01 · Automatic close · 00:00
The shift had been open for more than twelve hours. It closes itself and is flagged as such, so nobody mistakes it for a real clock-out. It is kept.
Each clock-in is sealed with its time, its source and who created it. When something needs correcting, Cofactu writes the entry that fixes it and keeps the one that was there. Nothing is overwritten.
Article 34.9 of the Workers' Statute · 4-year retention · Export for the Labour Inspectorate








Marta Ruiz · Floor staff. Thursday 13 August 2026 — 08:02 · Clock in · Kiosk · PIN
11:30 · Break · Kiosk · PIN
11:48 · Back from break · Kiosk · PIN
16:04 · Clock out · Web — 7 h 46 min worked. Sealed · not editable
The shift had been open for more than twelve hours. It closes itself and is flagged as such, so nobody mistakes it for a real clock-out. It is kept.
She files it from her own screen, with the reason written down. While it is pending it does not touch the register: it is a request, not a change. Pending approval.
Ana, from administration, approves it. The entry is created flagged as manual and records who asked for it, who approved it and at what time. Approved by Ana Gil · 09:12.
Marta forgot to clock out and the system closed the shift automatically at midnight. This is what the register looks like after fixing it: three entries, none rewritten.
All three are still there. The difference from a spreadsheet is not that Cofactu records better: it is that there is no way to rewrite the past, not even for whoever administers the account.
The royal decree that regulates it is still going through the approval process, with no date. Nobody can claim today to comply with a rule that does not exist yet. This is what is already solved.
| What will be required | What Cofactu already does |
|---|---|
| Register kept by digital, traceable means | Each clock-in records the exact time, type, source (kiosk, web or POS) and who created it. |
| Inalterability of the register | The register is append-only: there is no way to edit or delete a clock-in that has been written. |
| Author and reason recorded for every change | A correction records who asks for it, why, who approves it and when, next to the original entry. |
| Worker access to their own records, and a copy | Each person logs into their own area, sees their working day and downloads their month without asking anyone. |
| Retention for four years | Clock-ins are kept for four years, as article 34.9 of the Workers' Statute (Estatuto de los Trabajadores) requires. |
| Document available to the Labour Inspectorate | Monthly export in the format of the Labour Inspectorate (Inspección de Trabajo), dated in the time zone of the workplace. |
When the final text is out, some fields will have to be added, such as on-site or remote work and the nature of the hours. What will not need redoing is the hard part.
01Kiosk Tablet at the entrance A kiosk dedicated to clocking in. The person taps their name, enters four digits and is in. No account, no password and no access to the till.
02Web Browser or phone People who work away from the premises clock in from their session, with the same four transitions: clock in, break, back and clock out.
03POS Inside the POS The clock lives in the header of the till and works without coverage: clock-ins are queued and sent when it returns.
4 yearsRegister
retention

It is not a screenshot or a retouched sheet.


Each person has their own space: the hours they have worked this week, their published rota, their absences and their payslips. And a link to download their month, without going through administration.
See Payroll →What is asked by businesses that already clock in elsewhere, and by those that still keep it on paper.
See the POS →For the working-time register, yes: clock-in, rota, absences and the document for the Labour Inspectorate are included in the SME plan, with no separate subscription. If you already use another clocking tool, do not duplicate it: set time tracking to “disabled” and Cofactu stops asking for clock-ins. Two partial records of the same person contradict each other in front of an inspector, and that is worse than having just one.
They file a request from their own screen, explaining what time should have been recorded and why. The request does not touch the register: it stays pending until someone in HR approves it, and then a new entry is created, flagged as manual. The original, if there was one, stays where it was.
No. You can add someone with just a name and a PIN, with no email or password, which is normal in hospitality and retail with seasonal staff. That person clocks in at the kiosk like everyone else.
It is still going through the approval process and has no publication date. Nobody can claim today to comply with a rule that does not exist yet, so be wary of anyone who does. What can be said is what is already solved: the register is already digital, tamper-proof and traceable, and the worker can already get their copy. When the text is published, some fields will have to be added; the hard part will not need to be redone.
No card. Add your team with a PIN and clock in the same day.
We use our own cookies, Google's (which ads bring sign-ups) and PostHog's (how the site is used). If you decline, the site works exactly the same. Learn more .
Navegar en tu idioma siempre es mejor. Cámbiate para disfrutar de una experiencia 100% adaptada.