invite
5 minInvite
Magic-link to the employee · auto-fill from CSV import · venue + role pre-selected.
GetUp / Employees
From an emailed invite to a fully-staffed profile — permissions, certs, rates, contracts and tax IDs — in under twenty-four hours. Every change is stamped, every off-boarding leaves the trail labour inspectors expect.
team · 6 of 47·liveAleksandra K.
COO · All venues
Karolina W.
Bar Lead · Warszawa · Rooftop
Maria N.
Floor · Warszawa · Rooftop
Tomasz L.
Kitchen lead · Kraków · Centrum
Piotr Z.
Bar · Gdańsk · Mariacka
Lena W.
Cashier · Wrocław · Rynek
Active
42
On leave
3
Cert risk
2
Profile
opened 14:32Karolina Wójcik
Bar Lead · Warszawa · Rooftop
Role · Bar Lead diff
Certificates · 3 of 4
01
Five stages between sending the email and the new hire walking onto the floor. Each stage is its own row in the audit log.
invite
5 minInvite
Magic-link to the employee · auto-fill from CSV import · venue + role pre-selected.
sign
12 minSign
Contract template signed in-app · GDPR consent captured · ID document upload (encrypted).
certify
18 minCertify
Food safety, fire, first-aid, age-restricted sales — certs uploaded, expiry tracked.
assign
3 minAssign
Role snapshot · venue access · rate ladder · weekday availability. Permission diff visible.
activate
2 minActivate
First shift on the rota · PIN issued to tablet · welcome message · payroll record created.
profile · cumulative
step 05Karolina Wójcik
Bar Lead · Warszawa
fields added per step
02
What the people record actually is, in numbers.
03
Three real onboarding and off-boarding scenes. Identifying details anonymised.
Q
Where is the new bar lead from Warsaw in the onboarding flow?
A
Signed and certified yesterday. One pending — the food-safety cert renewal expires in 11 days.
Q
Can the new store manager run payroll for Wrocław only?
A
Yes — a Store Lead role with payroll.close scoped to Wrocław. Diff shown below; no global access.
Q
Off-board the cashier who left last week — soft, payroll retained.
A
Locked. Sessions revoked. Payroll history retained 7 years. Trail filed.
| Account lock | done | |
| Tablet PIN | revoked | |
| Payroll | retained | |
| Personal data | 60-day hold |
04
The employees module respects what we shouldn't keep. Here is the line.
— 01 —
by designIt won't keep biometric data.
No fingerprints, no face vectors, no biometric templates of any kind. Identity is a PIN and an ID document scan, nothing more.
— 02 —
by designIt won't monitor outside the venue.
We don't track location, screens, or messages off-premise. The check-in trail is the only signal we collect.
— 03 —
by designIt won't keep data past its purpose.
Each field has a purpose tag. When the purpose ends — by retention rule or right-to-erase — the field is anonymised.
— 04 —
by designIt won't expose payroll without explicit role.
Even an admin needs an explicit payroll capability to see numbers. Visibility is a deliberate grant.
— 05 —
by designIt won't grade people for you.
No automated performance scores from punch-in punctuality. Numbers are visible, judgements stay human.
— 06 —
by designIt won't sync to a public directory.
Employee names and roles never leak to a public-facing surface unless the operator explicitly opts a venue in.
05
Our last labour inspection took ninety minutes. The inspector said the trail was the cleanest they had seen in the borough.
06
Free for 14 days. No card. Magic-link onboarding, certs tracked, role diff visible from the first profile.