ProximaHub Enterprise Feature Sheet
The complete technical and operational guide to local-first attendance tracking, automated ZKTeco device discovery, and mathematically transparent salary calculations.
100% Offline-First
Runs on your local LAN with zero telemetry. Active operations continue seamlessly during internet outages.
Sub-Second Sync
Live WebSocket push streaming and low-latency UDP/TCP 4370 socket sync directly with terminals.
Bank-Ready Ledgers
Disbursement schedules with CNIC, IBAN, allowances, overtime, and late deductions ready for direct payout.
Per-Employee Pricing
Billed purely per active user with zero per-device penalties or hidden terminal licensing fees.
Biometric Fleet Management & Auto-Discovery
Eliminate IP conflicts, terminal manual configuration, and clunky legacy software.
Subnet Auto-Discovery
Broadcasts UDP port 4370 sweeps across local subnets to detect and register ZKTeco terminals with a single click.
- Automated IP, MAC & serial identification
- Zero manual driver or port forwarding setup
- Instant ping and hardware health testing
Live Terminal Fleet Monitor
Centralized status dashboard displaying connection heartbeat, user capacity, punch logs, and firmware versions.
- Real-time online / offline indicator
- Memory and biometric storage tracking
- Multi-device synchronization from one hub
Remote Fleet Operations
Execute administrative commands directly from the browser without physically touching the biometric terminal.
- Remote reboot and scheduled power-down
- Precision NTP / Host clock synchronization
- Remote door unlock for access control models
Automated Database Backups
Daily scheduled snapshots capture user IDs, biometric fingerprint templates, facial vectors, and system rules.
- 1-Click disaster recovery and rollback
- Device template cloning across terminals
- Hardware replacement migration in minutes
Offline Punch Buffering
If network switches drop, terminals store punches locally. Once restored, ProximaHub pulls logs without duplicates.
- Zero missed punches during network outages
- Deduplication and integrity verification
- Automatic backfill of historical stamps
Pull Protocol (ZKTeco 4370)
Pulls logs and manages users over ZKTeco's binary socket protocol. Inbound ADMS / iClock HTTP push is not supported.
- Direct TCP/UDP 4370 sync for standalone terminals
- Compatibility depends on model and firmware; pilot first
- Optional outbound HTTP sync to a customer endpoint
High-Precision Shift Engine & Grace Rules
Flexible rules that adapt to your business policies without manual spreadsheet adjustments.
Per-Minute Grace Periods
Prevent unfair penalization for minor delays with custom grace buffers for shift check-ins and check-outs.
- Customizable per-shift grace threshold
- Optional tiered deduction scaling
- Clear visibility into applied tolerances
Late-In & Early-Out Detection
Automated boundary matching accurately identifies punctuality infractions with exact minute precision.
- Instant status flags on employee cards
- Automated penalty deduction tracking
- Dispute auditing with raw punch logs
Multi-Shift & Rotational Schedules
Assign fixed, rotational, night, or flexible shifts to departments or individual employees.
- Configurable meal and prayer break windows
- Overnight shift crossover handling
- Automated shift assignment auto-matching
Overtime Tracking & Multipliers
Automatically detect daily or weekly overtime hours and apply customizable pay rate multipliers.
- Threshold triggers (e.g. over 8 hours/day)
- Custom multiplier rates (1.25x, 1.5x, 2.0x)
- Managerial approval workflows for OT pay
Holiday & Gazetted Calendar
Built-in national and regional holiday support with special holiday work compensation rules.
- Automatic identification of public holidays
- Custom holiday pay multiplier rates
- Paid vs. unpaid holiday classification
Live WebSocket Punch Feed
Real-time visual stream of punches across all company gates and entry doors as they occur.
- Sub-second UI update latency
- Color-coded verification mode badges
- Instant security awareness at gate terminals
Bank-Ready Itemized Payroll & Transparent Calculations
Eliminate disputes with clear mathematical proof behind every salary estimate.
