IDENTITY FOUNDATION ACTIVE
Workspace is tenant-scoped.
Authentication, company provisioning, membership checks, invitations and branding are now wired to the new SaaS foundation.
WORKSPACE SAFEGUARDS
✓ Server verifiedProtected by design
✓Firebase identityEmail/password sessions with verification.
✓Tenant-aware membershipYour session receives only workspaces you belong to.
✓Server-timestamped attendanceTime in/out and breaks are validated by Cloudflare, not the browser clock.
✓People & team administrationRoles, teams, seats, invitations and deactivation are tenant-scoped and audited.
✓Weekly Schedule EngineDrafts, publishing, day offs and recurring shifts inherit tenant/team permissions.
✓Leave Management EngineBalances, approvals, calendar overlays and schedule-aware time off are tenant-scoped.
✓Reports & Workforce AnalyticsAttendance, schedules, approved OT and leave roll into role-scoped operational reports and exports.
✓Payroll & TimesheetsConfigurable pay periods, rates, audited corrections and locked payroll-ready snapshots inherit the same role boundaries.
✓SaaS billing & subscriptionsTrial enforcement, seat limits, Lemon Squeezy Checkout, billing portal and webhook-synced subscription status are workspace-scoped.
TENANT BOUNDARY
✓ IsolatedWorkspace security
TT
Workspacetenant
Data scope/tenants/…
PlanPro trial
RoleOwner
Trial ends—
v1.2.1.2 LAUNCH READINESS
ReadyOperational visibility & notification control
Platform operations can surface launch health on demand, while workspace Owners/Admins control optional operational email categories under the deployment safety gate.
SERVER-TIMESTAMPED ATTENDANCETODAY
Clocked out
Time in when you are ready to start work. Your browser clock is display-only.
WORKED TODAY00:00:00UTC
YOUR ATTENDANCE
Recent workdays
| Date | First in | Last out | Worked | Breaks | Status |
|---|---|---|---|---|---|
| No attendance records yet. | |||||
Server authorityCloudflare validates membership, role and state transitions, then writes the timestamp. Changing a computer clock does not change the recorded attendance time.
TENANT-SCOPED SCHEDULE ENGINE
Weekly workforce schedule
Published shifts follow your workspace, role and team boundaries.
WEEKLY ROSTER
Schedule
PublishedDraftDay off
Loading schedule…
Schedule boundaryOwners/Admins can schedule the workspace. Managers and Team Leaders can schedule only their assigned teams. Employees receive only their own published shifts.
SCHEDULE + ATTENDANCE COMPLIANCE
Overtime & schedule compliance
Compare published schedules with server-recorded attendance and route overtime through your authorized approval chain.
WORKED VS SCHEDULED
Server calculatedSchedule compliance
| Person | Date | Scheduled | Actual | Variance | Attendance |
|---|---|---|---|---|---|
| No compliance data yet. | |||||
APPROVAL WORKFLOW
Tenant scopedOvertime requests
| Employee | Date | Requested | Suggested | Status | Reason | |
|---|---|---|---|---|---|---|
| No overtime requests yet. | ||||||
Approval boundaryEmployees request their own overtime. Team Leaders can team-approve members of their assigned teams; Managers/Admins/Owners can issue final approval. No reviewer can approve their own request.
APPROVAL-AWARE TIME OFF
Leave
Request time off, review balances and keep approved leave connected to schedules and attendance.
APPROVED LEAVE
Schedule connectedLeave calendar
Open Leave to load the calendar.
ENTITLEMENTS
Current yearLeave balances
Loading balances…
APPROVAL WORKFLOW
Tenant scopedLeave requests
| Employee | Dates | Type | Amount | Status | Reason | |
|---|---|---|---|---|---|---|
| No leave requests yet. | ||||||
Approval boundaryEmployees request their own leave. Team Leaders can team-approve members of assigned teams; Managers/Admins/Owners can issue final approval. Approved leave is reflected in Schedule and compliance views.
TENANT-SCOPED WORKFORCE DIRECTORY
People & Teams
Manage roles, team assignments, invitations and access without leaving the workspace boundary.
WORKFORCE DIRECTORY
Team members
| Person | Role | Team | Status | Joined | |
|---|---|---|---|---|---|
| Loading people… | |||||
TEAM STRUCTURE
✓ Tenant scopedTeams
Loading teams…
ACCESS PIPELINE
Invitations
| Role | Status | Delivery | Expires | ||
|---|---|---|---|---|---|
| No invitations yet. | |||||
ACCOUNTABILITY
Workspace audit trail
Owner/Admin
Open Audit trail to load activity.
