Secure by design →

The work tracker that actually knows what happened.

SpiralDeck unites project management with a desktop app that captures real work — so your reports reflect what actually happened, not self-reported guesses. One core for software teams, agencies, and growing businesses.

Start free Tour the product

Free tier · No per-seat pricing · No credit card

Now on Android · iOS coming soon

SpiralDeck app.spiraldeck.com/pm/projects/atlas/board
Sprint 14 · Board 13 tasks
+⚙
In progress 3
SPD-241

Encrypted blob upload pipeline

AM 2h
SPD-238

Per-tenant RLS policy tests

JR 2h
In review 2
SPD-230

SAML / SSO onboarding flow

SK 2h
+ add
Done 8
SPD-219

Workspace data export API

AM 2h
+ add

For teams that outgrew their tools

Jira powerful, but slow
Linear fast, but thin on tracking
ClickUp broad, but noisy
Asana friendly, but shallow

None of them tell you what work actually happened today. SpiralDeck does.

The wedge

Two things the others won't do

Everything in SpiralDeck ladders up to honest, flat pricing and real observability — chosen deliberately, not as a feature checklist.

01 / Price

Flat pricing, not a per-seat tax

A genuine free tier for small teams, then Basecamp-style flat per-workspace pricing. Add people without watching the bill climb.

02 / Observability

A tracker that sees real work

A first-class desktop app captures what actually happened — work logs, app & window context, anonymized activity — instead of self-reported guesses.

Project management

Plan it any way your team thinks

The full PM core — every view, every workflow, every report. Switch between board, list, timeline and gantt without losing context. Configure statuses and fields per project.

BoardListTableTimelineGanttCalendarBacklog
  • Tasks, sub-tasks, epics, sprints & backlogs
  • Custom fields, statuses & workflows per project
  • Multi-step, role-gated approval chains
  • Velocity, burndown, throughput & cycle-time reports
  • Real-time docs, project chat & whiteboards
  • Granular roles, permissions & scoped access
Timeline · Q3 Week 28 — 34
Discovery
Capture engine
Integrations
Security review
GA hardening
today
Capturing · SPD-241
02:14:08
Active window pipeline.py — VS Code
Active tab docs.aws.amazon.com / kms
Keyboard activity aggregated count
Mouse activity aggregated count
Screenshot in 6:42 — opt-in, blurred preview shown to you first

The differentiator · Desktop app

Real work, captured — not guessed

A Flutter desktop app for macOS, Windows and Linux logs what work actually happened: task start/stop, hours, status transitions, and anonymized activity signals — rolling straight into draft time logs you simply confirm. No manual timesheets.

Anonymized by design

Aggregated activity counts, app & window titles, tab domain. No raw keystrokes, clipboard, or DOM scraping.

Opt-in screenshots

Off by default. Randomized 5–10 min intervals, configurable per-project. A clear indicator shows when active.

Idle detection

No input means capture pauses automatically — your logs stay honest.

Online-only & encrypted

No offline cache of sensitive data. Blobs encrypted at rest with per-tenant envelope keys.

People & time

A minimal HR surface, right where the work is

Timesheets live in the PM app. Alongside it, a focused HR surface covers the essentials — no bloated suite. Directory, performance, leave, and HR admin, sharing the same identity and permissions as your projects.

DirectoryPerformanceLeave & approvalsOrg & jobsOnboardingComplianceTime policies

Benefits, full ESS/MSS, hiring/ATS and shift management are intentionally out of scope.

Headcount

142

On leave today

6

Reviews due

11

Utilization

87%

Security & privacy

Foundational, not a checklist

SpiralDeck handles screenshots, activity data, and cross-tenant information. We assume hostile users will probe every surface — and build accordingly.

Tenant isolation at the database

Every multi-tenant table carries tenant_id under Postgres Row-Level Security — the app cannot cross tenants by accident.

Default-deny authorization

Every endpoint, resolver and websocket message re-checks tenant + role + resource scope. JWT claims are evidence, not authority.

The desktop app is untrusted

The server validates and rate-limits every upload. Capture → server runs over mTLS with short-lived signed tokens.

Anonymized signals only

No raw keystrokes, no clipboard, no DOM scraping. Screenshots are opt-in and encrypted at rest with per-tenant keys.

Per-tenant RLSEncrypted at restAnonymized captureVDP / bug bounty
Read the threat model →

Integrations · day one

Plugs into the stack you already run

GitHubGitLabSlackMicrosoft TeamsJira importOIDC / SAML

SCIM and OIDC / SAML SSO arrive with the enterprise tier.

Pricing

Priced for teams that grow

Start free. When you outgrow it, pay a flat rate per workspace — not per head. Adding the 11th, 50th, or 100th teammate doesn't change the bill.

See pricing

Free

$0

For small teams getting started

  • Core PM & tasks
  • Up to a small team
  • Community support
Flat rate

Workspace

Per workspace

No per-seat tax

  • Everything in Free
  • Desktop work tracker
  • Unlimited members

Know what your team actually shipped.

Project management and a desktop work tracker on one core. Free to start — no per-seat pricing, no credit card.

Start free Talk to us