A fully cloud-based time and attendance system that centrally manages turnstile, card reader panel and mobile passes for permanent and subcontractor staff.
IoT gatewayCloud connectivity without opening ports
Web · Mobile · APIHead office, construction sites, subcontractors
THE REALITY ON SITE
On site, you enter with a card and leave with a card.
Permanent and subcontractor workers clock in and out by passing through a full-height or tripod turnstile with the card access system. Office doors are covered by card reader panels, while office and field staff join the system through a mobile app with location and QR verification.
Full-height turnstiles
Full-height turnstiles at the main construction site entrances. Dual readers for entry and exit; only one person passes at a time.
Tripod turnstiles
Turnstiles with card readers at service and vehicle gates. Subcontractor time restrictions are enforced on the device.
Card reader panels and mobile
Card reader panels at office container, canteen and warehouse doors; mobile access with GPS + QR for office staff.
Every pass records the person, the time and the access pointProcessed into the same timesheet, whatever the device type
THE CHALLENGE
No static IP on site, and the modem changes every month.
Conventional time and attendance devices need port forwarding, NAT rules and firewall settings to connect to the cloud. On construction sites that run on LTE modems, where carriers and devices change frequently, these settings have to be redone every time; often they cannot be done at all, and the devices stay cut off from central management.
Network setup at every site
Static IP, port forwarding, firewall exception: redone at every site, with every modem change.
Cards loaded on site
A new subcontractor worker's card becomes active hours later; a departed employee's card stays active on site for days.
No central visibility
Real-time occupancy and device status on site are unknown; reports are compiled by hand at the end of each period.
THE SOLUTION
Cloud without opening ports, through the IoT gateway.
A single device on siteThe IoT gateway developed by Karatsoft collects all the turnstiles and card reader panels on the construction site over the local network.
A single outbound channelIt opens a single encrypted outbound connection to the cloud. No static IP, NAT rule, port forwarding or firewall configuration is required.
Real-time managementCard provisioning, remote opening, firmware and health monitoring for every device, centrally and instantly.
Resilient to outagesIf the connection drops, passes are stored on the device and transferred in full once it is restored.
CARD LIFECYCLE
Card enrolled; at the turnstile within seconds.
As soon as a new employee's card details are saved, they are sent to every device at the authorized access points. A termination or deactivation removes the card from the devices just as quickly. No card is ever loaded onto a device by hand.
0 sCard enrolledPerson, card number and authorized access points selected.
1 sProcessed in the cloudThe card service queued the change for the relevant gateways.
3–5 sOn the devicesTurnstiles and panels received the card; the sync status appeared in the panel.
DepartureInstant revocationThe deactivated person's card was removed from all devices.
MANAGEMENT CONSOLE
Every site, live.
Currently insideReal-time headcount per site based on turnstile counts, split between permanent and subcontractor staff.
Live pass feedWho passed, through which gate, on which device: on the console within seconds.
Late arrivals and absencesThe day's summary at a glance in the morning; details in one click.
Device and gateway healthThe number of online devices and IoT gateway latency on the same screen.
PEOPLE
Permanent and subcontractor staff in one list; actions in bulk.
Department and company togetherEach person is listed with their department or subcontractor, with card number and access method alongside.
Bulk activate / deactivateSelected people are activated or deactivated in bulk, assigned cards, and have their site and position updated.
Import from ExcelBranch, department, position and person records are imported from a single file using a field-mapping wizard.
Person groupsAccess permissions, time restrictions and shifts come from the group; a person added to a group automatically receives all of its permissions.
SUBCONTRACTOR MANAGEMENT
Every subcontractor in its own list, with its own report.
Staff by companySubcontractor workers are created under their company; lists and filters work with a company breakdown.
Man-days and progress paymentsThe monthly man-day report, calculated from turnstile passes, is exported to Excel for progress payments.
Time restrictions and shiftsCompany- or group-specific entry time windows are enforced on the device; passes outside them are reported.
Subcontractor supervisor roleThe company supervisor sees only their own staff and approves their leave requests.
REPORTS
Time and access point together in every cell.
Detailed monthly reportEntry and exit times and the gate used share the same cell; regular hours, overtime and undertime are color-coded.
Late arrivals · monthlyDelays relative to shift start, net of tolerance, in a matrix by person and day.
Daily report setLate arrivals, early leavers, absence, undertime, excess breaks, passes at a different branch, currently inside.
Excel in one clickAll reports are exported to Excel with site, person type and subcontractor filters.
AUTOMATED REPORT EMAILS
At 08:30 in the morning, the report is in the site manager's inbox.
Per-person deliveryWhich reports go to which manager, on which day and at what time: a separate setting for each recipient.
Subcontractor breakdownLate arrival and absence lists are sent as a separate table for each company.
Monthly progress payment reportAt the start of each month, the subcontractor man-day report is delivered to accounting automatically.
Template-based contentThe organization's own email template, with full name and date tags.
SHIFTS AND LEAVE
From night shifts to leave documents.
Shifts and toleranceConstruction site, office and security shifts; night shifts that run into the next day, flexible shifts, break and tolerance definitions.
Assignment to individuals and groupsShifts are assigned to individuals one by one or to groups in bulk; fixed-term shifts (such as concrete pours) are defined with a date range.
Approval flowHierarchical, single-approver or custom approval; for subcontractor staff, the company supervisor is added as an intermediate step.
Document uploadDocuments such as medical certificates and written requests are uploaded from the mobile app, appear on the approval screen and are stored in the personnel file.
ARCHITECTURE AND SECURITY
Fully cloud-based; devices seamlessly integrated through the IoT layer.
There are no servers, licenses or on-premises installations. Time and attendance devices integrate with the cloud system through the IoT connectivity layer; adding a new site, device or user requires no infrastructure changes.
Cloud core
Device orchestration, event engine, identity and card service, and reporting on a single platform; scales automatically.
Roles and scope
Page permissions by position, data scope by site and company; manual interventions are logged.
Integration API
Two-way sync with enterprise HR and ERP systems through person, branch, QR code and entry/exit services.