Your hours are your revenue.
We treat them that way.
TimeQuorum holds the record of what your team worked and what your clients owe. This page explains, in plain terms, how that data is isolated, protected, backed up, and kept under your control.
Built for isolation from day one
Most SaaS time trackers put every customer in one shared database and rely on a where tenant_id = … clause never being forgotten. TimeQuorum doesn't.
A private database per workspace
Every workspace gets its own database schema on the platform. Your time entries, clients, invoices, and rates never share tables with another customer's. A bug in one workspace's query cannot read another's data because there is no shared table to read from.
Encrypted in transit and at rest
All traffic is served over TLS behind a web application firewall. Database storage is encrypted at rest by our cloud provider, and high-value secrets inside the application, integration credentials such as QuickBooks and Stripe keys, are additionally encrypted with an application-level key before they are written.
A memory-safe backend
The API is written in Rust. Whole categories of vulnerabilities common in other stacks, buffer overflows, use-after-free, data races, are prevented by the language itself rather than by discipline alone. In the browser, every value you type is output-encoded before it is rendered, formatted notes pass through an HTML sanitizer, and a Content-Security-Policy restricts which hosts may run script or receive data.
Backups and regional resiliency
Your data lives in more than one place, and restoring it is a routine we practice, not a plan we hope works.
Copies in more than one region
Production databases take automated daily backups and keep a continuous transaction log, and those backups are replicated to geographically separate cloud regions. A single-site outage, a storage fault, or a regional incident does not put your workspace history at risk.
Point-in-time recovery
Because the transaction log is retained continuously, a workspace can be restored to a specific minute, not just to last night. That covers accidental deletions and bad imports as well as infrastructure failure.
Verified and rehearsed
A scheduled validator confirms that recent backups exist and are restorable, and recovery is exercised on a cadence against real backups. Restore procedures are versioned alongside the infrastructure they recover, so they change when it changes.
Access control and accountability
Who can see rates, approve time, or send an invoice is explicit, and everything that changes is recorded.
Roles, plus fine-grained grants
Admin, Manager, Accounting, Member, and Observer roles set the baseline. On top of that, Billing Access can be granted to an individual, and access can be scoped to specific projects, classes, or tasks, so a contractor sees only their engagement.
A complete audit log
Creates, edits, deletions, approvals, invoice sends, integration changes, and support activity are written to an audit trail your admins can read. Support sessions opened by TimeQuorum staff appear in your audit log, with the reason given.
Sessions you can actually end
Credentials are stored as salted hashes, sign-in is protected by lockouts and a bot challenge, and signing out, on the web, desktop, or mobile, revokes the session on the server. Deactivating a user revokes every session they hold, on every device, immediately.
Money and integrations
We never see a card number
Online invoice payments run through Stripe or PayPal on their hosted pages, and subscription billing through Stripe. Card and bank details are entered directly with the processor; TimeQuorum stores only the payment outcome.
Integrations use scoped OAuth
QuickBooks Online connects through Intuit's OAuth flow; you authorize, we never hold your Intuit password, and the resulting tokens are encrypted at rest. Every push and pull is written to a per-connection sync log you can inspect.
Financial changes are deliberate
Paid invoices can't be silently edited, approvals can only be revoked with a recorded reason, and deleting an invoice never voids it in your accounting system without telling you.
Your data is yours: on every plan
The strongest guarantee we can give is that leaving is easy.
Export everything, any time
Settings → Export downloads every object in your workspace, clients, projects, time entries, expenses, invoices, payments, rates, and more, as clean CSV files. This is available on the Free plan too; it is not held hostage behind a tier.
Bring history with you
Import from Harvest exports or a connected QuickBooks company with a preview before anything is written, import history, and one-click undo, so switching in is as safe as switching out.
Delete on your terms
Workspace admins can permanently delete a workspace from System Settings. Personal-data requests are handled as described in our Privacy Policy.
Reporting a security issue
Related: Privacy Policy · Terms of Service · Roles & permissions in the docs