Operational pattern
Core workflow rows
| Subject | Status | Control |
|---|---|---|
| QR | validated | location not stored |
| Web | draft pending validation | server final |
| Mobile | privacy gated | consent required |
HR-R2 Attendance
Attendance and time clock baseline
Attendance records support validated server-side clock drafts while avoiding raw geolocation/device fingerprints in UI evidence.
API endpointClock draft ready/people/v1/attendance/records?companyId=company-alpha
Postgres-backed API
Sensitive-field handling
No raw leakageHR-R2 screens and evidence avoid national ID, raw salary detail, health data, geolocation, photo, signature, device fingerprint, raw attachment, and receipt blob values.