Digital clock-in: what it is, which methods exist and how to choose a valid system

«Digital clock-in» is the everyday name for what Spanish law calls the working time record: evidencing, every day and for every person, what time they start and finish work. The «digital» part is not a turn of phrase but the direction the rules are heading: away from the notebook and the spreadsheet, towards systems that cannot be rewritten without leaving a trace.

This article is about the practical side: which methods exist, what legal limits each one carries, and which fits your company. If what you need is where the digital time tracking regulation stands and when it takes effect, we track that in our article on mandatory digital time tracking.

What digital clock-in actually is

It is not a specific technology but any system that satisfies what Article 34.9 of the Workers' Statute requires: that the company guarantee a daily record of working time including the specific start and finish times of each employee.

Four conditions follow from that, and any method has to meet them whether a company has three employees or three thousand.

What makes a clock-in system valid

• Daily and per person: a weekly total or a team-level count will not do.
• Specific start and finish times, not the theoretical hours stated in the contract.
• Objective and reliable: neither the employer nor the employee can alter it unilaterally, and any correction leaves a trace of who made it and when.
• Accessible to the employee, their legal representatives and the Labour Inspectorate.
• Kept for 4 years, and retrievable on the day it is asked for.

Note what it does not say: no «app», no «fingerprint», no «terminal». The law is technology-neutral, which is why the useful question is not «is this legal?» but «will this hold up in an inspection and in an overtime claim?».

The six methods in use today, and their small print

This is the part that decides the rollout. They are ordered by how widely they are actually used in Spanish SMEs, with the legal limit of each.

1. Mobile app

• How it works: each person clocks in from their phone under their own account, and the record is timestamped at that moment.
• Who it suits: workforces that move around, hybrid work, multiple sites, construction, delivery, home services.
• The small print: if you require a personal phone, you must offer an alternative or compensation. And if you add location, you move into clocking in with geolocation, which has rules of its own.

2. Fixed terminal on site

• How it works: a tablet or device at a shared point where each person identifies themselves with a personal code.
• Who it suits: shops, workshops, warehouses, hospitality; anywhere with a stable workplace and staff who do not carry a phone during the shift.
• The small print: you have to stop one person clocking in for another. A code shared by the whole team evidences nothing.

3. Web panel from a computer

• How it works: clocking in from the browser, with the session signed in.
• Who it suits: office and remote work, where the computer is already the tool of the job.
• The small print: do not confuse «being online» with «being clocked in». A messaging tool's active status is not a valid working time record.

4. Proximity card or fob

• How it works: a card is held against a reader at the entrance.
• Who it suits: sites with access control already installed, where clocking in piggybacks on something that exists.
• The small print: the card identifies the card, not the person. Cards get lent, forgotten and lost, so it is worth pairing them with something else.

5. Biometrics: the most restricted method

• How it works: fingerprint or facial recognition.
• The problem: these are special category data under Article 9 of the GDPR, and the Spanish authority takes a very restrictive line on using them for attendance.
• The small print: the employee's consent is not a sufficient basis on its own, because in an employment relationship it is not considered freely given. You have to evidence necessity and proportionality, and there is almost always a less intrusive alternative that works just as well.
• The practical conclusion: unless you have a solid, documented justification, it is the method that adds the most risk for the least benefit.

6. Paper and spreadsheets

• How it works: a signed template or a shared file somebody fills in.
• Legal position: still formally valid today. Article 34.9 does not require a digital format.
• The small print: it is the one that holds up worst in an inspection, because it gets filled in after the fact, modified without a trace, and evidences nothing about when each entry was written. And the regulation in the pipeline will rule it out.

Which method fits your company

The answer almost always turns on a single variable: where your people physically are when they start work.

By scenario

• Everyone at a fixed site: a terminal. It is the simplest option and the one that processes the least data.
• A workforce that travels: the mobile app, and consider whether you actually need location or the timestamp is enough.
• Office plus remote work: the web panel, with the same system for on-site and remote days.
• Several sites with rotation: app or a terminal per site, but a single system consolidating the records.
• Mixed teams, which is the most common case: a system that supports several methods at once, so you are not maintaining two tools in parallel.

What is at stake if you have no record, or a bad one

Breaching the rules on recording working time is a serious infringement under Article 7.5 of the LISOS, and Article 40.1.b sets the amounts in force.

Serious infringement bands

• Minimum band: €751 to €1,500.
• Medium band: €1,501 to €3,750.
• Maximum band: €3,751 to €7,500.
• The penalty is imposed per workplace, not per affected employee. The number of people sets the band rather than multiplying the amount.
• Falsifying records raises the classification and can bring social security liability for the contributions not paid on those hours.

But as with other documentary failures, the bigger cost is rarely the fine: it is that without a record you have no evidence. In an overtime claim, courts tend to accept the employee's estimate when the employer produces no record to contradict it. You can estimate your exposure with our penalty calculator and see the most common failings in our article on how NOT to do time tracking.

Choosing a system: the questions that actually matter

A checklist for comparing providers

• Do corrections leave a trace? Who made it, when, and what changed. If not, rule it out.
• Can the employee consult their own records without asking anyone?
• Does it export in a format you can hand to the Inspectorate without assembling anything by hand?
• Does it keep the 4 years and let you retrieve them even if you change plan or change the person in charge?
• Does it support several methods at once? Almost no workforce is homogeneous.
• Where is the data hosted? Inside the European Union saves you an international transfer problem.
• What about breaks? If the collective agreement regulates them, the system has to record them separately.

How Horalia handles it

Horalia is built on the premise that a single workforce rarely clocks in a single way, so the methods coexist within the same system instead of forcing you to pick one.

What it covers

• Mobile app, web panel and clock-in terminal —a tablet at a fixed point where each person identifies themselves with their code— all working at once for the same company.
• Optional geolocation at the moment of clocking in, only for staff who travel and only if you need it.
• Corrections approved by the manager, logged as corrections and never quietly overwritten.
• An hours balance per employee, showing time over and under, to settle as time off or through payroll.
• Working time reports exportable in the official format, ready to hand to the Inspectorate.
• No biometrics, which is precisely the method that adds the most data protection complications.
• Data hosted in the European Union, with records kept for the four years required.

You can explore Horalia or try it for free.