Security & trust
Your data, protected end to end
TempButton AI handles payroll, billing, and provider records for healthcare staffing teams. Security is not a feature we bolt on, it is how the product is built. Here is how we protect your data.
Encryption in transit and at rest
All traffic is served over TLS, and data is encrypted at rest. HSTS is enforced across the site so connections cannot silently downgrade.
Strong sign-in
Email, phone, or Google sign-in, with optional two-factor authentication and biometric or passkey sign-in (Face ID, Touch ID, Windows Hello). Review active sessions and login activity any time.
Role-based access
Agents, admins, providers, and clients each see only what their role allows. Granular agent permissions keep sensitive payroll and billing data on a need-to-know basis.
Full audit trail
A human-readable audit trail and real-time activity feed record who changed what and when across timesheets, contracts, and invoices, and both can be exported.
Trusted cloud infrastructure
The platform runs on Google Cloud, with managed, continuously patched infrastructure and network controls rather than servers we maintain by hand.
Secure secrets handling
API keys and credentials are held in managed secret storage and used only on the server. They are never shipped to the browser or committed to source control.
The AI assistant never sees your customer data
Our website assistant and in-product AI features answer from public product documentation only. They do not have access to your timesheets, payroll runs, provider records, or any personally identifiable information. Model requests run server-side with keys that are never exposed to the browser, and nothing a visitor types is used to train third-party models.
Compliance & privacy
- Healthcare-grade practices. We operate under least-privilege access, audit logging, and data-minimization principles appropriate for payroll and protected workforce data.
- Privacy by default. We collect only what the product needs to run. See our Privacy Policy for how data is used, retained, and deleted, including CCPA rights for California residents.
- Your data is yours. You can export your records, and we delete data on request in line with our retention and legal obligations.
Have a security question?
Security teams and prospective customers can reach us directly. We are happy to walk through our controls and answer a security questionnaire.