Is Clox Legit? Your Data, Security, and the Guarantees Behind It

If you found Clox recently and you're deciding whether to trust it with your crew's hours and your payroll data, that caution is the right instinct. This is an honest answer, not a sales pitch. Below is who runs Clox, how your data is actually handled, the trust signals you can verify yourself, the honest state of the product today, and the guarantees that let you try it without risk. Where a claim is technical, it comes from what is really in the product, not from marketing.

01

Who is behind Clox

Clox is operated by Clox Labs LLC, a limited liability company formed in Wyoming. That's not just a brand name. It's the registered legal entity named in the Terms of Service and the Privacy Policy. Legal notices go to a registered agent of record, Northwest Registered Agent Service Inc, at a Sheridan, Wyoming address. A registered agent and a stated entity mean there's a real party you can serve notice on and hold to the contract, which is a basic thing a fly-by-night operation doesn't bother to publish.

We won't pad this section with a founder story or a customer count. The verifiable facts are the entity, the jurisdiction, the agent of record, and the legal pages that bind us. Those are on the site right now for you to read before you sign up.

02

How your data is handled

Here's the plain version of what happens to your data, drawn from the actual Privacy Policy. Clox is operated in the United States and your information is processed and stored there.

• Encryption: information is protected with encryption in transit and at rest.
• Passwords and PINs: account passwords and kiosk PINs are stored only as a secure hash, never as readable text.
• Access controls and audit logging: administrative actions are access-controlled and audit-logged.
• Offline punches: when a phone has no signal, punches are held in an encrypted on-device cache and upload once the connection returns.
• Selfies: a clock-in photo is a plain image stored with the time entry. Clox doesn't run facial recognition and doesn't extract or store facial-geometry data.
• Deletion: there are self-service tools to export your data and to delete your account or organization, after which the associated personal information is deleted, with residual copies in encrypted backups only for a limited period.

03

The trust signal you can verify without trusting us

Most software asks you to take its data integrity on faith. Clox does the opposite for the records that matter most. Every clock-in and clock-out is linked into a tamper-evident ledger and cryptographically signed, so a record can't be quietly edited, deleted, or reordered after the fact without the tampering showing.

The part that should matter to a skeptic is that you don't have to trust Clox to confirm it. Paste a proof bundle into the public verifier at getclox.com/verify and it checks, on your own screen, that the records were signed by Clox and haven't been altered or reordered. Nothing you paste is stored. For an auditor or a client who wants to go further, each record is an Ed25519 signature over an exact JSON string, and Clox publishes its public key at /api/proof/public-key, so an expert can verify any record against that key with standard tools and no Clox account at all.

04

Account security features that actually exist

These are live in the app today, in Settings under Account and security, not on a roadmap:

Security controls available in your Clox account

For the step-by-step version, the account security doc walks through each one.

05

The honest state of the product

Clox is a newer product, and pretending otherwise would undercut everything above. Here's exactly where it stands so there are no surprises after you sign up.

• Managers work in the web app. Scheduling, approvals, reports, and payroll exports all happen in the browser at app.getclox.com. That's the mature, full-featured surface.
• The iOS app is on the App Store, a free download. Search the App Store for Clox, or install it from the link your manager sends. The Android app is on Google Play.
• Crews can skip the app entirely. There's a phone-browser option at app.getclox.com, so a worker can clock in from any modern phone browser without installing anything.

06

The guarantees that de-risk trying it

The best way to answer "can I trust this" is to try it on your own crew with nothing on the line. Clox is built so you can:

Every account starts on a 14-day free trial with no credit card, and you're not charged unless you choose a plan when the trial ends. If you do subscribe and it's not a fit, your first paid subscription is covered by a 30-day money-back guarantee: email support within 30 days of your first charge for a full refund. Pricing itself is public and flat, not a quote you have to request. See the numbers on the pricing page.

07

So, can you trust Clox

Here's the honest bottom line. Clox is a real Wyoming company with published legal pages, it encrypts your data and hashes your passwords and PINs, and it gives you genuine account controls like two-factor sign-in and sign-out-everywhere. Its strongest trust signal is one you can test yourself: the tamper-evident proof-of-presence records that anyone can verify at /verify without trusting our word. What it doesn't have is a security certification or a wall of reviews, and it's newer. The iOS app is on the App Store and the Android app is on Google Play. Weigh those honestly. Then do the thing that actually settles it, which is to run your own crew's week through the free trial.

When you're ready to judge it on your own data, start a free trial. It runs 14 days, needs no credit card, and your first paid charge is backed by a 30-day money-back guarantee, so trying Clox costs you nothing but a week of real use.