Audit events are server-written and tenant-scoped. This view reads up to the most recent 1,000 audit records; CSV export respects the active filters.
Role boundaryOwner/Admin changes go through Cloudflare. Employees cannot promote themselves, edit tenant roles or reactivate disabled accounts from the browser.
SERVER-VERIFIED WORKFORCE ANALYTICS
Reports & workforce analytics
Combine published schedules, server-recorded attendance, approved overtime and approved leave without crossing the workspace or team boundary.
PERIOD TREND
ScopedScheduled vs worked hours
ScheduledWorked
Run a report to see the trend.
WORKFORCE SIGNALS
What needs attention
No report loaded yet.
EMPLOYEE SUMMARY
0 peoplePerformance by person
| Employee | Scheduled | Worked | Attendance | Late days | Absent | Undertime | Approved OT | Leave |
|---|---|---|---|---|---|---|---|---|
| Run a report to load employee totals. | ||||||||
DAILY DETAIL
0 rowsAttendance & compliance ledger
| Date | Employee | Status | Scheduled | Worked | Breaks | Late | Undertime | Approved OT | Leave |
|---|---|---|---|---|---|---|---|---|---|
| No daily records yet. | |||||||||
Reporting boundaryOwners/Admins see the workspace; Managers and Team Leaders see assigned teams; Employees see only their own records. CSV and print exports contain only the records currently authorized and filtered on screen.
SERVER-VERIFIED PAYROLL-READY TIMESHEETS
Payroll & timesheets
Turn published schedules, net attendance, approved overtime and paid leave into reviewable pay-period records. Pay estimates follow your configured policy and are not jurisdiction-specific payroll advice.
TIMESHEET WORKFLOW
ScopedPay-period timesheets
Open→Submitted→Reviewed→Approved→Locked
| Employee | Status | Regular | Approved OT | Paid leave | Rest-day | Breaks | Estimated gross | |
|---|---|---|---|---|---|---|---|---|
| Loading payroll-ready timesheets… | ||||||||
DAILY TIMESHEET
Choose an employeePay calculation detail
| Date | Status | Scheduled | Worked | Regular | OT | Paid leave | Rest-day | Breaks | Corrections | Estimate |
|---|---|---|---|---|---|---|---|---|---|---|
| Choose an employee to inspect daily payroll inputs. | ||||||||||
Payroll boundaryEmployees submit only their own timesheet. Team Leaders and Managers review only authorized teams. Company Owners/Admins final-approve, set pay policy/rates, create audited corrections and lock the period. Locked snapshots no longer recalculate from later attendance changes.
LEMON SQUEEZY-SYNCED BILLING
Subscription & plan
Manage the workspace plan, seat allowance and payment lifecycle. Lemon Squeezy handles checkout/payment details; TrinoTime enforces access and seats from the server-synced subscription state.
WORKSPACE BILLING
Server verifiedCurrent subscription
Workspace—
Subscription—
Seat usage—
Renewal—
PLANS
Choose the right seat allowance
New subscriptions start in Lemon Squeezy Checkout. Existing subscribers manage upgrades, downgrades, payment methods and cancellation through the Lemon Squeezy Customer Portal.
Billing boundaryOnly Company Owners/Admins can access this page. Employees cannot view customer/payment identifiers. Expired trials and inactive subscriptions become read-only until billing is restored; billing routes remain available so Owners/Admins can recover access.
WORKSPACE CONTROL CENTER
Settings & system health
Manage workspace presentation and inspect safe deployment diagnostics without exposing credentials or customer payment identifiers.
WORKSPACE EXPERIENCE
Tenant scopedBrand & interface
Company name, colors and terminology are available across plans. v1.2.1.2 preserves presets, Brand Health, Draft → Publish, multi-surface previews, secure uploads, custom-domain readiness, recent-version restore and plan-aware transactional email identity while adding launch-readiness operations and workspace notification preferences.
Logo & identityPlan-aware workspace and login brandingTerminologyTeams, employees, managers and leave labelsWhite labelBusiness attribution plus domain provisioning/status
WORKSPACE SAFETY
Server verifiedOperational safeguards
Protected actions continue to validate Firebase identity, active tenant membership, role/team scope and billing state on the Cloudflare Worker.
Tenant isolationEvery protected route is workspace-scopedPayroll integrityLocked snapshots remain immutableZero-idle session pollingNo background Firestore session loop