Time tracking for teams that bill by the hour
Every hour is recorded and signed on each person's machine as they work. Your client reads them in one link that checks every signature again each time it opens. Your team keeps their privacy, and you keep their trust.
Free for the first teams. We set each one up by hand.
12h 30m
Alex Rivera · Jul 1–4, 2026
Built the core ingestion endpoints and refactored the ledger validation.
Wrote unit tests for signature verification and reviewed two pull requests.
Traced a rounding bug in the invoice totals and fixed day-boundary handling.
This is what your client opens. Open the live sample →
Your client wants proof of the hours. Your people want to be trusted. Until now you had to pick one.
Hours nobody can quietly edit
Each hour is signed on the person’s own machine as they work. Once it’s sent, neither your team nor you can rewrite it.
Nothing to store or defend
Your client reads the hours in one link, no account needed. There is nothing on your side to secure or answer for.
A team that stays
Your people see exactly what your client sees, so there is nothing to resent.
With tenby10, you don't have to pick.
Every ten minutes is signed on the person's own machine as it happens, then checked by us as it arrives. Every time the link opens, we check each signature again. Change a stored hour and the link shows it failed. There is no capture code in the app, so there is nothing to review and nothing to leak.
Everything you see comes from records your people can see on their own machine. The app is source-available (PPSAL-1.0), and every privacy claim on this page maps to the line of code that proves it.
Ask what they are for. If the answer is proving the hours, the link does it better: every interval is signed at the time and checked again each time your client opens it, no account needed. What settles a question about hours is a timestamp and a plain note of the work, not a picture of a screen.
Counts, categories, and cryptographic fingerprints. No screenshots exist anywhere in the system. Keystrokes are counted, never read. Window titles never reach tenby10 or you, and there is no browser integration, so no URLs.
The record binds everyone. Once an hour is sent, your team can’t rewrite it and neither can you: we check each hour as it arrives and refuse a changed copy. For work the machine can’t see, like a phone call, the day’s note sits beside the verified number, the person can correct it, and it never changes the number.
Start with one team of up to ten, for four weeks. We set it up with you by hand and send you a short report each week: missing days, long days, gaps nobody explained. Free.
Paying a team by the hour instead? See what to ask them for →