Restricting what employees can do outside the office
Updated
On this page
This is off by default. An employee who signs in from home sees exactly what they see at work. If you would rather keep customer data and the time clock inside the building, turn on Restrict off-site access for employees. Staff can still sign in from anywhere to check their schedule, request time off and read notifications.
What changes for a restricted person off-site
- Hidden and locked: clients and their contact details, client and pet notes, Messages, Call Log, invoices, Checkout, payment history, Reports, Marketing, Activity Logs, Time Management and Payroll. These leave the sidebar. The data is held back on the server too, so no screen or export can show it. Nothing in these areas can be added, changed or deleted until the person is back in the office.
- Time clock: clocking in and out fails with "The time clock is only available in the office."
- Still available: the calendar and their own schedule, appointment times with the pet's name, time-off requests, notifications, and their own time card and pay history.
- A Remote mode banner sits at the top of every page, with a button: In the office? Enter device code.
Owners and co-owners are never restricted. Station Mode devices always count as in the office.
Which roles are restricted
Sidebar: Team & Payroll, then Roles & Permissions. Open a role and look at the Restrict when off-site switch. Someone with a role follows that role. Someone with no role follows the system role for their access level.
Check every role before you turn the restriction on, including Manager. Managers are meant to keep full access from home, but check the Manager role's switch is off if that is what you want.
The switch does nothing until the business-wide restriction is on.
Turning it on
- Sidebar: Business Settings, then Devices, then the Office Access tab. Owners and managers can open this page.
- Tell the app how to recognise the office. Use either or both:
- Office devices. Press Register Device, give it a name such as Front desk PC, and copy the 8-character code. It is shown once. On that computer, have any staff member sign in, press In the office? Enter device code on the Remote mode banner, enter the code and press Confirm. You do this once per device. The browser remembers it.
- Office network. Under Office network, press Use my current address while you are on the office connection. This fills in your address. Then press Add. Anyone who signs in from that address counts as in the office. You can also type a block, such as 203.0.113.0/24. Only add your office connection. Never add a home Wi-Fi or mobile address.
- Switch on Restrict off-site access for employees. It will not turn on until at least one device or network address exists, so nobody is locked out of the clock by mistake.
If you use Station Mode, the Station Mode tab offers the same switch as Also restrict what employees see outside the office.
How the app decides
A sign-in counts as in the office when it happens on a registered device or from a listed address. That mark lasts for a shift, and has to be earned again after signing out. Clearing the browser's site data forgets a device code. Enter it again from the banner. The app does not use location tracking.
Removing a device or address
On the Office Access tab, press the trash icon next to a device and confirm Revoke, or press the cross next to an address. Anyone signed in through it is treated as off-site from that moment. To bring a computer back, register it again with a new code.