Access, roles, and a record you can inspect
Security here is practical: who can sign in, what they can do, and what the system keeps after a fiscal document is issued.
Identity and access
Staff sign in with their own accounts. MFA (TOTP) is available in the security hub. Sessions are gated: the merchant app does not show the workspace to someone who is not signed in.
Roles and permissions
Company administrators assign roles. Invoicing, stock, purchasing, and reports are not one shared privilege. That is how you keep a cashier from changing company settings.
Audit and fiscal documents
Activity is recorded. After EIMS legalises a document, that fiscal record is treated as immutable in the product — it is not something an operator edits quietly later.
What this page is not
This is not a penetration-test report or a certificate. If you need a written security statement for a due-diligence checklist, write to us from the contact page.
Set up your TIMES workspace with your company TIN
Create a company workspace and start invoicing when your registration is approved.