What you'll learn
- Why a fingerprint terminal bolted to one site cannot verify a crew working across several
- Whether biometric attendance is legal under POPIA, and what doing it right actually requires
- The working-time records the BCEA expects you to keep, and how attendance data satisfies them
- How to track hours across multiple sites and subcontracted or brokered labour
- A field-first checklist for choosing the right system, not just the one with the most features
On any given morning, a construction firm running crews across a dozen active sites has no manager standing at most of them. The same is true for a facility management company with cleaning teams inside client buildings, or a logistics operator with staff spread across depots. Attendance still has to be recorded at every one of those sites, accurately enough to run payroll and hold up to a labour inspector. That is the real test for time and attendance software in South Africa, and it is the test most systems on the market were never built to pass. This guide is for the ops and HR leaders who have to solve it.
What is time and attendance software, and what makes South Africa different?
Time and attendance software records when employees clock in, clock out, and take breaks, then turns those hours into payroll-ready data. That much is standard. Every system on this market does it, whether it runs on a fingerprint terminal, an access card, or a mobile app.
What separates the South African market is two things the feature lists rarely mention.
The first is how attendance gets captured. Most systems sold here are built around hardware fixed to a single location: a biometric reader at the entrance, a clocking machine on the wall. That works for a business where everyone reports to one building. It starts to break the moment your workforce is spread across sites.
The second is the compliance weight sitting behind every attendance record. Under the Basic Conditions of Employment Act, employers have to keep accurate records of the hours each employee works. Under POPIA, the moment you capture a fingerprint or a face to do it, you are processing a category of personal information the law treats with extra caution. A facility management company clocking cleaning crews at forty client sites is generating both a payroll record and a POPIA obligation with every single clock-in.
So the question is not simply which system tracks time. It is which one tracks it accurately across your actual working conditions, and keeps you compliant while doing it.
Why do traditional clocking systems fall short for multi-site teams?
Traditional clocking systems fall short because they are anchored to a place, not to a person who moves. A fingerprint reader or a card terminal is fixed to one wall, in one building. Your workforce is not.
Think about what that means in practice. To clock a crew at a new site, someone has to buy the hardware, install it, network it, and maintain it. Every site is another device to fund and another device that fails. When the reader goes down, attendance tracking at that site stops with it, and you find out at payroll.
Then there is the fraud the hardware was supposed to prevent. A card or a PIN can be handed to a colleague, so one worker clocks in two. Fingerprint readers close that gap at a fixed door, but they were never designed for a crew that starts its shift at a client's premises where you have no door to put them on.
The deeper problem is verification. A clocking record is only worth something if you can prove who was actually there. On a single site with a supervisor watching the terminal, that proof is easy. Across many sites with no manager present, it disappears. A construction firm running fifteen active sites has no one confirming that the person who clocked in at site nine is the person who worked it.
That is the gap. Not tracking time, but verifying attendance where no one is watching.
Is biometric time and attendance software POPIA-compliant?
Yes, you can run biometric time and attendance software lawfully in South Africa. POPIA does not ban it. What it does is set conditions, because a fingerprint or a face is not ordinary personal information.
Under the Protection of Personal Information Act, biometric data is classified as special personal information. Processing that category is prohibited by default unless a specific ground applies, most commonly the employee's consent, or that the processing is necessary to meet an obligation in law. In other words, capturing a worker's face to clock them in is lawful, but only once you have a proper basis for it.
Here is what compliance actually asks of you.
- A lawful basis before you capture. Consent has to be voluntary, specific, and informed. A worker signing an employment contract is not automatically consenting to biometric processing unless it is set out clearly.
- Purpose limitation and minimality. Capture only what attendance requires. Biometric data collected for clocking cannot quietly become data for something else.
- The least revealing form of the data. A system that converts a face or fingerprint into a mathematical template and discards the raw image carries far less risk than one storing photos of every worker. This is how you satisfy POPIA's minimality and security conditions in practice.
- Security and the worker's rights. Employees can ask what you hold about them and why. Your system has to be able to answer.
So POPIA is not a reason to avoid biometric attendance. It is a reason to be deliberate about which system you run and how it stores data. The risk was never the fingerprint. It is capturing one without a lawful basis and keeping it carelessly.
