Attendance management system: what it must do in India
Ways to capture attendance, how shifts and overtime should work, the registers the Labour Codes ask for and how to handle biometric data, from the team building ERPStack.
Last updated 21 October 2026
What is an attendance management system?
An attendance management system records when employees start and finish work, by biometric, face, mobile or web clock-in, and checks it against their shift. It works out late marks, absences and overtime, lets staff correct missed punches with approval, keeps the attendance register the law asks for, and passes the totals to leave and payroll.
Where ERPStack is today
ERPStack is in development. It is not yet available to download or buy, and the features on this page are planned, not shipped.
Sign upHow can an attendance system record attendance?
Most businesses use more than one method: a device at the factory gate, mobile clock-in for field staff and a web button for office staff. A good system accepts all of them and treats each punch the same way.
| Method | How it works | Suits | Watch out for |
|---|---|---|---|
| Fingerprint biometric | A device at the entrance matches the finger against a stored template | Factories, warehouses, shop floors | Biometric data handling; dirty or worn fingers fail to read |
| Face recognition | A camera or tablet matches the face, touch-free | Sites with many workers, hygiene-sensitive areas | Lighting, masks and helmets; also biometric data |
| Mobile app with GPS and geofence | The punch counts only inside a set radius of the site | Field sales, service technicians, multiple sites | Location data is personal data; weak GPS indoors |
| Web clock-in | A button in the browser, often limited to office IP addresses | Office and hybrid staff | Easy to punch for someone else without other checks |
| RFID or ID card | A card tapped on a reader | Offices and plants already issuing cards | Cards are shared or lost |
| Shift roster | Not a capture method, but the plan every punch is checked against | Anyone running shifts or rotating weekly offs | Rosters changed on paper and not in the system |
What do the Labour Codes say about working hours and overtime?
The four Labour Codes, including the Occupational Safety, Health and Working Conditions Code, 2020 (OSH Code), were made effective from 21 November 2025 (PIB release). The OSH Code brings together 13 earlier laws (Labour Ministry FAQ), among them the Factories Act, 1948, which it repeals (section 143). Its hours and overtime rules are what an attendance system now has to apply. Central and state governments make the detailed rules, so check the rules for your state.
| Rule | What the OSH Code says | What attendance software must do |
|---|---|---|
| Daily hours | No worker may be required or allowed to work more than 8 hours a day; intervals and spread-over are notified by the appropriate government (section 25) | Flag shifts that run past the daily limit and track breaks |
| Weekly hours | The Labour Ministry describes 8 hours a day and 48 hours a week as the standard, with daily hours extendable with the worker’s consent on overtime pay (OSH Code FAQ) | Total hours per week, not only per day |
| Weekly holiday | No worker may work more than six days in a week, with compensatory holidays where an exemption removes one (section 26) | Warn when a roster gives no weekly off |
| Overtime pay | Twice the rate of wages, counted on a daily or weekly basis, whichever favours the worker (section 27) | Calculate both ways and pass the higher figure to payroll |
| Registers | Registers in the prescribed form, electronically or otherwise, covering hours, weekly rest, leave, overtime and attendance (section 33) | Produce the register in the state’s format on demand |
The Labour Ministry’s compliance handbook for employers lists a register of attendance-cum-muster roll and a register of wages, overtime and deductions among the registers to keep under the OSH Code. Software that keeps these from the raw punches avoids the month-end rush to fill in paper registers.
How should shifts, overtime and regularisation work?
Raw punches are only the start. The system has to turn them into a day’s status that payroll can trust.
- Shift matching. Each punch is compared with the employee’s roster, including night shifts that cross midnight, so late marks and early exits are worked out automatically.
- Overtime approval. Extra hours are recorded as overtime only after a manager approves them, because the OSH Code requires the worker’s consent for overtime.
- Regularisation. When someone forgets to punch or the device was down, they request a correction with a reason, and a manager approves it. The original punch and the change are both kept.
