The 201 file, kept
Personal, employment and government identifiers, dependants, and an
append-only employment history — a change is dated and kept, never
overwritten. Separation retains the record; it does not delete a person who worked for
you.
Rates that are not one monthly figure
Monthly, daily and hourly rates on effective-dated assignments a
database constraint refuses to overlap. A rate change mid-period produces two spans and
two figures, never one blended rate that reconciles to nothing.
Attendance from where people actually are
A geofenced clock-in from the employee's own bound handset, with an offline queue for a
site with no signal. A doubtful punch is recorded and flagged, never dropped —
and "the phone did not know where it was" is kept distinct from "300 m away", because
those lead an approver somewhere different.
A DTR you can argue with
Punches paired in Asia/Manila against the schedule, a midnight-crossing shift filed on
the day it started, exceptions listed with the evidence behind them, and corrections that
are new attributed records rather than edits.
Leave, overtime and official business
Service Incentive Leave seeded and undeletable. Balances held on submission. Approval
chains that resolve to a person — or to HR with the reason. Overtime payable
only up to what an approver actually authorised, with the remainder recorded and unpaid.
Payroll that can explain itself
Every peso on a payslip names the row that produced it. A posted run is immutable and
records the exact statutory table versions it used, so it recomputes identically six
months later. Corrections are adjustment runs, not edits.
Sealed payslips
An AES-256 encrypted PDF opened with a passphrase the employee sets themselves — and that
we cannot recover, because there is no function in the product that
could. A lost passphrase means re-issue. Every open, download and refusal is audited.
Self-service on a phone
Payslips, leave balances, filing a request, seeing the balance before filing,
own DTR, own documents. Installable, works through a dead spot, and every route is scoped
to the employee's own record by construction.
Reimbursements that are not pay
Receipted claims, mileage on your own rates, per diem, cash advances and their
liquidation. A reimbursement returns the employee's own money, so it reaches net pay and
touches no contribution basis, no taxable income and no 13th-month base.