from a week of timesheets through approvals and work in progress to a GST invoice, and answer your questions as we go.

Or write to hello@relitime.com.