The Face Recognition Time Clock System That Stops Buddy Punching

Who Is Truein Built For?

• Best for: Construction general contractors, trade and specialty contractors, and field service companies running 100 or more hourly workers across multiple job sites, scaling to 5,000 and 10,000+ staff enterprises.
• Also a strong fit: Facility management companies, cleaning and janitorial services, and landscaping crews working across dispersed client sites.
• Also used by: Logistics and warehousing operations, manufacturing plants running shift-based hourly crews, staffing firms placing workers at client sites, and multi-outlet retail chains.
• Not built for: Desk-based, office, or white-collar teams. Truein is built for field, hourly, and multi-site workforces.

What to check before you commit:

• Does a failed match block the punch, or just save a photo? This is the difference between prevention and documentation.
• How does the system handle a printed photo or a phone screen? Ask whether detection happens at the punch or after it, and expect a straight answer.
• Does it verify identity in the mode your crews actually use? Verification on personal phones is no help if your workers punch at a shared tablet, and the reverse is equally true.
• Does it hold up in field conditions? Ask how the system performs with hard hats, masks, and beards, and what the vendor's stated accuracy range actually covers.
• What happens when the network drops? On remote sites, offline capture is the difference between a record and a gap.
• Is location verified as well as identity? Face answers who. Only geofencing answers where.
• Does anything review patterns before payroll? Or is that a person reading every timesheet?
• Can subcontractor crews be scoped and capped separately? Ask this before three agencies bill you for the same headcount.
• Is your payroll provider a live integration? Confirm it rather than assuming it.
• What are your biometric consent obligations? Written consent, a retention policy, and an audit trail, checked against the states you operate in.

The fastest question in a vendor demo: show me what happens when a worker whose face does not match tries to punch. If the answer is that it gets saved for review, you are buying documentation, not prevention.

What Is Buddy Punching, and What Does It Cost?

Buddy punching is when one worker clocks in or out on behalf of another who is not there. It is the most common form of time theft in hourly workforces, and it is close to invisible in paper, spreadsheet, PIN, and badge systems, because all of those record a punch without proving who made it.

It usually starts small. A crew member running late texts a coworker. Nobody thinks of it as fraud. Then it becomes routine, and the cost compounds quietly until someone reconciles a payroll cycle against the actual site headcount.

The American Payroll Association, now PayrollOrg, reports that about 75% of U.S. businesses are affected by buddy punching, and analysis from Nucleus Research puts the cost near 2.2% of gross payroll at affected companies. On a $5 million annual payroll, that is roughly $110,000 a year.

The pattern is consistent across job sites: shared credentials at the gate, punches from off site, a supervisor clocking in a crew that has not fully arrived, and subcontractor headcount nobody can verify.

Is a Face Recognition Time Clock Legal in the U.S.?

Yes, when it is deployed with consent. Truein uses consent-first enrollment, so workers are informed before any face data is captured. That makes the technology biometric consent-compliant by design rather than a legal gray area.

Five states have biometric consent requirements that apply directly to workplace time and attendance.

‍California. The employee exemption under the CCPA, as amended by the CPRA, expired on 1 January 2023. California employees now hold full notice, access, and deletion rights over biometric data collected at work, including for time and attendance. Any company with California sites should treat this as an active consideration rather than a future one.

‍Illinois. The Biometric Information Privacy Act (BIPA) requires written consent before biometric data is collected and, unlike most state biometric laws, lets individuals sue directly. That private right of action is why BIPA carries more practical risk than any other statute on this list.

‍Texas. The Capture or Use of Biometric Identifier Act (CUBI) requires a company to inform employees and obtain consent before capturing biometric identifiers, including a record of face geometry, for a commercial purpose. Enforcement sits with the Texas Attorney General only, with civil penalties of up to $25,000 per violation.

‍Washington. RCW 19.375, the Washington Biometric Privacy Act, requires notice and consent before a company enrolls a biometric identifier in a database for a commercial purpose. It is enforced solely by the Washington Attorney General through the state's Consumer Protection Act.

‍Colorado. HB 24-1130, effective 1 July 2025, requires employee consent before biometric identifiers are collected for employment use, a written retention and deletion policy, and deletion within 24 months of an employee's last interaction unless a statutory exception applies. Time and attendance is a permitted use when those requirements are met.

‍How Truein supports this: consent-first enrollment, so workers are informed before any face data is captured.

• Disclaimer: This section is for general informational purposes only and does not constitute legal advice. Biometric privacy laws vary by state and change over time; the information above reflects publicly available sources as of the article's publish date and may not reflect subsequent legal developments in your jurisdiction. Before deploying biometric attendance technology, consult a licensed attorney familiar with the applicable state and local requirements.