Compliance-supporting controls
Timekeeping that stands up to an audit
Government contractors live under DCAA-oriented timekeeping expectations: time recorded daily, corrections explained, supervisors accountable, history intact. TackTime builds those controls into the normal workflow, so an audit is a record to produce rather than a scramble.
Every workspace begins with a 60-day trial of the full product. You will sign in with your work identity first, then name the company and the address the workspace answers on.
The controls
Time is recorded when it happens
Employees close each workday as a deliberate act. When an entry arrives for an earlier date, the workspace policy decides what happens: allow it, require a written reason, or refuse it outside a window your policy sets. A late entry carries its justification with it, on the record, rather than being silently backdated.
Corrections explain themselves
Changing a past entry never overwrites it. The original stays on the record and the change is a new version linked to the one before it. Where the controls apply, a correction requires a written reason and the reason for the change travels with it. The record holds what changed, when, and by whom for every entry, and why for every controlled correction, for as long as the workspace holds it.
Supervisors approve what they supervise
By design, hours route to the manager responsible for each project, not to whoever happens to administer the software. When a week spans three projects, three managers review their own portion independently, and where the controls apply a supervisory review is required before anything else. Accountability follows responsibility.
A policy a client cannot weaken
Your workspace either mandates the DCAA-oriented controls for every client or lets each client enable them. A client may strengthen an optional setting and can never disable a workspace-wide mandate. Settings resolve down the workspace, client, and employee chain by taking the strictest value stated at any level, so the shortest late-entry window and the earliest cutoff win.
History is appended, never rewritten in place
Every record keeps its complete revision history in an append-only log scoped to your workspace. There is no edit-in-place anywhere in the system: what happened stays on the record, and a correction is an addition, never an erasure.
For the technically curious
TackTime's audit log is an append-only chain. Each event is serialized canonically (RFC 8785) and linked to the event before it by a SHA-256 hash, so the sequence can be checked for consistency end to end: alter or reorder an event and its link to the next one breaks.
One limit, stated plainly because it matters to an auditor. The head of that chain is kept inside the same database today, so the chain shows an inconsistency to anyone reading it and is not yet evidence against somebody who can write that database. Publishing the head outside it is specified and not yet in place, and nothing on this page is offered as more than the chain establishes until it is.
What no software can promise
- How the workspace, client, and employee policies are configured
- Written internal timekeeping policies and procedures
- Training, supervision, and management review
- Evidence retention and how records are produced when requested
- Actual day-to-day use of the product by the people recording time
What we will never add
Compliance is about trustworthy records, and trustworthy records do not require watching people. TackTime has no screenshot capture, no keystroke logging, no webcam access, and no background activity tracking; the features do not exist to be enabled. A signed, justified, history-complete timesheet answers an auditor. A folder of screenshots does not.