Skip to content

How to roll out geofenced attendance with audit mode

Last reviewed

The short answer

Audit mode lets you switch on geofenced mobile check-in without refusing anyone. Every mobile punch is still accepted, but Verdeshell HRMS records whether it would have been refused and why — outside every fence, or by an employee with no work site — so you can fix sites and mappings before switching the policy to Restricted.

The three mobile check-in modes

Each attendance policy has a Mobile Check-in setting with three modes. It only ever affects check-ins from the mobile app, including face check-in on the phone; punches from biometric devices are not affected.

What each mobile check-in mode allows and records
ModeWho can check in from a phoneWhat is recorded
OpenAnyone the policy covers, from anywhereThe punch, with no fence applied
AuditAnyone the policy covers — nobody is refusedWhether each punch would have been refused under Restricted, and the reason
RestrictedOnly employees mapped to a work site, from inside a fence they holdRefused punches, kept for review

Before you start: work sites and mappings

Geofencing in Verdeshell rests on one rule: a mapping is the permission. Attaching an employee to a work site is what allows them to check in there from a phone. There is no separate switch to turn on per person.

  • Create work sites in Settings → Mobile Check-in. Place each one by searching an address, pasting a Google Maps link, or entering latitude and longitude, then set the fence radius in metres. Sites can be an office, a client site, a project site or a field location.
  • Map employees to sites. An employee can hold more than one site; a punch inside any of them is accepted.
  • Give genuine work-from-anywhere roles an anywhere grant, rather than drawing a very large fence.
  • Use regularisation for one-off misses. If a client visit or travel day means a punch is missed, the employee raises a regularisation request for that day, so you never need to widen a fence for it.

Rolling out with audit mode, step by step

  1. Set up work sites and map employees to them, as above.
  2. Edit the attendance policy and set Mobile Check-in to Audit.
  3. Let it run long enough to cover every shift pattern and the people who travel. A full payroll month is a natural window.
  4. Open the rollout summary in Settings → Mobile Check-in. It shows punches evaluated, how many were accepted, and how many would have been refused, with the reason for each.
  5. Fix each reason (see the table below) and keep watching until the would-be refusals are ones you actually intend.
  6. Switch the policy to Restricted at the start of a payroll period.

Reading the would-be refusals

Reasons a punch would be refused, and the usual fix
Reason shownWhat it usually meansWhat to do
Not mapped to any siteThe employee checks in from a phone but holds no work siteMap them to their site, or give an anywhere grant if their role needs one
Outside every site they holdThe punch was beyond the radius of every site the employee holdsCheck the site's position and radius, or whether they work from another site
Their site is switched offThe site they are mapped to has been deactivatedReactivate the site or move the employee to the right one
GPS too impreciseThe phone reported a location less precise than the policy requiresReview the accuracy the policy requires; appears only if your policy checks it
Mock locationThe phone reported a mock location setting (Android only)Talk to the employee; appears only if your policy checks it

Why switch at the start of a payroll period

Under Restricted, a refused check-in leaves no attendance record for that punch. A day with no record becomes an absence, and an absence can become a loss-of-pay deduction. Switching mid-month produces a register where some days were judged by one rule and some by another, which is hard to explain to an employee whose pay changed.

Switching on the first day of a payroll period means the whole month is judged one way, and anyone still caught by a refusal can be fixed before the month closes.

What the fence can and cannot prove

The location comes from the employee's phone. Verdeshell checks it against the fence, keeps out-of-fence punches in a review queue, and flags implausible travel between two punches — a check-in too far from the previous one for the time between them. A determined person can still fake a phone's location, so treat the fence as a deterrent and a clear record rather than proof.

Changes to a fence are kept in each site's history, so you can see who moved a site or changed its radius and when. Punch-location details in the attendance register are cleared after 365 days.

Frequently asked questions

Does audit mode refuse any check-ins?

No. In audit mode every mobile check-in is accepted. Verdeshell only records whether each punch would have been refused under Restricted, and why, so you can fix sites and mappings first.

Do new attendance policies start in audit mode?

No. A new attendance policy starts in Restricted. Audit mode is meant for moving an existing policy, where employees are already checking in from their phones and need a safe transition.

How do field staff check in if they work from many places?

Give them an anywhere grant, which lets them check in from any location, or let them correct a day with a missed punch through a regularisation request. Avoid drawing very large fences to cover them.

Is the check-out checked against the fence too?

Yes. Check-outs from the mobile app are judged against the same fence that admitted the check-in, so moving a site during a shift does not refuse the check-out.

Does geofencing affect biometric devices?

No. The Mobile Check-in setting applies only to check-ins from the mobile app, including face check-in on the phone. Punches from biometric devices are recorded as before.

Ready to see Verdeshell HRMS in action?

Book a free 30-minute demo. After the demo we set up your 14-day free trial — no credit card required.