Staff open a link on their own phone, or a shared tablet at the counter — tap their name and look at the camera. The face confirms who it is; GPS confirms they are at the branch. No terminals to install, no device to hand out, no maintenance contract.
Built for multi-branch F&B, retail and construction teams in the UAE.
A biometric terminal runs about AED 1,750–1,890 per branch, plus installation and 10–15% yearly maintenance. Five branches is roughly AED 13,000 before you clock anyone in.
Monthly hours per employee in the SIF layout your bank needs for WPS. Most attendance apps stop at a CSV and leave the rest to a spreadsheet.
Explicit biometric consent with versioning, automatic deletion when someone leaves, and a PIN alternative — because consent can't be a condition of employment.
A stored photo won't pass: the device asks the person to turn their head, and the server checks the sequence it asked for.
| Biometric terminals | Global attendance apps | Tsutome | |
|---|---|---|---|
| Upfront per branch | AED 1,750–1,890 + install | — | AED 0 |
| Yearly maintenance | 10–15% of hardware | — | None |
| WPS / SIF payroll export | Usually not | Not included | Included module |
| Works on a device you own | No | Yes | Yes |
| PDPL consent & deletion | Manual | Generic | Built in |
| Alternative for staff who decline | Rarely | Rarely | PIN fallback |
Billed yearly in advance. Multi-year prepayment reduces the rate.
Drop a pin on each branch and set the radius. Takes minutes.
Add names. Each person enrols their own face at the branch device.
Send staff the branch link, or leave an old phone at the counter. Either works — the face and the GPS do the checking, not the device.
In a managed Postgres database with row-level isolation per company. Face data is stored as a mathematical template, not a photo, and is deleted when an employee leaves.
They use a PIN. Under PDPL, biometric consent has to be freely given, so a refusal cannot stop someone from clocking in.
No. It defeats a photo held up to the camera, and it is one layer alongside GPS, device binding and an audit trail. We don't claim a formal presentation-attack certification.
Yes. Export your full attendance history at any time. We don't hold records hostage — even an unpaid account can still clock in and read its own data.
Thirty days, your real staff, no card required. If it doesn't fit, nothing to cancel.