facial recognitionTime Clock.

How a face-checked punch works

The employee punches as usual with their number and PIN. A small live preview and a notice that the camera is in use are shown, and at the moment of the punch the kiosk compares the face it sees with the measurements recorded when the employee was enrolled. The punch is saved with the result: matched, not matched, no face found, or no camera.

It never blocks a punch. A mismatch is flagged in Timesheets and Reports so a manager can look into it, which keeps real hours from going unrecorded because of bad lighting.

Only measurements are stored

Enrolment takes two or three clear front-on samples. From them the browser computes a set of 128 numbers that describe the face; those numbers are encrypted and stored, and no photograph is kept. Each location chooses how long face data is kept after someone leaves (30 days by default), after which it is destroyed.

Face check is off by default, turned on per location, and requires each employee's recorded written consent.

What a face check can and cannot do

Face check deters buddy punching and leaves an audit trail. It does not lock anyone out. A browser camera has no liveness test, so a determined person could try a photo. People stop punching for each other once they know every punch is checked, and a manager has evidence when someone does. For a stronger guarantee, pair it with a fingerprint scanner and keep the kiosk where staff can see it.