System admin
Sees and manages the whole company: employees, attendance, absences, settings, month lock and the activity log.
Security and privacy
Data security and privacy
Who sees your attendance and employee data, what is recorded and what is deleted. We only describe here what the system actually does.
Who sees what
Manager
Sees and approves only in the departments they manage and the departments under them. A manager does not see another department's data.
Employee
Sees only their own information: their punches, hours, absences, balances and documents.
Accountant
Gets access only from a client who invited them, read-only, and the client can revoke it. Every login, view and download is recorded in a log the client can see. The accountant can turn on two-step verification with an authenticator app.
What the logs record
- Activity logActions in the system are recorded in an activity log that the system admin can filter by employee, action and date.
- Attendance change logEvery addition, edit, deletion, approval or rejection of a punch or absence is recorded: who made it, when, what it was before and after, the reason given, and from which IP address and device.
- Month lockOnce a month is locked, punches in it cannot be added or edited. What is locked is what goes to payroll. On the duty to record hours, see the Amendment 24 guide.
Signing in
- Google or Microsoft — we receive only the email address for verification. Signing in does not create a new account, and the identity token is not stored.
- Email or SMS invitation — a new employee gets a one-time link to choose a password. Employee accounts are opened only by the employer.
- Location — if the employer turned on location verification, location is checked only at the moment of the punch.
AI assistant connections: off until you turn them on
A connection to ChatGPT or Claude is created only when a user explicitly approves it. By default only a system admin can connect, and they decide whether to allow managers or employees as well. The AI assistant receives only what that user is allowed to see.
Every change needs the user's approval and is logged as an action of the AI assistant. The AI assistant cannot delete punches, reopen a locked month or change salary. ID numbers, bank details, salary, documents and Form 101 are never passed to it. A connection can be disconnected at any moment.
Who owns the data, and how long it is kept
The employer owns the data
The employer decides what is collected and why. We hold and process the data only on the employer's behalf, under our agreement with them. We do not sell data or use it for our own purposes.
Retention and deletion
Employee data is kept while the engagement with the employer is active, and after that for the period the employer is required to keep it by law. A request to delete an employee's data goes to the employer.
Who else receives data
Only those needed to provide the service: cloud infrastructure and storage providers, an email provider for system messages, and an approved Form 101 signing provider if the client chose it. Or a competent authority, when there is a legal obligation.
The Privacy Protection Law and Amendment 13
Amendment 13 to the Israeli Privacy Protection Law, 5741-1981, came into force on August 14, 2025. For employee data, the employer is the database controller, and RayClock holds and processes the data on its behalf.
What this page describes, the permissions and logs, helps the employer answer data security questions. The employer's own duties under the law, such as informing employees about the data collected, remain the employer's.
This is general information, not legal advice. An employer with questions about its duties under the law should check them with a legal adviser.
Questions from accountants and companies
Who can see employees' attendance data?
The employer's system admin sees the whole company. A manager sees only the departments they manage and those under them. An employee sees only themselves. An accountant sees only clients who invited them, read-only.
Can I find out who changed an employee's hours?
Yes. Every addition, edit, deletion, approval or rejection of a punch or absence is recorded in the attendance change log: who made it, when, what it was before and after, the reason given, and from which IP address and device.
Do ID numbers and salaries go to an AI assistant?
No. The AI assistant connection is off by default, and ID numbers, bank details, salary and employer cost, documents and Form 101 are never passed to it.
What happens to the data if the client stops using RayClock?
Employee data is kept while the engagement is active, and after that for the period the employer is required to keep it by law. The employer owns the data, and deletion requests go to the employer.
Privacy policy · Accountant panel · Attendance for large companies · Documents and digital signatures · About and contact
Have a security questionnaire?
Send it to privacy@rayclock.co.il and we will answer with what the system actually does. You can also book a demo and ask directly.