How Watchie keeps employee data secure

You’re trusting us with your team’s work day. Here’s how we protect it.

Every database query is limited to the signed-in person’s company, and automated tests check that one company can never see another’s data.

Screenshots are stored privately and opened only through links that expire within five minutes. Every view is written to the audit log.

Members see only their own data. Managers see their team. Only the owner changes tracking settings, legal rules and payroll.

Screenshot views, setting changes, rule overrides and payroll exports are all logged with who and when.

Passwords are hashed with PBKDF2-SHA256 and sign-in tokens are stored only as hashes. Login, signup, invites and password resets are rate-limited.

The desktop app stores its sign-in in the Mac or Windows keychain, and each device can be signed out remotely.

Everything travels over HTTPS, with strict security headers on every response.

No keystroke content, passwords, clipboard, camera, microphone or location — ever. Screenshots are deleted automatically after your retention period.

Payroll connection keys are encrypted, never shown again after saving, and use the narrowest access the provider allows.

Questions from your IT or security team? Contact us.

See who’s really working.

Set up your team in minutes. Clock in on Mac, Windows, or a phone at the job site.

Already have an account? Log in