Encrypted in transit
All traffic is protected with TLS, and HSTS is enforced so browsers only ever connect over HTTPS.
Security & data protection
Your clients trust you with sensitive information. We take protecting it as seriously as you do.
Role-based access
Granular permissions mean fee earners, supervisors and finance only see and do what their role allows.
Automatic backups
Your account data is backed up nightly and retained so it can be recovered, and you can export it whenever you need to.
Secure authentication
Sign-in uses your existing Google or Microsoft account, so we never handle or store your password. Client portal codes are randomly generated and stored only as hashes, and sessions expire.
UK GDPR aligned
We process personal data in line with the UK GDPR and Data Protection Act 2018, as set out in our Privacy Policy.
Responsible disclosure
Found a vulnerability? Tell us at posttimeuk@gmail.com and we’ll investigate promptly.
Our approach
Posttime is built so that the sensitive details inside your timesheets, clients and invoices stay protected at every step. We follow the principle of least privilege, keep our software dependencies up to date, and design features with data protection in mind from the start.
Data ownership
Your data is yours. We act as your processor for the information you put into Posttime, we never sell it, and you can export or delete it at any time. On request we can provide a data processing addendum for your records.
Hosting
The Service runs on reputable cloud infrastructure with strong physical and network security. We aim to keep customer data within the UK or EEA; where any transfer outside the UK is needed, we use appropriate safeguards as described in our Privacy Policy.
Incident response
If a personal data breach affecting you occurs, we will act quickly to contain it and will notify affected customers and the ICO where we are legally required to do so.
This page describes our current security practices in plain terms and may evolve as the product grows. For specific assurance requirements, get in touch and we’ll do our best to help.
Questions about security?
We’re happy to talk through how Posttime protects your firm’s data.