--- title: "Access Control & Attendance System | BudgetWorks" description: "Cloud door access and attendance: NFC tag tap, Android / iOS wall terminals, Face ID, fingerprint, QR and GPS clock-in." url: https://www.budgetapp.works/en/industries/access-attendance canonical_url: https://www.budgetapp.works/en/industries/access-attendance last_updated: 2026-10-12 --- Chan Tai Man clocked in · Site A Door opened · HQ Lobby Pass added to Apple Wallet GPS: on site · Tower 2 Correction approved by manager Face ID verified HR · Mei Site · Ken Facilities · Ray # Access Control & Attendance System Doors, turnstiles and clocking in one cloud system — Android / iOS wall terminals, Face ID, fingerprint, card, QR and GPS, feeding payroll automatically. ## On every staff phone Staff clock in with the phone they already carry — including a staff pass in Apple Wallet. Scan site tag Hold your phone near the NFC tag GPS: on site ### Scan the site NFC tag Tap the phone on the tag at the gate or work area to prove you are on location. Clocked in 08:58 Site A · Tower 2 Face ID verified GPS: on site Synced to HR ### Clocked in in seconds Face ID or fingerprint, GPS and sync status confirmed on one screen. WalletAdded Your Company Staff Pass C Chan Tai Man Site Supervisor STAFF ID KS-0421 ACCESS HQ · Site A Hold near the reader, no need to open the app ### Staff pass in Apple Wallet Add the staff card to the phone's wallet and tap a compatible reader, no app unlock needed. Know your staff can carry the pass in Apple Wallet: no plastic card to forget or replace, and HR can revoke it remotely. Works with compatible NFC readers. ## The short answer BudgetWorks Access Control & Attendance is a cloud system that opens doors and records attendance with one credential: an NFC tag tap, phone, card, QR code, Face ID or fingerprint. It runs on Android and iOS wall terminals and a mobile app with GPS clock-in, keeps working offline, handles cross-midnight shifts and overtime, and syncs to HR and payroll. Pricing is HK$5 per Access Entry. What it is Cloud access control and attendance platform for multi-site employers Credentials NFC tag, phone, FeliCa / Octopus card, QR, Face ID, fingerprint, Apple Wallet staff pass Devices Android / iOS wall terminals, mobile app, open-standard door controllers (HID, Lenel, Dahua, Hikvision, Mercury) Attendance GPS clock-in, offline sync, cross-midnight shifts, overtime rules, correction approvals Integrations REST API, CSV / JSON export, HR and payroll systems, CIC Daily Attendance Record (Phase 2) Deployment Cloud, Docker or VM on your own Linux server, one central database Best for Construction, property and facilities teams in Hong Kong with HQ, depots and sites Pricing HK$5 per Access Entry Last updated: 9 October 2026 ![Staff tapping a phone on an NFC tag beside a wall-mounted terminal](/img/aa-highlights.jpg) ## Built to stand out ### Dynamic workflow Approvals, shifts, access rules and notifications are configured as flows, not code — change them any time without a new release. ### Dynamic security updates Rights, credentials and device policies update instantly across every door and terminal; lost cards and leavers are cut off at once. ### High performance Sub-second (<0.3s) validation at the door, with one cloud database serving HQ, depots and sites. ### Off-site support GPS clock-in and offline buffering for site teams and remote locations, syncing automatically. ### Multiple clock-in states In, out, break, overtime, on-site and split-location punches, all recorded against the right shift. Simple tag pricing HK$5per Access Entry Each Access Entry costs just HK$5, at the lowest replacement cost in the market. ![Obsolete office PC and discontinued card reader](/img/aa-problems.jpg) ## Problems it replaces ### Legacy servers Unsupported operating systems and single USB-dongle dependencies. ### End-of-life readers Discontinued devices with no spare parts and no mobile credentials. ### Many systems, many sites HQ, depots and site offices each run their own apps and data. ### Scattered attendance data Logs gathered from several sources before HR can use them. ![Hand tapping a phone on an NFC tag beside a turnstile](/img/aa-features.jpg) ## What you get ### NFC tags & wall terminals NFC tags at entrances and work points, HK$5 per Access Entry, plus compact Android / iOS wall terminals where you want Face ID or fingerprint. ### Face ID & fingerprint Optional biometric clocking and door access, enrolled at the terminal. ### Cards, phones & QR FeliCa / Octopus cards, BLE / NFC mobile passes and dynamic QR codes, validated in under 0.3 seconds. ### GPS clock-in Geofenced clocking for site teams, with split-location in and out. ### Offline resilience Terminals and the app keep recording during outages and sync automatically. ### Shift & overtime engine Cross-midnight shifts counted correctly (23:00 to 03:00 is 4 hours) and OT per company policy. ### Role-based doors Rights by person, team or department, separate control for executive rooms, OT-window access. ### Audit & reports Full change log, attendance, lateness, absence and OT reports, and who is on site in an emergency. ![HR officer printing a photo staff badge](/img/aa-hr.jpg) ## Built for HR ### Staff card issue HR creates the staff record, prints the photo badge and issues the card; default door access is granted automatically. ### Leaver & lost card One action in HR revokes doors, printers and gates; every change is kept in an audit log. ### Corrections & approvals Missed or wrong punches become correction requests with manager approval. ### Shifts, OT & cross-midnight 23:00 to 03:00 is counted as 4 hours, with overtime by company policy. ### Qualifications on the card Store licences, certificates and registrations apart from basic personal data. ### HRIS & payroll sync Real-time REST feed and CSV / JSON export so HR never re-keys attendance. ## HR workflows ### 1\. New joiner card workflow HR starts it; the rest follows automatically. 1. HR creates staff Record and photo created 2. Card issued Photo badge printed and handed over 3. Credential registered Card, phone or Wallet pass linked 4. Access granted Default doors opened automatically 5. Attendance to payroll Daily records flow to HR ### 2\. Leaver workflow Access ends the moment employment does. 1. HR marks leaver Termination or lost card 2. Access revoked Doors, gates and printers cut off 3. Audit logged Who changed what and when ![Site manager checking attendance on a tablet in a site office](/img/aa-workflows.jpg) ## Workflows ### 1\. System architecture One cloud platform replaces separate door, attendance and mobile systems. 1. Android / iOS wall terminals Face ID, fingerprint, card, QR 2. Mobile app GPS clock-in, BLE / NFC pass 3. Central cloud platform One database for HQ, depots and sites 4. Door controllers Open-standard readers and relays 5. HR, payroll & regulators REST API, CSV / JSON, CIC filing ### 2\. Tap the NFC tag to clock in An NFC tag at each entrance or workstation — HK$5 per Access Entry. Staff tap their phone or card on the tag; works offline and syncs when the network returns. ![Tap the NFC tag to clock in](/img/nfc-tag-clock-in.jpg) 1. Arrive Staff reach the entrance or work point 2. Tap NFC tag Tap phone or card on the wall tag 3. Confirm identity Face ID or fingerprint on the phone, or card 4. Verify Checked against staff record, shift and access rights (<0.3s) 5. Door opens Relay unlocks the door or turnstile 6. Recorded & paid Punch, OT and lateness flow to payroll ### 3\. Site clock-in: GPS + NFC tag scan Staff scan the site's NFC tag to prove they are on location, with GPS as a second check and offline buffering on poor signal. ![Site clock-in: GPS + NFC tag scan](/img/aa-flow-site.jpg) 1. Open app Staff open the mobile app on site 2. Scan NFC tag Scan the tag fixed at the site entrance or work area 3. GPS geofence Location checked against the allowed site area 4. Face ID / fingerprint Phone biometrics confirm who is clocking 5. Offline buffer Stored locally if there is no network 6. Sync Uploaded automatically once connected ### 4\. Joiner, leaver and visitor access Access rights follow HR status, with a full audit trail. ![Joiner, leaver and visitor access](/img/aa-flow-visitor.jpg) 1. HR creates staff New joiner added, card issued 2. Enrol Face and fingerprint enrolled at the terminal 3. Default access Standard doors granted automatically 4. Leaver Termination or lost card revokes all access 5. Visitor QR Pre-registered guests scan a QR; host is notified ### 5\. Attendance correction Missed or wrong punches go through manager approval. ![Attendance correction](/img/aa-flow-correction.jpg) 1. Missed punch System flags the exception 2. Request Staff submit a correction 3. Manager approves Approve or reject with a reason 4. Record