Help center / Security & privacy in HelloTime
Security & privacy in HelloTime
GDPR, DPDP, 256-bit encryption, SSO and SCIM, and the status of our SOC 2 Type II audit (in progress). How HelloTime protects your time tracking data.
How it works
- Data is encrypted in transit (TLS 1.2+) and at rest (AES-256).
- SAML 2.0 / OIDC SSO and SCIM provisioning available on Enterprise plans.
- Audit logs capture every admin-level action with 1-year retention.
- Compliance status for GDPR, India DPDP, the DPA, SOC 2 Type II and ISO 27001 is published on the trust centre, including items that are not finished.
- Employees can read exactly what is collected about them in the employee privacy notice.
Learn more: Trust centre
Common questions
- Is HelloTime SOC 2 Type II certified?
- The SOC 2 Type II audit is in progress. The trust centre shows its current status.
- How is data encrypted?
- In transit with TLS 1.2+ and at rest with AES-256.