Evidence with a work purpose
Interactive login, lifecycle state, foreground application, accessible window title, supported browser context, project rule, idle state, and device health.
Employee-visible · role-scoped · auditabletracker.joflee.com
Your workday, remembered.
Your records, finally accurate.
Stop reconstructing PMS entries, missed check-ins, breaks, and project hours from end-of-week memory. JoFlee prepares the day automatically while employees work normally.
It is not another HRMS or surveillance tool. It is an employee-first work memory that makes existing HR, payroll, project, and billing systems more accurate.
autonomous by design · employee-visible · no screenshots · no productivity scoresTRACKED WORK7h 42mon schedule
WORKDAY09:04 — 17:29
✓
Product deliveryVS Code · browser · 4h 18m
56%✓
Team collaborationSlack · Zoom · 2h 36m
34%!
Working awayClient workshop · 48m
reviewedCHECK IN · CAPTURE · REVIEW · SUBMIT · APPROVE · CALCULATE · CHECK IN · CAPTURE · REVIEW · SUBMIT · APPROVE · CALCULATE
Replace guesswork.
Keep people in control.
Employees should not have to remember a month of tasks or guess a forgotten check-in. JoFlee assembles the ordinary day automatically, then asks only when human context matters—such as whether idle time was a break, a meeting, or helping a teammate.
See how the autonomous record works →WORKDAY / TUE 11 AUG7h 42m
09:04
CHECKED IN12:48
WORKING AWAY13:36
ACTIVE17:29
CHECKED OUT
CHECKED IN12:48
WORKING AWAY13:36
ACTIVE17:29
CHECKED OUT
ACTIVE6h 54m
AWAY48m
UNRESOLVED0m
STATUSReady
FIG. 02 — Business coverage
One system for attendance,
review, projects, and pay.
HR gets operational control and reports, managers get scoped exception queues, Finance gets clearer inputs, and employees can inspect and complete the record affecting them.
ATTENDANCEAutomatic check-in
Interactive login, lock, sleep, offline recovery, and explainable checkout.
→WORK MEMORYPMS-ready work recordsEmployees can recall what they worked on without rebuilding a week or month from memory.
→IDLEFair return reviewMeetings and off-device work can count; unresolved time never slips through.
→TIMESHEETSReviewed period recordsWeekly or monthly records show scheduled, payable, working-away, short, and extra time before submission.
→SALARYLive earnings clarityEmployees see payable hours, the holiday-adjusted monthly rate, earned salary, adjustments, and finalized versions.
→PROJECTSExplainable project hoursRules classify work automatically; employees can search and bulk-assign anything left unassigned.
→FIG. 03 — Responsible governance
Protect the company record.
Respect the people in it.
Collect the evidence HR needs for attendance and review. Exclude invasive signals that do not serve that purpose.
Private signals JoFlee does not need
Screenshots, screen recording, keystrokes, clipboard contents, microphone, camera, file contents, emotion inference, and AI productivity scoring.
No hidden mode · no employee rankingFIG. 04 — Governance confidence
A policy HR can explain.
Controls leaders can defend.
Verify who can access records, what is captured, how corrections work, and where customer policy and local legal review still matter.
Tenant-isolated by design
Every tenant-owned record carries organization identity. Server-side authorization and database row-level security enforce tenant, role, and manager scope.
DATABASE-ENFORCED BOUNDARIESCredentials stay controlled
Desktop enrollment creates a hashed, revocable credential bound to one device. Service-role credentials are never shipped to the browser or agent.
REVOCABLE · SERVER-SIDEOffline data is encrypted
Pending event batches are protected locally with AES-256-GCM. The per-device journal key is held in the macOS Keychain or Windows Credential Manager.
ENCRYPTED LOCAL JOURNALPeople can see the record
Employees can inspect their timeline, captured context, idle decisions, timesheets, corrections, and calculation inputs.
EMPLOYEE-VISIBLE EVIDENCEChanges leave a trail
Corrections append instead of silently rewriting history. Sensitive account, role, payroll, support, configuration, and export actions are audited.
REASON · ACTOR · TIMESupport access expires
Detailed platform support access requires an explicit, time-limited organization grant and produces an audit record.
EXPLICIT · EXPIRING · AUDITEDOUR GDPR POSITION
Designed to support responsible compliance—not to replace it.
JoFlee uses GDPR-aligned privacy and security controls. Employers remain responsible for lawful basis, employee notice, proportionality, retention, consultation, and jurisdiction-specific review. We do not claim that installing software makes monitoring automatically lawful.
Review the security model →FIG. 05 — Operation
Install it. Explain it.
Let the day record itself.
Enroll the company computer
An Admin issues a single-use enrollment code. On a Mac, the employee also grants Accessibility permission; Windows needs no extra permission. A capture test confirms readiness.
Work normally
Attendance follows the interactive session. The agent journals transitions locally and uploads ordered batches, even after offline work.
Complete the exceptions
Employees classify or correct idle time, assign uncategorized work to projects, and request audited time corrections when needed.
Submit and calculate
Reviewed timesheets feed payable hours; holidays, payroll policy, compensation, and adjustments produce a transparent, versioned salary result.
FIG. 06 — HR & executive resources
Build the policy and
business case together.
Practical guidance for HR, People Ops, Finance, and leadership teams evaluating attendance and transparent monitoring.
FIG. 07 — FAQ
Questions teams ask
before they deploy.
Does JoFlee take screenshots or record keystrokes?
No. JoFlee does not capture screenshots, screen recordings, keystrokes, clipboard contents, microphone, camera, or file contents.
How does automatic attendance work?
Attendance begins when the enrolled employee enters the interactive desktop. Trusted heartbeats, lock, sleep, logout, shutdown, and offline recovery explain the session boundary.
What happens when an employee goes idle?
Once inactivity reaches the idle threshold (5 minutes by default, adjustable from 5 to 60 minutes for the organization or an individual employee), the interval beginning at the last input is excluded. On return, the employee classifies it as working away or non-working before the period can be submitted.
Does JoFlee score employee productivity?
No. JoFlee explains attendance and project evidence without AI productivity scoring, employee ranking, emotion inference, or automated disciplinary decisions.
Can employees see the data about them?
Yes. Employees can inspect their own timeline, idle decisions, timesheets, corrections, current earned salary, projected monthly salary, and calculation inputs.
Is JoFlee GDPR compliant?
JoFlee is designed with GDPR-aligned privacy and security controls, but software alone cannot make an employer's use compliant. Each organization must establish a lawful basis, provide appropriate notice, set a proportionate retention policy, and meet local employment-monitoring requirements.
Is Windows supported?
Yes. JoFlee has native agents for macOS 13 or later and Windows 10 and 11 (x64). Both use the same attendance lifecycle, idle review, encrypted offline queue, capture boundary, and web portal.
Is JoFlee an HRMS or employee surveillance tool?
No. JoFlee complements existing PMS, HRMS, payroll, and billing systems by preparing an accurate workday record automatically. It gives employees visibility and review rights and excludes screenshots, keystrokes, productivity scores, and employee ranking.
FIG. 08 — Start
Make the next payroll period
easier to explain.
Run a controlled pilot with HR, managers, Finance, and employees around one transparent source of workday truth.