amended Change logged in the audit trail ![HR manager reviewing attendance reports](/img/aa-requirements.jpg) ## Requirements it is built for ### Attendance * GPS clock-in, mandatory * Optional Face ID, mobile and WhatsApp clocking * Offline logging with automatic sync * Overnight shifts without manual split-day fixes * Overtime from shift rules * Correction requests with manager approval ### Access control * Default door access when a card is issued * Independent rights for management rooms * Off-hours access for approved OT * Automatic revoke on termination or lost card * Complete audit log of rights changes ### Integration * API for internal systems to pull attendance * Real-time REST feed and CSV / JSON export to HRIS * Optional CIC worker-registration checks * Follow-me printing and photo badge printing ### Continuity & support * Records continue through network outages * Alerts when a device goes offline * Defined data recovery procedures and timelines * Escalation paths and support contacts for critical incidents ![Construction site with tower cranes at golden hour](/img/aa-phases.jpg) ## Delivery phases ### Phase 1 — Core Central platform, multi-credential readers, wall terminals and mobile app, shift engine, HR integration, visitor and temporary passes, secure printing. ### Phase 2 — Construction compliance Automated Daily Attendance Record filing to the CIC, C-Card qualification checks and extended offline buffering for remote sites. ## Questions we hear from facilities and HR teams Straight answers to the problems that make teams replace an old access and attendance setup. Our annual power-off inspection once damaged equipment. How do you avoid a costly replacement? Doors run on standard PoE controllers, so a surge means swapping a low-cost part, not a proprietary unit. Devices keep local access rights and record offline, the system alerts administrators when a device goes offline, and recovery procedures and timelines are defined up front. Our server is an old Windows XP machine with a USB security dongle. What replaces it? One cloud platform deployed on your own Linux cloud server (Docker or VM) with a single central database. No dongle, no unsupported operating system, no single physical box to lose. Our card readers are discontinued with no spare parts. Do we have to rip everything out? No lock-in: the platform works with open controllers such as HID, Lenel, Dahua, Hikvision and Mercury. Compatible hardware can stay, and you add NFC tags, mobile passes and QR where the old readers cannot. HQ, depots and sites each use different apps. How do we get one view? Everything lands in one database for HQ, depots and site offices, with role-based rights by person, team or department, and one place to run reports. Attendance data comes from many sources. How does HR get clean records? Clock-ins from NFC tags, wall terminals, mobile GPS and cards are consolidated into one record per person. A real-time REST feed and CSV / JSON export push it to your HR and payroll systems, so nobody re-keys data. Do we have to use Face ID or fingerprints? No. They are optional. Most staff just tap a phone, card or NFC tag, validated in under 0.3 seconds, and sites can switch biometrics on only where they want them. What if the network drops at a remote site? The app and terminals keep logging clock-ins and door events locally and upload automatically when the connection returns, so no punches are lost. Our old system showed a night shift as 27 hours. Is that fixed? Yes. Cross-midnight shifts are calculated correctly: 23:00 to 03:00 is 4 hours, with overtime by your policy and no manual split-day fixes. What happens when someone leaves, loses a card, or forgets it? HR marks the leaver or lost card and doors, gates and printers are cut off at once, with a full audit log. Forgotten cards get a temporary pass, and visitors use a pre-registered QR code. We run construction sites. What about CIC requirements? Phase 2 adds automated Daily Attendance Record filing to the CIC, C-Card qualification checks and extended offline buffering for remote sites. What does it cost? HK$5 per Access Entry. Contact us for a quote covering your doors, sites and users. ## Plan access control and attendance for your sites [Request a Demo ](/en/contact) --- Site map for agents: [llms.txt](https://www.budgetapp.works/llms.txt) · [sitemap.md](https://www.budgetapp.works/sitemap.md)