Time clock comparison: paper, swipe card, fingerprint or a phone app with QR and GPS
There are four main ways to record staff hours: paper timesheets or Excel, a swipe-card clock, a fingerprint or face terminal, and a phone app using QR codes and GPS. Paper is cheap but easy to fake. Cards get shared. Biometrics are hard to fool but count as special category data under the GDPR. An app costs a little each month and scales across sites.
Updated:
The short answer
| Your situation | Best fit |
|---|---|
| 1–3 staff, one office, fixed hours | A well-kept timesheet template or spreadsheet |
| One site, many shift workers, few smartphones | Entrance tablet with PIN or badge, or a card clock |
| Several shops, cafés or branches | App with a rotating QR code on a tablet at each site |
| Construction sites, farms, staff at client premises | App with QR, GPS and offline mode |
| You want a biometric check | Face ID or fingerprint on the employee's own phone, not a company fingerprint reader |
The full comparison table
| Paper / Excel | Swipe card clock | Fingerprint / face terminal | App with QR + GPS | |
|---|---|---|---|---|
| Upfront cost | Almost nothing | Device + cards + installation | Device + installation, usually more | None (employees' phones) |
| Running cost | Admin time to add up hours | Maintenance, lost cards | Maintenance, GDPR compliance | Monthly fee per employee |
| Buddy punching risk | High | Medium (cards get shared) | Low | Low (rotating QR, GPS, one phone each) |
| Data protection | Ordinary personal data | Ordinary personal data | Biometric special category data (Art. 9), DPIA | Location at clock-in only; biometrics stay on the phone |
| Installation | None | Electrician, network | Electrician, network, enrolling fingerprints | A link on the phone, a printed QR code |
| Several sites | A sheet per site | A device per site | A device per site | One account |
| Field work, no power | Yes, but no control | Difficult | Difficult | Yes, works offline |
| Hours, breaks, overtime | Manual or formulas | Depends on software | Depends on software | Automatic |
| Who's in right now | No | Sometimes | Sometimes | Yes, in real time |
| Export for payroll and inspections | Copies / spreadsheet | Depends on model | Depends on model | Excel, CSV, PDF |
Any of the four can meet the record-keeping rules. In the UK, the Working Time Regulations require records adequate to show compliance with working time limits, kept for two years; National Minimum Wage records must be kept for at least six. In Ireland, the Organisation of Working Time Act 1997 requires hours worked to be recorded and kept for three years. In the EU, the CJEU (case C-55/18) requires an objective, reliable and accessible system measuring daily working time. None prescribes a format. More in working time records in the UK and Ireland.
1. Paper timesheets and Excel
Pros: free, everyone understands it, needs no power or internet. For two or three office staff it may be enough.
Cons: often filled in at the end of the week from memory. Colleagues can sign for each other. Hours are added up by hand and mistakes go straight into payroll. With several sites, sheets have to be collected and merged.
Best for: micro-businesses with one office and fixed hours.
2. Swipe card or fob clock
Pros: fast at the door, staff don't need a phone, no biometric data.
Cons: a card can be handed to a colleague, so buddy punching is still possible. You need a device at each entrance, installation and spare cards. On a building site or at a client's premises a card clock doesn't help.
Best for: factories and warehouses with a single entrance that is supervised.
3. Fingerprint or facial recognition terminal
Pros: hard to fool; the punch is personal.
Cons: fingerprints and face templates are biometric data, a special category under Article 9 of the GDPR and UK GDPR. You need a valid condition, you must show the purpose can't be achieved less intrusively, and employee consent is hard to rely on because staff aren't free to refuse. A data protection impact assessment is generally expected. Add a device per site, enrolling each employee, and dirty or cut fingers on site.
In February 2024 the UK ICO ordered Serco Leisure and associated trusts to stop using facial recognition and fingerprint scanning to monitor staff attendance, noting that less intrusive options such as ID cards or fobs were available.
