Time & attendance for shift teams
Punchless.
Every shift starts with a tap.
Stick one smart plaque on the wall. Your team taps their own phone on it and they're clocked in — verified, timestamped, on the right site.
No app. No device. No fingerprints. Just tap.
Set up a location · works with the phone already in every pocket
Tapping
Hello Maria Vella
KF St Julians
How it works
From box to first clock-in, before the lunch rush.
There is nothing to install, enroll, or maintain. The plaque is passive — no battery, no software, no internet of its own.
Stick the plaque
One branded A5 plaque per location, placed by the entrance — ideally in view of your camera. Inside it: a cryptographic NFC chip that identifies the place, not the person.
Invite your team
Create a profile, send the invite. Each person activates on their own phone — once, ever. New hires clock in on day one; leavers are switched off from the dashboard — their next tap is refused.
Tap in, tap out
Hold the phone to the plaque. The page opens by itself — no app — greets them by name, one press, done. Built for wet or floury hands.
Why switch
Retire the fingerprint box.
You know the routine: enrollment queues for every new hire, a dead device blinding a whole site, sensors that refuse kitchen hands.
| Fingerprint / card devices | Taptime | |
|---|---|---|
| Hardware per site | ✗Reader + wiring + maintenance | ✓One passive sticker-plaque |
| New-hire setup | ✗Enrollment at the device | ✓Invite link, activated on their own phone |
| When someone leaves | ✗Delete from each terminal | ✓Switch off in the dashboard — the next tap is refused |
| If it breaks | ✗Site goes blind until repair | ✓Stick a spare plaque and swap it in the dashboard |
| Internet down on site | ✗Device offline, records stuck | ✓Phones fall back to mobile data + GPS |
| Biometric data | ✗Fingerprints stored = GDPR weight | ✓None collected, ever |
This table compares how the two approaches work. It is not a benchmark: we have measured no device against Taptime and make no claim about accuracy or reliability.
Security
Four checks behind every tap.
A tap isn't trusted — it's verified. Each clock-in is checked against up to four signals before it lands in your records.
One-time signature
The plaque's NTAG 424 DNA chip signs every tap with a fresh counter + AES cryptogram. Copied or replayed links are rejected — you must physically be at the plaque, right now.
Phone session
Identity lives in a secure session on each employee's own phone, behind their own screen lock. No shared PINs, no swappable cards — the phone has to be there.
Site IP match
Requests from your site's WiFi carry its static IP — hard evidence the person is inside the building.
GPS fallback
WiFi down or phone on mobile data? GPS confirms presence within 150 m (the default radius). Anything unverified is stored, flagged, and queued for manager review — by default, never approved without evidence.
Privacy by design: Taptime stores no fingerprints, no face scans, and never tracks location — GPS is read only at the moment of the tap. Built for GDPR from day one.
The panel
Every clock-in lands on The Pass.
Managers work from the dashboard: the day's taps on The Pass, the ones the rules could not judge on The Spike, and the week's hours on The Roll.
- KF St JuliansAPPROVEDMaria Vella IN09:58 Trust 70IP yes · GPS no
- KF St JuliansAPPROVEDKevin Grech IN09:52 Trust 50IP no · GPS yes
- KF MsidaFLAGGEDClaire Mifsud IN09:41 Trust 20IP no · GPS no
- Rusty BarAPPROVEDLuke Borg OUT02:04 Trust 70IP yes · GPS no
The Pass
The day's taps as dockets, newest first, each stamped with its verdict.
- Claire Mifsudtoday 09:41 KF Msida · IN · no network, no location
- Daniel Zammittoday 08:57 KF Valletta · IN · QR without network
- Sara Camilleritoday 07:03 KF Hamrun · OUT · location outside the venue
The Spike
Taps the rules could not judge on evidence alone wait here for a manager to approve or reject.
The Roll
Hours per person for the week, with the CSV for your payroll.
Drawn for this page — sample names and times.
Take the product tourBuilt for both shapes of business
Chains and facilities, one system.
Whether your people are spread across a city or across one production floor, Taptime maps to how you actually operate.
Restaurant & retail chains
One plaque per site, each with its own network address on file. Late-night bars welcome: a check-out pairs with the last open check-in of the same business day — a day that starts at a time you set, 05:00 by default — not the calendar date.
9 sites · 1 dashboard · hours per locationFor restaurants & barsSingle site, many teamsProduction & facilities
One plaque at the gate; departments resolve automatically from each employee's profile — bakers against their 04:00 shift, meat production against 05:00. No extra hardware per floor.
5 departments · per-department shifts · records filtered by departmentFor production & facilitiesPricing
Pay per person. Nothing per device — there are none.
No hardware bill, no installation fee, no maintenance contract. Plaques included.
A 60-person chain runs on €90/month.
Your signup month and the two after it are free. Founding customers: price locked for life.- Locations & departments, each on its own hours
- Branded wall plaques included & replaced free
- Dashboard, flags & manager review queue
- Hours & headcount reports, CSV export for your payroll flow
- Manual entries, marked apart from tapped ones
Questions, answered
The ones every ops manager asks.
What if someone doesn't have their phone that day?
The shift lead records the entry from the dashboard. It's stored with a "Entered by a manager" label, so your reports always show exactly which records were tapped and which were vouched for.
What if a phone's NFC fails?
If a phone's NFC is off or fails on the day, the same page opens from the venue's QR code with the camera. A QR tap carries no cryptographic signature — no proof of a physical touch — so by default it needs your venue's network address to match before it's approved. A position on its own is not enough: without the address it's stored, flagged and queued for review. Setting a phone up still takes one real tap on a plaque.
Can someone clock in from home?
Not without a manager seeing it. The plaque's chip signs each tap with a one-time cryptogram, so the link only exists if a phone touched the plaque at that moment. A copied link, a screenshot, or yesterday's URL is rejected by the server. By default, a check-in without the code needs your venue's network address to be approved; from anywhere else it's stored, flagged and queued for a manager rather than approved.
How do we migrate from our current device?
Add your people from the dashboard and hand out invite links — one profile at a time; there is no file import today. If your HR system already holds the list, the integration API can write your people and locations once Taptime enables it for you. The old box is yours to unplug whenever you're ready — Taptime doesn't talk to it.
Where does the data go?
Into your dashboard: hours per person and per site, and the monthly headcount you're billed on — both as CSV exports for your payroll. Once Taptime enables the integration API for you, your HR or payroll system can also read every counted tap from a feed or receive it by webhook; entries typed by a manager stay in the CSV. Taptime is the source of truth for in/out times — it doesn't try to replace your payroll.