Choosing a Clocking In System for a Small Business

Search for a clocking in system for a small business and you get a wall of machines: fingerprint units at £45, face-recognition terminals at £600, card racks, fobs and cloud subscriptions. They all record a time. What separates them is everything after that: what the system costs over three years, whether it stops one person clocking in for another, what UK GDPR asks of you, and how the hours reach payroll.

We sell a phone-based system, so read this knowing that. We have tried to be straight about where a terminal on the wall is the better buy, because for some businesses it is. For the wider picture of recording hours legally, see our guide to employee time tracking.

The Four Kinds of Clocking In System

1. Card (punch) machines

The traditional clock: each employee has a card, the machine stamps the time on it, and someone adds up the cards at the end of the week. Starter kits with a machine, a rack and 100 cards were listed at around £95 to £130 on UK sites in October 2026. They are simple, need no Wi-Fi and nobody needs training. Everything after the stamp is manual: totting up, checking breaks, typing hours into payroll.

2. Standalone fingerprint, RFID or PIN terminals

A small terminal by the door that identifies people by fingerprint, a fob or a PIN, and stores the times internally. Basic units were listed at roughly £42 to £170. Most have no monthly fee: you download the records over USB or Wi-Fi into a spreadsheet. Cheap to buy, but the spreadsheet is still yours to manage.

3. Cloud terminals

The same idea with the records sent to online software, often with face recognition. Listings ran from about £260 to £600 per terminal, with the software sometimes included and sometimes charged monthly. You get reports without the USB stick, but you are paying for hardware and, often, a subscription.

4. Phone apps with location checks

Staff clock in and out on their own phones, and the app can check they are at an approved location when they do. There is no hardware, and it works wherever people work: on site, at a client, in a van. A clock in app also usually builds the timesheet and handles approval, which a terminal leaves to you.

Three-Year Cost for a 10-Person Team

The sticker price is the smallest part of the decision, so here is the cash cost over three years for ten staff on one site. Hardware prices are the October 2026 listing ranges above; the app figure is TimeTally's published price.

On cash alone the app is the most expensive line, and we would rather say so than hide it. A £50 terminal and a spreadsheet costs less than a subscription. The comparison that matters is cash plus the hours someone spends each week turning clock records into payroll: totting up cards, chasing missed punches, checking breaks, retyping totals. Put your own wage rate against that time before deciding. If it is an hour a week at £15, that is £2,340 over three years, more than any line in the table.

Buddy Punching: What Each System Actually Stops

Buddy punching, one person clocking in for an absent colleague, is the reason many businesses buy a clock in the first place. Each system handles it differently.

• Cards and fobs stop nothing. Whoever holds the card can use it.
• PINs stop very little. PINs get shared.
• Fingerprint and face recognition stop it properly. That is their whole selling point, and it comes with the GDPR obligations below.
• Phone apps with location checks stop a different problem. A geofence proves the phone was on site when someone clocked in, which stops clocking in from home or the car park. It does not prove who was holding the phone. Being honest about that matters; our page on GPS clock in explains exactly what a geofence can and cannot tell you.

The other half of the problem is edited times after the fact. In TimeTally, strict clocking means hours can only come from clocking in and out: staff cannot type or change their own times, and only a manager can correct an entry. For the employment-law side of investigating it, see our guide to time theft and buddy punching.

Biometrics and UK GDPR: Read This Before You Buy a Fingerprint Clock

Most of the machines in a search for clocking in systems use fingerprints or faces, and they are sold as plug-and-play. Under UK GDPR they are not. The ICO's guidance on biometric recognition is clear on three points:

1. It is special category data. Biometric data used to recognise people needs an Article 9 condition, not just a lawful basis.
2. Consent from employees is hard to rely on. The ICO notes that people who fear adverse consequences from refusing "may feel they have no choice but to agree". You must offer a suitable alternative, such as a card, fob or PIN, to anyone who does not consent.
3. A DPIA is highly likely to be required. In the ICO's words, "It is highly likely that you will trigger the requirement to complete a DPIA if you are using biometric recognition systems."