Traceable Component Architecture
Unlike opaque legacy systems where payroll is a mystery black box, ProximaHub treats every addition and deduction as an independently verifiable line item linked directly to hardware punch timestamps.
- Base Monthly Salary: Configurable contract salary per employee.
- Overtime Earnings: Calculated from approved overtime hours × hourly rate × OT multiplier.
- Holiday Compensations: Special gazetted holiday work rates applied automatically.
- Itemized Deductions: Late arrivals, early exits, unapproved absences, and unpaid leaves clearly listed.
- Disbursement Schedule: Generates formatted bank payout lists with CNIC, Bank Name, Account, and IBAN.
Integrated Leave Quotas & Balance Tracking
End the paper-trail chaos with automated leave entitlement tracking directly tied to attendance.
5 Standard Quota Types
Configured out-of-the-box for Sick, Casual, Annual, Unpaid, and Half-Day leave requests.
Live Quota Balances
Managers see remaining balances vs. utilized quotas in real-time before approving any leave application.
Automatic Payroll Sync
Approved leaves immediately excuse absences or apply appropriate deductions without manual HR reconciliation.
Enterprise Operator Roles & Air-Gapped Security
Engineered for strict corporate compliance and zero telemetry leaks.
Role-Based Access Control
Granular privileges for Admin (full system access), Manager (shifts & reports), and Operator (monitor view).
Secondary Security PIN
Requires an administrative PIN for destructive actions such as device wiping, reboot, or employee deletion.
Ed25519 Cryptographic Licensing
Hardware-bound license token verified locally; a daily online check applies when online.
Sanitized Diagnostics Bundle
Export a privacy-safe troubleshooting ZIP with passwords and secrets stripped for fast technical assistance.
Full Audit Trail
Every rule change, leave approval, and device command is permanently logged with operator timestamps.
Air-Gapped Data Localization
All biometric identifiers and punch timestamps stay strictly inside your physical premises on SQLite.
Hardware Compatibility Matrix
Works with the ZKTeco hardware already installed at your offices and facilities.
| Terminal Family | Representative Models | Interface | Verification Modes | Status |
|---|---|---|---|---|
| K-Series Entry & Retail | K14, K40, K50, K60, K90 | Ethernet TCP/IP (4370) | Fingerprint, RFID Card, PIN | Supported |
| U-Series Enterprise | U160, U260, U300, U560 | Ethernet TCP/IP / Wi-Fi | Fingerprint, RFID Card, Password | Supported |
| F-Series Access Control | F18, F19, F22, TF1700 | Ethernet TCP/IP / RS485 | Fingerprint, Card, Relay Door Lock | Supported |
| iClock & Face Fleet | iClock 260, 360, 680, 880, MB460 | Ethernet / Wi-Fi (pull) | Facial Recognition, Fingerprint, Card | Supported |
| IN-Series Portable / Wall | IN01, IN02, S922 (Outdoor Rugged) | Ethernet / Wi-Fi / Battery | Fingerprint, RFID Card, PIN | Supported |
Compatibility depends on model and firmware. Validate against a pilot device before rolling out. Inbound ADMS / iClock HTTP push is not supported.
Pricing Built Per Employee, Not Per Device
Stop paying extra every time you install another biometric terminal at a gate or door.
Starter
For small offices and standalone retail stores.
- Up to 3 connected ZKTeco terminals
- Real-time WebSocket live punch feed
- Standard attendance & punctuality reports
- CSV & PDF export engine
- Email support with next-business-day SLA
Professional
For growing businesses with multiple shifts and leaves.
- Unlimited biometric devices on LAN
- Multi-shift & rotational schedule support
- Full 5-tier leave management & quotas
- Bank-ready itemized salary estimate reports
- Excel XLSX with formulas & timesheet PDFs
- Priority technical assistance
Enterprise
For multi-site organizations that need central reporting.
- Unlimited employees & unlimited terminals
- One hub per site with optional outbound sync
- Automated daily database backups
- Optional outbound HTTP sync to a customer endpoint
- Secondary security PIN & full operator audit trail
- Dedicated account manager & phone SLA