Security

Access to the TimeTrade appointment scheduling application is controlled by a modular authentication and authorization subsystem, which accepts standard username and password credentials.  It can accept plug-in modules supporting alternative authentication mechanisms such as certificates, directory servers or web service based authenticators. 

Once logged in, our highly granular roles-based security model controls access to all system interfaces and functions, down to the viewing of individual screens, and the ability to view and/or edit data on a field-by-field basis. 

Industry-standard security practices are adhered to throughout the application, such as SSL encryption for secure browser access, configurable use of strong passwords and password policies, the encryption of sensitive information in the database, and audit trail logging of security-related operations. 

All web service access to the system is governed by methods found in the widely-accepted OASIS SOAP Message Security specification 1.0.