How biometric attendance works
A fingerprint or face-recognition device is mounted at the entrance. Each employee is enrolled once, and every punch after that is matched against the stored template and recorded with a timestamp and the device’s ID. The device pushes punches over the network to the attendance system, where they become the in and out times on the muster.
Face devices have largely replaced fingerprint readers on factory floors and in hospitals. Fingerprints fail on wet, dusty, oily or gloved hands; a face read works without contact and from a short distance, so a queue at the gate moves faster. Both kinds need power, a network connection and somebody at the site who can enrol a new joiner and remove a leaver.
A web punch is the third fixed-site option: a clock-in button inside the HR portal, usually restricted to the office IP range. It suits desk staff with laptops and costs nothing, but on its own it is the easiest to fake, because anyone with the login can press the button.
How mobile attendance works
The employee opens the app and taps punch in. The phone records the time, the GPS coordinates and, if the policy asks for it, a selfie. With geofencing, the punch is accepted only inside a radius of the assigned site, typically 100 to 300 metres; a punch from outside is rejected or held for the manager to approve. A punch made without network is stored on the phone and synced when the signal returns.
For field staff the geofence is replaced by a visit log. The salesperson punches at each customer location, the app records the address against the visit, and the day’s route sits in the attendance record next to the hours. Kuzhu’s app supports GPS and selfie on every punch, switched on or off by policy, and the same login works on the web.
- Time: server time at the moment of the punch, not the phone’s clock.
- Location: GPS coordinates, accuracy in metres, and the site or geofence matched.
- Identity: a selfie for face match, and the device ID so one phone maps to one employee.
- Context: whether the punch was inside the fence, offline, or made by a manager on the employee’s behalf.
Proxy attendance, and what each method stops
Proxy attendance is one employee punching for another, whether by sharing a card, a login or a phone. It is the single biggest reason attendance data is wrong, and it is why the choice of method matters more than the brand of device.
| Method | How proxy happens | What stops it |
|---|---|---|
| RFID card or PIN device | Cards and PINs are handed to a colleague | Nothing on the device; only a supervisor or a camera |
| Fingerprint device | Practically impossible without the person present | The template itself. Failure to read is the problem, not fraud |
| Face device | A photo held up to the camera on cheap devices | Liveness detection on the device, and a log of failed matches |
| Mobile punch, GPS only | One phone punches for several people, or a spoofed location | Device binding (one phone per employee) and detection of mock-location apps |
| Mobile punch, GPS and selfie | Very hard; the selfie must match the enrolled face | Face match plus geofence, with mismatches routed to HR |
| Web punch | A colleague logs in and clicks | IP restriction and an audit trail; weak on its own |
Field staff, multiple sites and hybrid teams
Most companies are a mix. A typical 200-person business has a plant with three shifts, four retail outlets, a field sales team and a head office where half the staff work from home two days a week. No single method covers that. The plant gets a face device at the gate; the outlets get mobile punch with a geofence around each shop, or a small face device if the outlet manager can look after it; sales get mobile punch with visit logging and no geofence; the office gets web and mobile punch with work-from-home days declared in advance.
What makes this manageable is that every punch lands in one muster, with the source recorded. A regional manager who visits two outlets and the head office in a day has three punches from three methods and one attendance record. Multi-site device deployments need a network at each site; devices buffer punches during an outage and push them later, so the muster catches up rather than losing the day.
Costs and maintenance
Biometric costs are mostly upfront and per entrance: the device, installation and cabling, a network point, and an annual maintenance contract. The recurring cost is people: enrolling joiners, deleting leavers, replacing a failed sensor, and handling the days when the device is down and everyone needs a regularisation. Budget one device per entrance, not per site, and a spare for any site over a hundred people.
Mobile attendance has no hardware cost, but it moves the cost elsewhere. Every employee needs a smartphone with data, the company needs a position on whether personal phones are acceptable, and HR takes on a stream of app, battery and GPS-accuracy problems. For a workforce that already carries phones for work, it is close to free. For a shop floor where phones are not allowed at the workstation, it is the wrong tool regardless of price.
From punch to payslip: how attendance reaches payroll
Punches are raw data. What payroll needs is a judged day for every employee: present, absent, half day, on leave, on holiday or on week-off, with late marks and overtime hours. The judgement is made against the shift the person was rostered on, not against a fixed office time, which is why rosters and attendance belong in the same system.
