01
A private PIN or a paired NFC fob
In PIN mode each person has their own 6-digit PIN. In FOB mode they tap a paired NFC fob (13.56 MHz). The system blocks the wrong sequence — for example clocking out when they never clocked in, or clocking in twice. Unknown fobs are refused.
02
Keeps working if the network drops
While online, the tablet quietly stores a protected list of valid PINs and already-paired fobs. If the connection fails, staff still clock. Unknown credentials are rejected on the device. Entries wait in a queue and upload when the signal returns.
03
Weekly hours on the tablet
Staff can check Monday to Sunday hours and a week total on the same device, in the company language. If a manager later corrects a missed clock-out, the hours on the tablet update straight away.
04
Open shifts are flagged 2 hours past the scheduled end
If someone clocks in and never clocks out, the shift appears in Exceptions two hours after the saved shift was due to end. A day or night manager in that person’s scope enters the real finish time, approves it, and their name is written in the audit log. Only the head manager can open that log. Payroll does not silently keep a long open day.
05
Payroll files your accounts team already use
UK: Professional Payroll Sheet, Sage 50 Payroll, Xero Payroll, QuickBooks Payroll, BrightPay and PayFit. BiH: Professional sheet, Datalab PANTHEON, Minimax, SalaryX Pro and Intercomp Obračun Plata. Each file has employee, site, rate, hours and pay. Review before anyone is paid.
06
An audit file that does not include PINs
Every clock action can be exported with the time, the person’s name, the action, the site and the tablet. PINs are never in that file. A privacy notice sits in the footer. Records are kept for six years, then removed.
07
A weekly rota the office publishes
Managers build the week on a Monday-to-Sunday board, put people on shifts, then Save Rota. That version goes live on the kiosk at once. Send to Mail can email this week, the whole month, or a date range you pick — each person gets all of their shifts in those dates, plus a site PDF covering that period. Mail goes only to people in that manager’s day or night scope, plus Relief and the head if they are on the selected rota.
08
Clock-in follows the published week
Staff clock against the last saved rota, not a draft still being edited. They cannot clock in more than ten minutes early, and they cannot clock in if they are not on that week. Edits go live only when you Save Rota again.
09
Relief staff and leave on the same board
Relief belong to the organisation, not one site. Day and night managers can add them and put them on any rota. They can use any kiosk in that same company, not another employer’s. Leave sits on the week so you do not double-book.