Best for: rarely justified just for attendance. If you want a biometric check, use Face ID or the fingerprint on the employee's own phone, where the check stays on the device. The three-year cost comparison is in employee time clock.
4. Phone app with QR codes and GPS
Pros: no hardware to buy. Employees scan the site's QR code or clock in inside the GPS zone, and you see who is at work in real time. It works across sites, including sites with no signal: the punch is saved on the phone and sent when the connection returns. Hours, breaks and overtime are calculated automatically.
Cons: employees need a smartphone (or an entrance tablet), and location at clock-in needs explaining to staff. There's a monthly fee.
Best for: multi-site businesses, shift work, field teams, construction, hospitality, retail, cleaning and security. More on the methods: QR code time clock and GPS time clock.
Cost example: 15 employees, 2 sites, 3 years
| Paper / Excel | Card or fingerprint clock | QRtimetrack | |
|---|---|---|---|
| Equipment | Sheets, printing | 2 devices + installation (price varies) | €0 (optional tablet) |
| Subscription | €0 | Depends on software | 15 × €1.99 = €29.85/month |
| Over 3 years | Admin time | Devices + maintenance + GDPR work | ≈ €1,075 excl. VAT |
| Time to add up hours | Hours every month | Less, if it exports | Automatic export |
The hidden cost of paper and Excel is time: someone adds up hours, checks signatures and fixes mistakes every month. The hidden cost of biometric clocks is data protection compliance. QRtimetrack prices are on the pricing page.
How to choose: 5 questions
- How many sites? With one, any system works. From two upwards, devices multiply; an app doesn't.
- Do your staff have smartphones? If not all of them, combine the app with an entrance tablet (PIN, printed badge or personal code).
- How big is the buddy punching risk? If you've had problems, avoid paper and cards. See how to stop buddy punching.
- Field work or no internet? You need an app that works offline.
- Want to avoid biometric data? Choose QR, GPS or Face ID on the phone, not a company fingerprint reader.
Frequently asked questions
Which time clock is best at preventing time theft?
Fingerprint clocks are hard to fool but bring data protection risk. An app that ties each account to one phone and combines a rotating QR code, a GPS zone and optionally a selfie or Face ID on the phone gives similar assurance without you storing biometric data.
Are fingerprint time clocks legal in the UK and Ireland?
They aren't banned outright, but they're hard to justify. Fingerprints are special category data under the GDPR and UK GDPR: you need a valid condition, proof that less intrusive options won't work, usually a DPIA, and an alternative for staff. The ICO has ordered an employer to stop biometric attendance checks.
Is a paper timesheet still acceptable?
Yes. Neither UK nor Irish law prescribes a format. Paper, spreadsheets and apps are all acceptable as long as the records are accurate, complete and can be produced when an inspector asks.
How much does a time clock machine cost?
It varies widely. Basic devices start at around a hundred euros; networked models with software cost several hundred, plus installation. You need another device for every extra site.
Can I mix several methods?
Yes, and it's often the best approach. In QRtimetrack you can have a rotating QR on a tablet at head office, printed QR and GPS on sites and a PIN kiosk for staff without smartphones, all in the same reports.
How much does a time clock app cost?
QRtimetrack costs €1.99 per active employee per month, with a minimum of 5 employees billed – €9.95 a month for up to 5 – excluding VAT. The 7-day trial is free for up to 10 employees and needs no card.
Sources
- Working Time Regulations 1998, regulation 9 – legislation.gov.uk
- GOV.UK – The National Minimum Wage: employers and record keeping
- Organisation of Working Time Act 1997, section 25 – Irish Statute Book
- Judgment of the Court, Case C-55/18 (EUR-Lex)
- Regulation (EU) 2016/679 (GDPR), Articles 9 and 35 – EUR-Lex
- ICO orders Serco Leisure to stop using facial recognition technology to monitor attendance (23 February 2024)