Encryption
All data is encrypted in transit via HTTPS/TLS 1.3 and protected at rest with modern encryption. Biometric templates remain on certified ZKTeco terminals and are never transmitted in clear text.
Strong authentication
OPTime supports two-factor authentication (2FA) based on TOTP, compatible with Google Authenticator, Authy and other standard apps. Recovery codes allow account recovery if a device is lost.
Access control
Roles (Super Admin, Tenant Admin, Manager, Employee) restrict actions to the minimum necessary. Audit logs record sign-ins, sensitive changes and administrator actions.
Hosting and backups
The infrastructure runs on reliable cloud providers with redundancy, automated backups and disaster recovery plans. Your data is never shared with third parties without your consent.