PBS
PBSStaff check-in and check-out
Record staff check-ins with QR codes and cards
Kiosk QR code, personal QR code or RFID card. Leave, shifts and timesheets in one panel. Free for up to 10 staff.
Before a punch is accepted, the server checks
- 01The QR signature and expiry
- 02Whether the QR code was already used
- 03Whether the phone is bound to this person
- 04Whether the location is real and inside the site fence
- 05Whether the cooldown passed and the person is not on leave
- 06The time is written with the server clock
PBS is cloud software that records when your staff start and finish work, and manages leave and timesheets in the same place.
Three ways to punch
The organization admin decides which methods are on. All three can run side by side.
- 01
Scan the kiosk QR code with a phone
A QR code rotates on a tablet or screen at the entrance. Staff scan it with the PBS app; it renews every 30 seconds and is void once used.
You need
A tablet or computer screen at the entrance, the staff member’s phone
- 02
Show your personal QR code
Each person has an encrypted QR code in the app that renews every 15 seconds. They show it to the kiosk camera.
You need
A kiosk device with a camera, the staff member’s phone
- 03
Tap an RFID or NFC card
Staff without a phone tap their card. 125 kHz, Mifare Classic and DESFire cards are supported. The card operator assigns cards in the panel or the app.
You need
A USB desktop card reader, an NFC phone or tablet, or a hardware terminal
Rules that make buddy punching hard
The organization admin switches each of these on or off and sets the values in Settings.
- Single-use rotating QR
- The kiosk QR code is signed, valid for 30 seconds and marked used the moment it is scanned. A screenshot cannot be reused.
- Device binding
- Each person is bound to one phone. Punches from another phone are rejected; the admin approves phone changes.
- Mock location block
- If a location-spoofing app is detected, the punch is rejected and the reason is shown.
- Geofence
- Punches outside the site coordinate and radius are rejected. The location accuracy limit is set between 20 and 500 metres.
- Server time
- The server, not the phone, sets the punch time. Offline punches use the time the phone recorded, and only within the allowed window.
- Cooldown
- A wait of 30 seconds to 60 minutes between two punches by the same person. The default is 60 seconds.
- Audit log
- Manual corrections, approvals and settings changes are stored with who did them and when.
You can also allow punches only from listed IP addresses per site, and block punches from staff on approved leave.
Who can do what
Permissions are enforced on the server. Unauthorized requests are rejected, not just hidden.
| Role | Can |
|---|---|
| Organization Admin | Everything: staff, sites, kiosks, cards, shifts, settings, reports and approvals. |
| Card Operator | Enrols cards, assigns them to staff, marks them lost or cancelled. Sees the staff list and punches. |
| Unit Manager | Sees live status and attendance of their unit, approves leave and missed-punch requests, runs reports. |
| Auditor | Read-only access to live status, attendance, reports and timesheets. |
| Staff | Punches in and out, sees their history, requests leave and missed-punch corrections. |
Everyday HR
Leave
Staff request leave in the app; their manager approves in the panel or on the phone.
Missed punches
Staff who forgot to punch submit the time; once approved, the record is created with an audit trail.
Shifts
Shift templates and a calendar. Late tolerance is set between 0 and 60 minutes.
Timesheets
Worked time and overtime, with warnings near the 270-hour yearly overtime cap and for rest gaps under 11 hours.
Export and import
Attendance reports as CSV and Excel, timesheets as Excel. Bulk staff upload from CSV or Excel.
Mobile app
The PBS app for iOS and Android is in preparation: Today screen, QR scanning, personal QR code, requests and a team view for managers.
Coming soon to the App Store and Google Play.
Until then staff can punch from the phone browser through the panel, with device binding turned off in Settings. Card punches need no phone.
Data protection
Privacy notice (Turkish)- Card numbers are not stored in plain text; an HMAC digest with an organization-specific key is kept.
- The personal QR code is encrypted with AES-256-GCM and valid for 15 seconds.
- Each organization’s data is kept separate; no other organization can see it.
- Staff send access, correction, deletion and objection requests from the app.
- Attendance records are kept for 5 years by default, configurable from 1 to 10 years; expired records are deleted.
Pricing
Start free and switch plans as your team grows.
Starter
Free for up to 10 staff
Create your organization₺0/month
10 active staff · No credit card · Ready immediately
Cloud PBS
Up to 25 staff
Buy₺449/month
25 active staff · Monthly subscription
Multi-site PBS
Up to 100 staff
Buy₺899/month
100 active staff · Monthly subscription
Kiosk + Reporting
Pay per staff member
Buy₺19/staff/month
Monthly fee per staff member · Monthly subscription
Enterprise
Organizations above 100 staff
Contact usQuote
Setup and training · Hardware terminal integration · Contract pricing
Every plan includes
- Three punch methods
- Anti-cheat settings
- Five roles
- Leave, missed punches, shifts, timesheets
- CSV and Excel export
Want to try first?
The demo opens a sample organization for 30 minutes so you can explore the panel without setting anything up.
PBS için 30 dk ücretsiz canlı demo başlatın.
Questions
Is PBS free?
The Starter plan is free for up to 10 active staff and needs no credit card. Move to a paid plan as your team grows.
Do I need hardware?
No. A tablet or screen at the entrance and the staff member’s phone are enough. For cards, use a USB desktop reader or an NFC phone or tablet.
Can staff punch for someone else?
It gets hard. The kiosk QR code is single-use and renews every 30 seconds. With device binding on, each person can only punch from their own phone. Card punches show the cardholder’s name on the kiosk.
Is location required?
If the site requires location, phone punches ask for it and must be inside the fence. Card punches do not need location.
What if the internet drops?
The phone app stores the punch and sends it when back online. Delayed punches are accepted for 72 hours by default, configurable from 0 to 168 hours; 0 turns offline punching off.
Does it run payroll?
No. PBS prepares the timesheet; download it as Excel and import it into your payroll software.
Can I create several organizations?
Yes, one account can create up to 3 organizations.
Set up your organization in minutes
Sign in with your Ankara Yazılım account, enter your organization details and start adding staff in the panel.