This is not theoretical. In February 2024 the ICO ordered Serco Leisure to stop using face and fingerprint scanning to monitor attendance at 38 leisure facilities, covering more than 2,000 employees, and to destroy the data. Staff had not been offered an alternative, and the ICO said less intrusive means, such as ID cards or fobs, were available.

If you still want biometrics, budget for the DPIA and run a genuine non-biometric option alongside it. If you do not want that work, a fob terminal or an app gives you most of the benefit without special category data. Location data from an app is personal data too, though not special category. A geofenced clock in like TimeTally's reads location only at the moment someone clocks in, clocks out or switches job, not during the shift; our guide to employee monitoring and GDPR covers what to tell staff.

“The app is simple to use, reliable, and makes managing holidays, absences, and staff records straightforward. The system has saved us a significant amount of administration time.”

Jordan Ingoe, CLI Manchester

When a Terminal Beats an App

A phone app is not always the right clocking in system for a small business. A terminal on the wall is the better choice when:

• Phones are not allowed on the floor, as in some food production, cleanrooms or secure sites.
• Many staff do not have smartphones, or you do not want to ask them to use their own.
• Everyone works at one site and walks past the same door, so location checks add nothing.
• You want a shared clocking point. TimeTally has no kiosk mode: each person signs in to their own account, so on a shared tablet staff sign in and out in turn. A purpose-built terminal is quicker for a queue at shift change.

And a phone-based clocking in app wins when people work across sites, at clients or on the road; when you want the timesheet built and approved without anyone retyping it; and when you would rather not manage hardware or biometric data at all.

TimeTally

Clock In on the Phone, Payroll Without Retyping

Staff clock in and out on iPhone or Android and record their breaks. Hours build the timesheet, you approve them in one place, and approved timesheets go to Xero or QuickBooks, or out as CSV. Add GPS checks for £1 per person if you need them.

Start Free 14-Day Trial

No hardware or biometrics

Location checked only at clock-in and out

Xero, QuickBooks and CSV export

£3 per employee per month • Free for 14 days • No credit card required

Questions to Ask Any Supplier

1. How do hours get to payroll? USB stick, spreadsheet, or a direct export to the payroll software you already use?
2. What does it do with a missed clock-out? Someone forgetting to clock out is the most common fix you will make. See how it is flagged and who corrects it.
3. Are breaks recorded? You need to show staff got their rest breaks; the rules are in our guide to rest between shifts.
4. Can staff edit their own times? If they can, the clock is a suggestion. Look for a setting that locks hours to the actual clock-in.
5. Does it round? Rounding is legal in the UK if it is in the contract and never takes pay below minimum wage for the hours worked. The US "7-minute rule" does not apply here; our guide to timesheet rounding rules in the UK explains why.
6. If it is biometric: what is the non-biometric alternative, and will the supplier help with your DPIA?
7. What is the total over three years, including software fees, replacement cards or fobs, and a second terminal if you open another site?

If you are moving off paper, our guide to switching from paper timesheets covers the transition, and our step-by-step guide to setting up a time and attendance system covers rollout once you have chosen.

Key Takeaways

• There are four kinds: card machines, standalone terminals, cloud terminals and phone apps
• Hardware is cheap (£42 to £600); the real cost is turning clock records into payroll each week
• Only biometrics stop buddy punching outright, and they are special category data under UK GDPR
• If you use biometrics you must offer a non-biometric alternative, and a DPIA is highly likely to be required
• A geofence proves where a phone was, not who held it; locking edits after the fact matters as much
• A terminal wins on one site with no phones; an app wins when people work in more than one place

Frequently Asked Questions

Sources

Hardware prices are the range of UK listings seen on 2 October 2026. ICO guidance checked the same day.

• Biometric data guidance: biometric recognition — ICO
• ICO orders Serco Leisure to stop using facial recognition technology to monitor attendance — ICO, 23 February 2024