A manufacturing company that rolls out facial clock-in across three plants without recording consent or documenting its purpose has an attendance system that works and a POPIA exposure that stays invisible until the Information Regulator or a dismissed employee asks how the data was handled.
None of this is theoretical. The Information Regulator investigates complaints and issues enforcement notices, and serious breaches carry real penalties. Confirm your own grounds and records against POPIA and the Information Regulator's guidance before you deploy.
What attendance records does South African labour law require?
South African employers are legally required to keep records of the hours each employee works. This is not optional, and a clocking system is the most practical way to meet it.
The Basic Conditions of Employment Act requires every employer to record each employee's working time and what they were paid, and to keep those records for three years. That single requirement is why accurate attendance data matters beyond payroll: it is the evidence that you paid people correctly for the time they actually worked.
The detail is where manual methods and unverified clocking come apart. The BCEA sets rules that all depend on knowing precisely when someone started and stopped:
- Overtime. It has to be agreed and paid at the correct premium. You cannot calculate it correctly if the underlying hours are estimated.
- Sunday and public holiday work. These attract different pay treatment. A record that does not reliably show the date and hours cannot support the calculation.
- Daily and weekly limits. Ordinary hours and rest periods are regulated. Proving you stayed within them requires a clean record, not a reconstructed one.
Now put that against a multi-site reality. When a worker fills in a timesheet from memory at the end of the week, or a supervisor signs off hours nobody verified, the record still exists. It just will not hold up if a worker disputes their pay or a labour inspector asks for proof.
A logistics operator paying Sunday premiums off self-reported hours across several depots is exposed twice over: to payroll leakage if the hours are inflated, and to a compliance finding if they cannot show how each figure was reached.
Accurate, verified attendance is what turns a payroll number into a defensible record. That is the standard the BCEA quietly assumes, and the one a place-anchored or paper-based system struggles to meet across sites.
How do you track attendance across multiple sites and subcontractors?
You track it by verifying the person, not the place. Once attendance is tied to who is actually present rather than to a device on a wall, the number of sites stops being the problem it is with fixed hardware.
Two capabilities make that work across sites. The first is identity verification that travels: face recognition on a shared tablet or a worker's phone confirms the individual, so a crew can clock in at any site without a terminal installed there. The second is location proof: GPS geofencing records that the clock-in happened at the assigned site, not in a car park down the road. Together they answer the question fixed hardware cannot, who was where, and when.
Subcontracted and brokered labour is where this matters most, and where the SERP goes silent.
A large share of South African site work runs through subcontractors and temporary employment services. In construction, facility management, and mining, the crew on your site is often not on your payroll. That creates a specific problem: you are billed for their hours, but you have no independent record of them. You are trusting the labour broker's numbers.
- Billing accuracy. When you can verify subcontractor attendance yourself, you pay for hours that were actually worked, not hours that were submitted.
- Accountability across parties. A shared, verified record gives you and the subcontractor the same source of truth, which settles disputes before they reach an invoice.
- Compliance reach. Your obligations do not vanish because the labour is brokered. Verified records help you show who was on site, which matters for both safety and audit.
A facility management company running contract cleaners across forty client buildings, supplied by three different labour brokers, has forty sites of attendance it is paying for and cannot independently confirm. That is not a tracking problem. It is a verification and accountability problem, and it is the one that costs the most quietly.
Solving it needs a system built around portable identity verification and location proof, not around hardware you install site by site.
How to choose time and attendance software in South Africa
Choose based on how your workforce actually operates, not on the length of the feature list. Every system on this market tracks time. The ones worth shortlisting are the ones that hold up across your sites and keep you compliant while doing it. Run each option through these questions.
- Can it clock a crew at a site with no device installed there? This is the first filter, and it removes most of the market. If the answer depends on buying and mounting hardware at every location, you are back to the problem you started with. We already have fingerprint terminals is worth examining here: terminals work where they are bolted down, but a shortlist built around them quietly assumes your workforce comes to the hardware. Most field crews do not.
- How does it verify identity, and what does that really cost? Fingerprint is cheaper holds only until you count the full bill: a reader per site, installation, networking, maintenance, and the hours lost when a unit fails. Face recognition on a device you already own removes most of that, and it works in site conditions where dust and worn fingerprints defeat a scanner. Compare total cost across sites, not the price of one terminal.
