Background
Amendment 13 to Israel's Privacy Protection Law was published on 14 August 2024. Under section 74 of the text brought to the Knesset's second and third readings, it took effect one year after publication, on 14 August 2025. According to that text, it widened the Privacy Protection Authority's supervision and enforcement powers, introduced financial sanctions and, for certain bodies, a duty to appoint a privacy protection officer (section 17B1). A scheduling system holds information about employees, so it is worth knowing how it is protected.
Who sees what
Every company is isolated from every other, and permissions are checked on the server for every request. Employees see their own schedule and requests, managers see their department, and pay data is available to managers only. When Mishmarotix support enters a company to fix a problem, the action is written to that company's security log.
Sensitive details
ID numbers, bank accounts and Form 101 details are stored encrypted with AES-256-GCM, and only the employee and their department's managers can open them. Support staff can see that a form exists but not what it says. Two-factor authentication can be switched on for any account.
The schedule assistant
The assistant is off by default and only the company owner can switch it on. When it is on, the department's names, positions, shifts, availability and leave are sent to Anthropic's Claude, without contact details, pay or ID numbers.
Your data
Data can be exported from settings at any time, including after a subscription ends. A closed company stays available to its owner for export, and full deletion happens at the owner's request. See the privacy policy for more.
Sources and review
Jurisdiction: Israel. Sources: the Privacy Protection Law, 5741-1981, in the Knesset's National Legislation Database, which lists Amendment 13 (Sefer HaChukkim 3287, p. 1430, 14 August 2024), and the amendment as brought to the second and third readings, on the Knesset's site, in Hebrew. This page was reviewed against these texts on 4 October 2026. It describes the product and is not legal advice.
An employee sees their own details, and a manager sees the employees in their department. Sensitive details, such as ID numbers and bank details, are stored encrypted.
Yes. Once it is on, every sign-in also asks for a code from an authenticator app.
From settings you can sign out every other device in one step, and every device except the one in your hand will have to sign in again.
No. A change made by Mishmarotix staff is recorded in the company's activity log, so you can see what changed and when.