Security workforce operations, verified to the cent.
Server-verified Time In / Time Out, geofence evidence at every punch, signed immutable shift records, scheduling, and reviewed invoice preparation — built for the way security companies actually work.
14-day Operations trial · card on file · up to 40 users · cancel before day 14 to avoid the charge
The problem
Paper, guesswork, and a week of spreadsheets
Security workforce timekeeping breaks down exactly where it matters most — at the punch, at the signature, and at billing time. GuardTrack is built to fix those three failure points first.
Paper timesheets you can't trust
Handwritten hours get disputed, lost, or backdated. GuardTrack preserves the raw punch and the signed, approved snapshot together — and flags any change for re-review.
'Were they actually on site?'
Location is captured only at the punch and evaluated on the server. A reviewer sees inside, outside, uncertain, or denied — with accuracy, distance, and freshness — and can act without guessing.
Billing takes a week of spreadsheets
Eligible shifts roll into reviewed invoices by facility and cycle, with exact minutes and a reconciled register. Automated Business Invoicing is a separate add-on subscription — pick the tier that fits your billing operation.
The owner can't see the whole operation
Attendance, exceptions, open shifts, planned versus recorded time, pending reviews, and expiring credentials — every statistic comes from authorized persisted records with clear date filters.
What's included
Everything a security operation actually needs
From the punch to the signed invoice, each capability is built around a single principle: the record must be trustworthy enough to bill against.
Server-verified timekeeping
Time In / Time Out is recorded when the server accepts the event — never before. High-resolution punch timestamps are preserved alongside the normalized accounting minutes, so what was worked is what's billed.
Geofence evidence, not tracking
Location is captured only during a punch and evaluated on the server. Inside, outside, uncertain, denied, and stale paths each produce a real, recorded event that a reviewer can approve, return, or reject for billing review.
Signed, immutable shift records
On Time Out the guard signs the exact timesheet they completed. A typed or drawn signature binds to a content hash of the fields being signed. Material changes supersede signatures and require re-approval — no old stamp on a new record.
Scheduling without double-booking
Build one-time and recurring shifts, catch same-person conflicts, publish changes, and notify the affected guards. Open-shift requests go to supervisors for assignment — never silently filled.
Reviewed invoice preparation
Eligibility requires a closed, signed, approved shift with no blocking exception. Authorized admins prepare invoices from eligible shifts across facilities; the app builds the package for review only — it never auto-sends.
Tenant-isolated messaging
Private guard-to-HR conversations, supervisor channels, and company announcements stay scoped to their membership. Admin access doesn't automatically expose every private HR conversation to every supervisor.
Roles and capabilities
Owners, admins, HR, supervisors, and guards each get the least access they need — enforced at the database, server, storage, export, and realtime layers. Invoicing stays admin-only by default, always.
Multi-tenant by design
Every record and file carries a tenant ID. One identity can work for several companies through isolated memberships with a clear company switcher — and CWA support never becomes a customer workforce seat.
The workflow
From punch to approved invoice in five steps
Each step preserves the raw event and builds the next record on top of it. Nothing is optimistically shown, and nothing is silently overwritten.
- 1
Time In / Time Out
The guard opens the app at their assigned post and taps in. The punch is accepted when the server records it — never optimistically. Location is captured only at that moment and evaluated on the server.
- 2
Geofence evidence
Each worksite has a center, radius, and units. Outside, uncertain, denied, or stale GPS still records the online punch, flags it for supervisor review, and preserves the actual time event.
- 3
Sign the shift
On Time Out the shift closes and the guard signs the exact completed timesheet with an explicit intent checkbox. The signature binds to a content hash of the fields being signed.
- 4
Review and approve
Supervisors and HR work a queue filtered by company, client, site, guard, and period. They approve eligible records, return for clarification, or reject for billing review — each one audited.
- 5
Export & prepare invoices
Eligible shifts become reviewed invoices by facility and billing cycle — PDF, XLSX, CSV — with company branding and exact minutes. Automated Business Invoicing is a separate add-on subscription; an authorized admin controls sending.
Plans
Four tiers, scaled to your operation
Capacity and capability grow together. Every plan includes server-verified timekeeping, geofence evidence, signed shifts, and tenant isolation.
Essential
Reliable timekeeping for small guard teams
- Up to 15 users
- 5 worksites
- 2 GB storage
Operations
Most popular — built for growing multi-site operations
- Up to 40 users
- 25 worksites
- 10 GB storage
Command
Advanced control for larger operations
- Up to 100 users
- 100 worksites
- 25 GB storage
Enterprise
Full capability up to 200 active users
- Up to 200 users
- 200 worksites
- 50 GB storage
Built on trust
Records you can bill against
The boring, essential guarantees — enforced everywhere, not just where the UI happens to hide a button.
Tenant isolation
Every record and file carries a tenant ID derived from authenticated membership — never an untrusted request field.
Least-privilege roles
Owners, admins, HR, supervisors, and guards each get the access they need — no more, no less — enforced at every layer.
Audit trail
Role changes, punches, corrections, signatures, approvals, rate changes, exports, and subscription changes are recorded where supported.
No silent data loss
Limits warn before they block; signed records and invoice history survive downgrades and failed payments with read/export intact.
Start your 14-day Operations trial
14 days, up to 40 users, with a card on file. You're charged the plan price after day 14 — cancel anytime before then to avoid it. If a payment fails or the subscription lapses, your records stay in read/export-only mode for 30 days — never silently deleted.