Time and Attendance
This category is the clearest example of why a category is not a product boundary. A single shortlist can contain a timesheet form and a system that photographs screens every ten minutes.
They are sold together, compared together, and they are not the same purchase. As a neutral example of vendor terminology, Monitask uses the phrase employee monitoring software on its site.
Reviewed August 9, 2026. Legal points are summaries of published provisions, not advice.
What the tools in it actually do
Four distinct things, frequently in one product.
Recording hours. Somebody enters start, end and breaks, or a system captures them. The narrow function, and the one most buyers need.
For broader context, see Smartsheet.
Attributing time to work. Projects, clients, tasks. Useful for billing and for understanding where effort goes.
Scheduling and attendance. Shifts, rosters, absence, leave balances.
And observing activity. Application and website logs, idle detection, screenshots, keystroke counts, productivity scores.
The first three are administration. The fourth is monitoring, and the boundary between them is where the legal and organisational consequences live.
Why the boundary matters
Crossing it changes which rules apply, not just how people feel.
In the EU, systematic employee monitoring is generally treated as triggering a data protection impact assessment under Article 35 GDPR, and consent is a weak basis in an employment relationship per EDPB Guidelines 05/2020 — legitimate interests with a documented balancing test is the usual route.
Automated productivity scoring can engage Article 22 on automated decision-making, with employee rights to human review.
Works council involvement is mandatory in several jurisdictions — Germany under §87 BetrVG, the Netherlands under Article 27 WOR for employers with 50 or more staff, and equivalents elsewhere.
And some capabilities are effectively ruled out. CNIL treats keystroke logging as disproportionate in almost all cases; German authorities require personal content on screenshots to be excluded or blurred and prohibit webcam activation for monitoring.
What to check in this category specifically
Which of the four functions does this product do, and which are on by default? Default-on capture is the mechanism by which organisations cross the line without deciding to.
Can the monitoring features be disabled — not hidden, disabled? And can that be evidenced to a works council?
What is the retention period for granular activity data, and is it configurable? Aggregated reporting and raw activity logs deserve different periods.
Is any scoring automated, and is there human review in the workflow?
And where does the data sit and who are the subprocessors — activity data about named employees is a sensitive category to have leaving the jurisdiction unnoticed.
The cost nobody prices
The American Psychological Association's 2023 Work in America Survey found that 42% of monitored workers planned to look for a new job within a year, against 23% of those not monitored.
That is a survey of intention rather than of turnover, and it is a non-vendor source in a field where almost every figure comes from somebody selling something.
Whatever the eventual attrition, the number belongs in the business case alongside the licence cost, and it appears in no comparison of this category.
The narrow purchase
If the requirement is recording hours, the narrow tool is cheaper, faster to introduce, and does not create any of the above.
A form and a weekly check satisfies a legal recording duty for a small employer in many jurisdictions. The monitoring capability is a separate decision that should be made separately, and buying a product that has it and switching it off is not the same as buying one that does not.
The short version
- Four distinct functions get sold as one category: recording hours, attributing time, scheduling, and observing activity
- The first three are administration and the fourth is monitoring, and crossing that boundary changes which rules apply
- In the EU: DPIA under Article 35, consent weak per EDPB 05/2020, Article 22 for automated scoring, works councils under §87 BetrVG and Article 27 WOR
- Keystroke logging is treated as disproportionate by CNIL; German authorities require screenshot content exclusion and prohibit webcams for monitoring
- Check which functions are on by default, whether monitoring can be disabled and evidenced, retention for granular data, automated scoring, and subprocessors
- The APA 2023 survey found 42% of monitored workers planned to leave within a year against 23% of others — a non-vendor figure that appears in no comparison