PunchFlow Appliance by Scriptatic
100% On-Premise · Zero Cloud Reliance · Biometric Ready

Timekeeping,
under your own roof.

The turnkey on-premise attendance appliance. Connect biometric wall clocks, automate complex overtime, and export audit-ready payroll—without sending sensitive workforce data to a third-party cloud.

No Per-Employee Fees
Works During Internet Outages
ZKTeco & Anviz Clocks Supported
100% Private On-Premise
Industrial employee clocking in at a wall-mounted biometric fingerprint time clock terminal
Sarah Jenkins
Logistics · Bay 3 Clock
08:42 AM Verified

Facility Attendance

Live on-premise workforce activity

Live Stream
148
On Shift
99.4%
On Time
0
Exceptions
SJ
Sarah Jenkins
Logistics · Bay 3
08:42 AM In
MV
Marcus Vance
Assembly · Gate 1
08:38 AM In
ER
Elena Rostova
QA Lab · Cleanroom
08:30 AM Out
MM
Mateo Morales
Cold Storage · Dock 2
08:29 AM In
100% Private On-Premise · Zero Cloud Sync View Features

Zero Cloud Reliance

Private Facility Architecture

Everything operates within an isolated, self-contained appliance on your facility's local network.

Air-Gapped Facility Dataflow 100% Private On-Premise Execution
Biometric Clocks
ZKTeco & Anviz wall terminals placed across facility
Local LAN
Secure LAN Access
Automated local SSL encryption across facility PCs
Private HTTPS
Processing Engine
Real-time punch reconciliation & overtime calculation
Sub-Second Speed
Durable Storage
Tamper-proof event journal with zero data loss
Local Disk Only
Payroll Delivery
Manager approval portal & direct payroll file export
ADP / CSV / TSV
1

Network Sovereignty

Operates entirely within your physical corporate LAN. Time clocks punch, shifts track, and managers review attendance even during total internet blackouts.

2

High-Capacity Engine

Engineered for high-volume facilities. Handles hundreds of simultaneous shift-change punches across multiple clock gates with instant millisecond response times.

3

Disaster Recovery & Backup

Dual protection: hardware clocks buffer punches locally if a switch loses power, while the appliance continuously records punches to a tamper-proof journal.

Turnkey Provisioning

Enterprise Deployment Options

Deploy as a virtual appliance on your existing virtualization infrastructure or run on dedicated on-premise hardware.

Virtual Appliance (OVA / VM)

Import directly into VMware ESXi, Proxmox VE, or Microsoft Hyper-V. Complete pre-configured appliance ready to discover network clocks in minutes.

Recommended for: Enterprise data centers, multi-facility IT teams, and existing VM clusters.

Dedicated Mini-Server / Hardware

Run directly on a compact 1U rackmount server or dedicated mini-PC plugged straight into your facility switchboard.

Recommended for: Standalone manufacturing plants, distribution warehouses, and remote sites.

Air-Gapped Installation

100% offline installation bundle for defense facilities, hospitals, and high-security sites with zero outbound internet access.

Recommended for: Defense contractors, healthcare facilities, and regulated institutions.
How Easy Is Deployment?
Step 1
Plug Clocks Into Network
Connect biometric wall clocks to your physical facility switchboard.
Step 2
Start Appliance
Boot the turnkey appliance VM or mini-server on your local subnet.
Step 3
Auto-Detect & Sync
PunchFlow automatically discovers clocks and starts streaming live punches.
Step 4
Deliver Clean Payroll
Department supervisors approve exceptions and export audit-ready payroll.

Compliance Grade

Security & Privacy by Design

Built to exceed healthcare, hospitality, and regulated facility data protection standards.

Cryptographic Release Attestation

Every appliance update is cryptographically verified with digital signatures prior to installation. Tampered packages are automatically rejected.

AES-256 Encrypted Backups

Automated authenticated, encrypted appliance backups protected by customer passphrases with automated retention schedules on your local network.

Immutable Audit Logging

Every shift snapshot, overtime pre-approval, manual punch adjustment, and manager override is recorded in an immutable audit trail with client IP verification.

Offline Artifacts

Appliance Downloads & Verification

Download signed appliance bundles for on-premise deployment and offline installation.

PunchFlow Appliance v1.0.1 Latest Release

Enterprise Appliance Bundle · Signed with Ed25519

4fabdf6f9512629fef8b79397fc800f67ab4e4b82b88c9d8f45ae2f640810e84
sha256sum -c scriptatic-punchflow-1.0.1.tar.gz.sha256
v1.0.1 Release Highlights:
  • Out-of-the-box fresh appliance setup wizard with initial administrative account onboarding.
  • Full Organization Hierarchy Management (Departments & Job Positions) with supervisor access boundaries.
  • Enhanced local network (LAN) clock discovery and native biometric hardware synchronization.
  • Automated local SSL certificate management for secure HTTPS access on private subnets.