- 1Punches from every source are matched to the employee and the date, with a night shift spanning midnight attributed to the day it started.
- 2The first in and last out are compared with the rostered shift. Arrival after the grace period is a late mark; a set number of late marks in a month becomes a half day, if the policy says so.
- 3Hours below the half-day threshold make a half day; below the minimum, an absence. A missed punch raises a regularisation request that goes to the manager rather than to HR.
- 4Hours beyond the shift end, where overtime is enabled for that grade, are captured as overtime at the rate the policy sets.
- 5Absences with no leave against them become loss-of-pay days, and the muster is locked. Payroll reads the locked muster; nobody re-keys it.
Decision table by workforce type
| Workforce | Use | Why | Watch out for |
|---|---|---|---|
| Factory floor | Face device at each gate | Hundreds of punches in ten minutes, phones not allowed at the line, shifts that must be evaluated against a roster | Queue speed at shift change; a spare device; contract workers enrolled separately |
| Retail outlets | Mobile punch with geofence, or a small face device per outlet | Small headcount per site, high churn, managers on the floor | Shared phones in the shop; joiners and leavers every week |
| Field sales and service | Mobile punch with selfie and visit logging | No fixed site; the day is a route, not a shift | Consent for location, battery drain, mock-location apps |
| Office and hybrid | Web and mobile punch, IP or geofence at the office | Laptops for everyone; work-from-home days need a declaration, not a fence | Punch discipline is low when nothing depends on it; tie the muster to payroll or leave |
| Hospital wards | Face device at ward entrances, mobile as backup | Contactless, glove-friendly, and rosters with on-call and stand-in cover | Doctors crossing wards; long shifts that span midnight |
Privacy and consent for GPS and biometrics
Location and biometric data are personal data under the Digital Personal Data Protection Act, 2023, and an employee’s consent has to be informed and specific to the purpose. That is a policy question before it is a software question. Capture location only at the moment of a punch, never continuously; store face templates rather than photographs where the device allows; give access to the raw record only to HR; and set a retention period for punches and selfies after the payroll month is closed.
- Put the method, the data captured, who sees it and how long it is kept in the attendance policy, and have each employee acknowledge it.
- Tell field staff that the app reads location on punch and on visit check-in only, and let them see their own record.
- Allow an alternative for anyone who cannot use a fingerprint or face device, such as a supervisor-approved manual punch.
- Do not link attendance biometrics to Aadhaar. The Aadhaar Act does not permit biometrics collected for Aadhaar to be used for anything other than Aadhaar authentication, and attendance does not need them.
Handled this way, GPS punch is accepted readily by field teams, because it also protects them: the record shows they were at the customer when they said they were. What people object to is being tracked between visits, and no attendance system needs that.
Kuzhu attendance takes biometric, web and GPS punches into one muster and evaluates every one against the roster.
See the attendance moduleQuestions people ask
Can a company use both biometric and mobile attendance at the same time?
Yes, and most companies with more than one kind of workforce should. The device covers the plant or office gate, the app covers field staff and outlets, and both write to the same muster with the source recorded. An employee can use both on the same day, such as a punch at the office and a visit check-in at a client site.
Is GPS attendance legal in India?
Yes, provided the employee is told what is collected and why, consents to it, and the collection is limited to that purpose. The Digital Personal Data Protection Act, 2023 applies to location data. Capturing location at the moment of punch is proportionate; continuous tracking of a personal phone outside work hours is not, and no attendance system requires it.
How does a geofence work for mobile attendance?
Each site is given a centre point and a radius, usually 100 to 300 metres to allow for GPS error in dense areas. A punch inside the circle is accepted; one outside is rejected or held for the manager to approve with a reason. Field roles are usually left without a fence and asked to log customer visits instead.
What happens to attendance when the biometric device goes down?
The device stores punches locally during a network outage and pushes them when the connection returns, so the muster catches up. If the device itself fails, employees punch from the app or a supervisor records manual punches, and the day shows as regularised rather than absent. Keep a spare device at any site with more than a hundred people.
Does mobile attendance work for a factory?
Rarely as the main method. A shift change puts hundreds of people through the gate in a few minutes, phones are often not allowed at the line, and contract workers may not have smartphones. A face device at the gate handles the volume; the app is useful as a backup and for supervisors and staff who move between sites.