- Leave and holidays. Approved leave and holidays fill the day, so an absent day is not marked as loss of pay by mistake.
- Payroll handoff. At the cut-off date, paid days, loss-of-pay days and overtime hours lock and flow to payroll, with no re-typing.
What does the DPDP Act mean for biometric attendance?
Fingerprints, face scans and location are personal data under the Digital Personal Data Protection Act, 2023. The government notified the DPDP Rules on 14 November 2025, with an 18-month phased compliance timeline (PIB release). The points in the Act that matter most for attendance:
| Provision | What it says | What it means for attendance |
|---|---|---|
| Section 7(i) | Personal data may be processed for the purposes of employment, without separate consent | Attendance is an employment purpose; using the data for anything else is not covered |
| Section 8(5) | Reasonable security safeguards to prevent a personal data breach, including by processors | Encrypt templates, limit who can see them, and check the device vendor’s handling |
| Section 8(6) | Breaches must be reported to the Data Protection Board and each affected person | Know where biometric data is stored so a breach can be assessed |
| Section 8(7) | Erase data once the purpose is no longer served, unless another law requires it to be kept | Delete templates when an employee leaves; keep the attendance register as the law requires |
In practice: store templates rather than photos of fingers or faces, keep them off shared drives, tell staff what is collected and why, and offer another way to clock in to anyone who cannot use the device.
How do you choose an attendance management system?
| Question to ask | What a good answer looks like |
|---|---|
| Does it accept every capture method you use? | Devices, mobile with geofence and web, all landing in one record |
| Does it handle your shifts? | Rotating and night shifts, weekly offs and multiple sites |
| Is overtime worked out both ways? | Daily and weekly calculations, with approval before it is paid |
| Can staff fix missed punches? | A request and approval flow that keeps the original punch |
| Does it feed leave and payroll? | Paid days and overtime lock at cut-off and flow to payroll |
| Can it print the statutory registers? | In your state’s prescribed format, from the same data |
| How is biometric data stored? | Templates encrypted, access logged, deleted on exit |
How will ERPStack handle attendance?
ERPStack is an ERP for Indian small and mid-sized businesses that Perimattic is building, with HR alongside accounting, inventory and sales. For attendance, the plan:
- Punches from biometric devices, mobile clock-in with geofencing and web clock-in in one record.
- Shift rosters, including night shifts and rotating weekly offs.
- Overtime worked out daily and weekly at twice the rate of wages, released to payroll only after approval.
- Regularisation requests with an approval trail.
- Attendance, leave and payroll working from the same records, with registers produced from them.
Status: ERPStack is in development and none of this is available to use yet. Sign up to tell us how your business records attendance today.
This page is general guidance, not legal advice; laws were checked on 22 October 2026. State rules under the Labour Codes vary, so confirm the rules that apply to your establishment.
More on HR and payroll
Attendance management, answered
Is biometric attendance legal in India?
Nothing in the Digital Personal Data Protection Act, 2023 bans it. The Act lets an employer process personal data for employment purposes, but the employer must protect it with reasonable security safeguards, report breaches and erase it once the purpose is served. Offering a non-biometric option and storing templates rather than images reduces the risk.
How is overtime calculated under the Labour Codes?
Under the Occupational Safety, Health and Working Conditions Code, 2020, overtime is paid at twice the rate of wages for work beyond the daily or weekly hours set by the appropriate government, counted on a daily or weekly basis, whichever favours the worker. The Labour Ministry’s FAQ describes the standard as 8 hours a day and 48 a week.
Can attendance registers be kept electronically?
Yes. Section 33 of the OSH Code requires employers to maintain registers in the prescribed form “electronically or otherwise”, covering hours of work, leave, overtime and attendance among other particulars. Check the forms your state has prescribed, because the register format and the return you file come from the rules.
Want ERPStack built around how your business bills?
Sign up to tell us what you need, follow the build and be first to try ERPStack when it opens.
Sign up