Currently looks like there is just a log off button. I'm assuming that just logs out of the session I'm in? But I need to know that nobody can use my TANDA when I am not at work.

You could show more detail like Google does (and plenty of others) with current sessions and login details (location, date, OS, etc.)

Also is there a corporate policy for timing out the session after x minutes? If all changes in TANDA are saved in real time then it shouldn't have any negative impacts?