Your data. Secure.
UK-based. Always.

Encryption at rest and in transit

All data encrypted at rest using AES-256. All data in transit encrypted using TLS 1.3. Encryption keys managed via AWS KMS with hardware security modules.

UK data residency

All customer data stored in AWS eu-west-2 (London). No data leaves the United Kingdom. Relevant for UK GDPR compliance and data sovereignty requirements.

Role-based access control

Granular permissions by role: planners, engineers, operations directors, finance. Engineers see only their own jobs. Managers see their teams. Admins control everything.

Single sign-on (SSO)

SAML 2.0 and OAuth 2.0 SSO support. Integrate with your existing identity provider: Azure AD, Google Workspace, Okta. MFA enforced for all administrator accounts.

Full audit logging

Every user action is logged, including job creation, schedule changes, compliance captures and invoice approvals, with timestamp, user ID and IP address. Audit logs are immutable and retained for seven years.

Penetration testing

Annual third-party penetration testing by CREST-certified security firm. Test reports available to enterprise customers under NDA on request.

Automated backups

Database backups every 6 hours. Point-in-time recovery to any 5-minute interval within the last 35 days. Backups stored in a separate AWS region and tested quarterly.

Uptime and SLA

99.9% uptime SLA for Professional and AI+ plans. Status page at status.clockworkit.co.uk. Planned maintenance windows communicated 7 days in advance.