HR (HRM)
Face verification
Check that the person clocking in is the person enrolled, to stop buddy punching, with consent and strict limits on how long photos are kept.
Contents: Who can use it · Enrol your face · How punches are checked · Face review · Settings · Enrolled faces · Example · FAQ
Who can use it
- My face tab: anyone with the Clock in or out permission (web clock-in).
- Enrolled faces and Settings tabs: staff with the face List permission. Changing settings, erasing someone's face and Always review need the face Update permission.
- Face review: staff with the face Review permission.
Where: HR → Attendance → Face verification and HR → Attendance → Face review.
| Screen | What it is for |
|---|---|
| Face verification → My face | Enrol, replace or erase your own face |
| Face verification → Enrolled faces | Who is enrolled, and until when |
| Face verification → Settings | Switch it on, choose the engine, set scores and retention |
| Face review | Punches the check was not sure about, or could not check |
Enrol your face
- Open Face verification. The My face tab shows Enrolled or Not enrolled.
- Take or choose a photo: face the camera, no hat or mask, good light.
- The first time, tick the consent box ("I agree that my face photo is processed to check my clock-in and kept for up to … days").
- Click Enrol my face. You see "Your face is enrolled." and the Kept until date.
To change your photo, click Replace my photo. To delete everything, click Erase my face data and confirm. You can enrol again later. The same can be done from the mobile app.
Your consent is kept in Privacy → Consent records. If HR records that you withdrew it, your face data is erased.
How punches are checked
The check runs only when all of these are true: Check faces when people clock in is on, your country rules allow it, and you are enrolled. People who are not enrolled clock in as before.
It applies to web clock-in (My attendance) and app location punches. Device punches and app fingerprint or face unlock punches are not checked. When it applies, you must add a photo before you can clock in.
| Result | What happens |
|---|---|
| Score at or above the Match score | Punch recorded. No photo is kept |
| Score between the two scores, the engine cannot tell a live face, or the person is marked Always review | Punch recorded and sent to Face review with its photo |
| Score below the Review score, or the photo does not look live | Punch refused. Ask your supervisor to record it (Record a punch on Import attendance) |
| No engine could answer | Follows When the engine does not answer |
Face review
- Open Face review. The filter shows To review by default (also Approved, Rejected, All).
- Each row shows the punch time, Why (for example "The faces looked only partly alike") and the Score.
- Click Review. Compare the Punch photo with the Enrolled photo, add a Note if useful.
- Click Approve punch or Reject punch. A rejected punch is removed from attendance.
Both photos are removed from the check as soon as you decide.
Settings
| Setting | What it does |
|---|---|
| Check faces when people clock in | The main switch |
| Face engine | None (nothing is matched), My own or on-premise service (enter Service address and Access key) or Provided by the platform (only when offered). Photos go only to the engine you choose |
| Match score (50 to 99, default 80) | At or above this, the punch goes through |
| Review score (30 to 98, default 60) | Between the two scores a person reviews. Below, the punch is refused. Must not be above the match score |
| Require a live face | Refuses a photo of a photo or a screen |
| When the engine does not answer | Accept the punch and send it to review or Accept the punch without a check |
| Keep punch photos (days) (1 to 365, default 90) | Only for punches that waited for review or were refused |
| Keep enrolled faces (days) (30 to 1825, default 730) | After this the person enrols again. Country rules may set a shorter limit |
Click Save. With no engine, nobody can enrol.
Enrolled faces
The list shows each person, their status (Active, Replaced, Expired, Erased), Enrolled date and Kept until.
- Always review: turn on for lookalikes or twins. Every face punch of that person goes to a reviewer.
- Erase: deletes that person's enrolled photo and template. They must enrol again.
Every night, expired punch photos and enrolments are removed, and leavers' face data is erased.
Example scenario
Padma Net Support has field technicians who clock in from the web. HR turns on Check faces when people clock in with their own face service, match score 80 and review score 60. Technician Sabbir enrols his face. One morning, in poor light, his punch scores 70. It is recorded and appears in Face review; supervisor Mitu Rahman compares the photos and clicks Approve punch. Sabbir's twin brother Sajib also works there, so HR marks both Always review.
Tips
- Start with the default scores. Raise the match score only if you see wrong matches.
- Check Face review daily so attendance is correct before payroll.
Troubleshooting and FAQ
"Face verification is not switched on for your workspace." The main switch is off.
"Face verification is not allowed for you under the rules of your country." Your employer's country rules forbid it. Clock in another way.
"Face verification has no engine set up yet." An administrator must choose a Face engine.
"Your face did not match." Try again in good light, or ask your supervisor to record your punch.
I cannot see Enrolled faces or Settings. You need the face List permission.