Timesheet Entries
Employee
Pay period
Hours
Validation (T·I·S)
Quality
Status
Xero
Review
Showing 0 of 0 entries
Employee
Wing
ID
Clock-in
Hours
Leave balance
Xero
Status
Loading…
Filter by wing:
All shift templates
Organisation
Facility identity and locale (managed via tenant provisioning)
Organisation name
Shown in the manager header, reports and the Xero payroll header
— Managed
Facility name
Sub-name shown in the employee clock-in app
— Managed
Timezone
All timestamps, pay periods and reports use this timezone
— Managed
Locale
Date format, currency symbol and number separators
— Managed
Base domain
Set at deployment time (CDK)
— Fixed
Vanity subdomain
Your branded host for the back-office app — provisioned during tenant onboarding
— Managed
Pay period
Cycle length, start day and calendar anchor (org-admin only)
Cycle length
How long each pay period runs
— Managed
Start day
Pay periods begin on this day of the week
— Managed
Calendar anchor date
All periods are calculated from this epoch — must align with the Xero payroll calendar
— Fixed
Approval reminder threshold
Approval reminders are sent this many days after the period ends
— Managed
Facial recognition
AWS Rekognition configuration and quality settings
Face-match confidence threshold
The same value as Security & fraud — edit it there
—% Set in Security
Re-enrolment temp window
Staged photos sit in temp storage for this long before being committed or deleted
48 hours Fixed
Recognition collections
Each organisation uses isolated Rekognition collections — no cross-tenant face matching
Per-organisation (isolated) Managed
Quality scoring system
3-dot validation (Timesheet · Identity · Security) applied to every clock-in
3-dot system Managed
Manager PIN
The global PIN that unlocks the enrolment area on the employee kiosk. Rotate it whenever a manager leaves.
Current PIN
Checking status…
—
Set a new PIN
New PIN
6–12 digits. Employees never see this — it only gates the kiosk enrolment area.
Kiosk lockout
Reset lockout
Clears a kiosk locked out by too many wrong PIN attempts
Leave types
Which leave types are available and whether they are paid
| Type | Paid | Availability |
|---|
Alternative Holiday accrual: 7.5 h per public holiday worked (Holidays Act 2003, s56–s60). Fixed by statute — not editable here.
Xero & payroll
Connection status, time-rounding, and leave mapping
— Connected — payroll sync is active
Connected— Authorisation expired — reconnect to resume payroll sync
ExpiredNot connected Connect your Xero organisation to sync timesheets, leave, and pay runs
Xero Couldn't reach Xero — retry, or disconnect and reconnect
Can't reachPayroll calendar
Xero payroll calendar ID synced from your Xero organisation
— Managed
Time-rounding mode
How clock-in/out times are converted to payable hours on sync
— Managed
Leave → Xero mapping
| Leave type | Xero leave type |
|---|
Names must match exactly: each leave type syncs to the Xero leave type shown, so it must exist under that name in your Xero organisation. Some, like ACC, you add in Xero yourself. Public Holiday is handled natively by Xero, so it isn't synced as leave.
Users & access
People with access to this organisation
Adding, editing and removing users is managed by your administrator.
Password policy
Password rules — managed centrally
Minimum length
8 charactersManaged
Required character types
Upper + lower + digitsManaged
MFA
Optional (TOTP)Managed
Data & compliance
Retention policies and audit-trail configuration (NZ Employment Relations Act)
Timesheet retention
Held 7 years for IRD tax records; NZ Employment Relations Act s130 sets a 6-year minimum for wage and time records
7 years Fixed
Glacier archive threshold
Exports older than this move to S3 Glacier Instant Retrieval for cost efficiency
90 days Managed
Audit log
All approval, rejection and config-change events are written to CloudWatch Logs and cannot be deleted by managers
Enabled (immutable) Managed
Enrolment photo retention
Biometric photos are stored in S3 (SSE); temp staging photos auto-delete after 48 h
Per-employee (S3 SSE) Managed