Restricting what employees can do outside the office

This is off by default: an employee who signs in from home sees exactly what they see at work. If you would rather keep customer data and the time clock inside the building, turn on Office Access restriction. Staff can still sign in from anywhere to check their schedule, request time off and read notifications.

What changes for a restricted person off-site

Hidden and locked: clients and their contact details, client and pet notes, messages, invoices, checkout, payment history, reports, marketing, activity logs, and time management. These disappear from the sidebar, the data itself is withheld so no screen or export can show it, and nothing in these areas can be added, changed or deleted until the person is back in the office.
Unavailable: the time clock. Clocking in and out only works in the office.
Still available: the calendar and their own schedule, appointment times with the pet's name, time-off requests, notifications, and their own pay stubs.
A Remote mode banner explains this at the top of every page, with a button to enter a device code.

Owners and co-owners are never restricted. Station Mode devices always count as in the office.

Which roles are restricted

Sidebar: Team and Payroll, then Roles and Permissions. Each role template has a Restrict when off-site switch. It is on for every role except Manager, and you can change it per role. Someone with a custom template follows that template; everyone else follows the system template for their role. The switch only has an effect once Office Access restriction is turned on for the business.

Turning it on

Sidebar: Settings, then Devices, then the Office Access tab.
Register at least one way for the app to recognise the office. Either or both:

Office devices. Press Register Device for each office computer or tablet, give it a name, and copy the 8-character code. It is shown once. On that computer, have any staff member sign in, press In the office? Enter device code on the Remote mode banner, and enter the code. This is done once per device; the browser remembers it.
Office network. Under Office network, press Use my current address while you are on the office connection, then Add. Anyone who signs in from that address counts as in the office automatically. You can also add a block such as 203.0.113.0/24. Home Wi-Fi and mobile data are never on this list, so only add the address your office connection uses.

Switch on Restrict off-site access for employees. The switch refuses to turn on until a device or network address exists, so nobody is locked out of the clock by accident.

If you use Station Mode, the same switch is offered on the Station Mode tab when you enable it.

How the app decides

A sign-in is marked as in the office when it happens on a registered device or from a listed address, and that mark lasts for a shift. It has to be earned again after signing out. Clearing the browser's site data forgets a device code; enter it again from the banner. The app does not use location tracking.

Removing a device or address

On the Office Access tab, press the trash icon next to a device and confirm Revoke, or the cross next to an address. Anyone signed in through it is treated as off-site from that moment. Register the device again with a fresh code if the computer comes back.