Security & trust
Security that passes review by IT, HR and auditors
TIMEON.GURU holds data about your people's working time: schedules, worked hours, attendance and the location at clock in. That is why our security is certified, checked by independent auditors and described in plain words.
- ISO/IEC 27001Information security
- ISO/IEC 27017Cloud service security
- ISO/IEC 27701Privacy information management
- ISO 22301Business continuity
- GDPREU data
Certification New
One certificate. Now covering cloud services too.
Our information security management system now also covers ISO/IEC 27017, the standard for security controls in cloud services.
ISO/IEC 27017 is part of the ISO/IEC 27000 family and extends ISO/IEC 27001. So we still have one certificate, and its scope now includes cloud services.
What this means for you
- Independent confirmation that we run our cloud services by internationally recognised security rules.
- Ready answers for your security team, your data protection officer and your auditors.
- ISO/IEC 27001
Information security
The framework we use to manage risks and data protection controls. Checked by an independent certification body.
- ISO/IEC 27017
Cloud services
Extra controls for the cloud: separation of customer data, clear responsibilities for provider and customer, protection of the virtual environment.
How we protect data
Protection at every level
Encryption and isolation
- All traffic between browsers, mobile apps and servers is encrypted (HTTPS).
- Servers in the European Union, in line with Regulation (EU) 2016/679.
Sign-in and identity
- Sign-in with Microsoft Active Directory, HCL Domino or another directory service through SAML or OAuth2 (additional service).
Role-based access
- Employees see their own schedule and timesheets.
- Managers build the schedules and approve the timesheets of their teams.
- Finance and leadership get the reports.
Infrastructure
- Our primary data centre is Equinix IBX in Sofia.
- Distributed, container-based architecture.
- Your data stays in the European Union.
Backups
- Restore to a specific day, hour and minute.
- Backups are kept in a secure, physically separate location.
- Business continuity is certified to ISO 22301, including for the cloud services.
Personal data
GDPR from day one
- You are the data controller and we are the processor. We sign a data processing agreement (DPA).
- Our privacy information management system is certified to ISO/IEC 27701.
- Data is stored in the European Union.
- When your subscription ends, your data is destroyed immediately, following set procedures.
Your settings
You set the rules
As additional services, we set the system up to match your internal rules:
- sign-in through your directory service (SAML or OAuth2);
- corporate branding;
- integration with your other systems.
Documents for your review
For your IT security team, your data protection officer and public tenders.
- ISO/IEC 27001 (with ISO/IEC 27017), ISO/IEC 27701, ISO 22301, ISO/IEC 20000-1 and ISO 9001 certificates
- Data processing agreement (DPA)
- List of sub-processors
- Answers to a vendor security questionnaire
Found a vulnerability?
Write to support@timeon.guru with the subject “Security”. Describe the issue and how to reproduce it. Please do not publish details before we have fixed it.
support@timeon.guruSecurity questions
All questions →Where is our data stored?
On servers in the European Union, in line with Regulation (EU) 2016/679 (GDPR). See the Trust Center.
Can we sign in with Active Directory?
Yes, as an additional service: sign-in with Microsoft Active Directory, HCL Domino or another directory service through SAML or OAuth2.
Retire the schedule spreadsheet.
14 days free, with full access. Or let us show you the system in 30 minutes.
or book a demo →