Your employee data is among the most sensitive information in your business. We treat security as a core part of how Oputime is designed and operated. Here is how Oputime protects your platform and people data.
Data Protection & Encryption
- Encryption in Transit: All communications with Oputime servers are enforced over TLS 1.3 encryption.
- Encryption at Rest: All customer data, logs, and database snapshots are encrypted at rest using AES-256 standard.
- Tenant Isolation: Customer data is logically isolated at the database layer to ensure strict boundary separation across organizations.
- Encrypted Backups: Automated backups are executed daily, encrypted, and stored in disaster-recovery storage environments.
Access Control & Governance
- Least-Privilege Access: Internal access to production infrastructure is strictly limited to authorized engineers on a verified, auditable need-to-know basis.
- Granular Enterprise RBAC: We support Role-Based Access Control (RBAC) and Single Sign-On (SSO) integration, allowing administrators to precisely define employee permissions.
- Audit Trails: Critical operational actions and system access events are logged for enterprise auditing.
Compliance Roadmap
- Designed for Security Frameworks: Oputime's security architecture is being developed with the technical and organizational controls relevant to SOC 2 Type II and GDPR requirements in mind.
- Radical Transparency: We share compliance milestones openly and never claim formal certifications until third-party audits are completed and certifications are formally granted.
Infrastructure & Monitoring
- Automated System Health: Real-time infrastructure monitoring actively checks for unusual behavior or potential vulnerabilities.
- Incident Management: Documented incident response protocols ensure rapid investigation, containment, resolution, and customer notification where required.
Vulnerability Reporting
If you are a security researcher or customer who believes you have identified a potential security issue, please contact us directly at founder@oputime.com.
We ask that security researchers provide enough information for us to reproduce and investigate the reported issue. Oputime will review reported vulnerabilities and take appropriate action based on their severity and potential impact.