- How does it store biometric data? Ask directly whether it keeps a mathematical template or a stored image, and whether consent is built into onboarding. Isn't biometric a POPIA risk is the wrong question. The right one is whether this specific system is built to satisfy POPIA. If the vendor cannot answer clearly, that is your answer.
- Can you see subcontractor and brokered hours yourself? The labour broker handles attendance is exactly why you need your own record. If the system cannot give you an independent, verified view of contracted hours, you are still paying off someone else's numbers.
- Does it produce payroll-ready, BCEA-defensible records? The output has to feed your South African payroll cleanly and stand up as proof of hours worked. A report that needs manual rework before payroll is a cost, not a feature.
Score each system on these five, not on how many modules it lists. A construction firm that shortlists on feature count often ends up with a powerful terminal-based system it cannot deploy at the two sites that open next month.
Truein: time and attendance software built for multi-site and contract teams
Everything above points to one requirement: verify the person, not the place, and keep the data compliant. Truein does both.
Truein is a face recognition and GPS-based time and attendance system for contract and multi-site workforces. Workers clock in with a selfie on a shared tablet or their own phone, so a crew can start at any site with no hardware installed there. GPS geofencing confirms the clock-in happened at the assigned site, and face recognition confirms who actually clocked in.
On compliance, Truein uses encrypted face templates as the primary method for biometric matching, supports explicit consent during enrollment, and lets customers control raw image retention settings based on their privacy policy and compliance needs.
Truein gives you centralized visibility of attendance across locations from a single dashboard, and it exports payroll-ready records that stand up as proof of hours worked. New workers self-register on site in minutes, which matters when a project ramps up or a season peaks and you are onboarding a crew rather than an individual.
Truein serves construction, facility management, manufacturing, logistics, and retail, the industries where the workforce is spread across sites by default. Truein supports more than 500 customers, across over 10,000 locations and more than 500,000 workers.
Conclusion
The right time and attendance software in South Africa is not the one with the longest feature list. It is the one that fits how your people actually work. If your teams are spread across sites, that means a system that verifies who clocked in and where, without a terminal at every location, and that handles biometric data the way POPIA expects. Get those two things right and attendance stops being a payroll guess and a compliance risk, and becomes a record you can stand behind.
Start with your hardest site, the one where no one is watching the clock. If a system can prove attendance there, it can prove it anywhere you operate.
Frequently asked questions
Is biometric attendance legal in South Africa under POPIA?
Yes. Biometric attendance is legal in South Africa, but POPIA classifies biometric data as special personal information, so you need a lawful basis before you capture it. In practice that means getting proper consent, collecting only what attendance requires, and storing the data securely. A system that keeps an encrypted template rather than a stored image makes that easier to satisfy.
Can I track attendance for workers across multiple sites?
Yes. Attendance across multiple sites is tracked by verifying the worker rather than relying on a device fixed to one location. Face recognition on a shared tablet or a personal phone confirms identity at any site, and GPS geofencing confirms the clock-in happened at the assigned location. This removes the need to install and maintain hardware at every site.
Which time and attendance software is best for construction or facility management teams?
The best time and attendance software for construction and facility management is one built for a workforce that moves between sites. Look for identity verification that works without a terminal at each location, GPS confirmation of the clock-in site, visibility of attendance across all sites in one place, and records that export cleanly to payroll. Feature count matters less than whether the system works where no supervisor is present.
Does time and attendance software integrate with South African payroll systems?
Most modern time and attendance software exports attendance data in a format payroll systems can use, which removes manual re-entry and reduces errors. When you evaluate a system, confirm that its output maps to your specific payroll process and to the overtime and public holiday rules you have to apply, so hours flow through without rework.
What is the difference between a biometric clocking system and time and attendance software?
A biometric clocking system is the method of capturing attendance, usually a fingerprint or facial reader that records who is present. Time and attendance software is the platform that turns those clock-ins into schedules, overtime calculations, reports, and payroll-ready data. Biometric capture is one input; the software is what makes the data useful.
How much does time and attendance software cost in South Africa?
Pricing for time and attendance software in South Africa varies by the number of workers, the features you need, and whether the system requires hardware at each site. Hardware-based systems carry the added cost of a device per location plus installation and maintenance, while software that runs on existing phones or tablets avoids most of that. Ask any vendor for total cost across all your sites, not the price of a single unit.
