The person
Every check-in needs the staff member's fingerprint or face unlock. A PIN or pattern is not accepted, because those can be shared.
Security & privacy
Trustworthy for you. Fair to your staff.
DutyMark is built so records can be relied on in a dispute — and so staff are never tracked, watched or exposed beyond what attendance needs.
Proof of presence
Why a DutyMark check-in can be trusted.
Their own phone
Unlocking releases a private key kept in the phone's security chip; it signs the check-in. Each phone is approved once by an admin. A new fingerprint added to the phone needs approval again.
The place
One GPS reading at the moment of check-in, compared with the work location you drew. Fake-location apps are detected and flagged or blocked.
The time
Trusted server time, not the phone's clock. Records made offline keep their real time and are flagged if they arrive more than a day late.
Identity checked once
When a person joins, an admin meets them and checks their ID before their phone is approved.
Optional face check
Organizations that need more can add a short face check — explained to staff and agreed first.
Privacy by design
What DutyMark will never do.
These are not settings an organization can switch on. They are how DutyMark is built.
- Never track staff in the background or between check-ins — location is read only when they tap Check in or Check out
- Never receive, store or see fingerprints — they stay in the phone's own Android security system
- Never quietly change a record — corrections are requested, approved and logged, with the original kept
- Never sell or share staff data for advertising
Protecting your data
Security for the whole organization.
- Encrypted connections (HTTPS) between the app and our servers
- Records waiting on the phone kept in an encrypted database; a lost phone can be signed out by an admin
- Passwords stored only as salted hashes; email codes expire in 10 minutes
- Each role sees only what it needs — supervisors only their own locations
- Settings, approvals and staff changes recorded in an audit log
Novaxion’s own access
Strict rules for our support team.
- Password plus one-time code to sign in; access limited by role
- Emails and phone numbers partly hidden; revealing one is recorded
- Support can open a read-only view only to solve a problem you report, for up to 30 minutes
- Every action in a tamper-evident log; serious actions need a second person's approval
Nigeria Data Protection Act. DutyMark is run by Novaxion Systems Ltd in line with the NDPA. Staff can ask what data is held about them, have it corrected or deleted, and complain to the NDPC. Your attendance data stays yours: when a plan ends, it stays viewable and exportable.
See DutyMark at work in your organization.
Start a free trial today — no card, no payment — or book a demonstration for your team.