Solutions · Human resources

Your people’s data,
only for those who should see it

Payslips, contracts and certificates open only for whoever holds the HR role — not even for an administrator automatically. Attendance comes in from the phone, the month closes with a timesheet for everyone, and every assignment stays written in the activity log.

Request a demo for your HR office See pricing

The month matrix: one row per employee and one column per day, with counted hours and anomalies.

How the HR office uses it

Truly confidential,
simple every day

Four jobs every HR office knows, and how you do them in Custodo. The screens are the real product, with sample data.

Documents and AI Contacts

Every employee’s file, opened only by those who should

Payslips, contracts, certificates and DURCs land in the Archive’s People area, recognised and with their data extracted. That area opens only for whoever holds the HR role: seeing the whole archive is not enough, and neither is being an administrator. The role is given on the person’s record by picking its type, and applies after a confirmation.

Four types, each including the one before: Read, Write, Delete, Manage
Whoever manages the role gives it to others, never to themselves
Every assignment stays in the activity log, under the name of whoever made it

The HR role on a person’s record: who sees People documents, and with which type.

Contacts Documents and AI Time clock

Everyone sees only what they need

A new user sees no module until you give it to them, and for each person you decide which contacts they see: take colleagues’ records away from whoever works with customers. An administrator starts from everything too, but the modules they do not need are switched off on their record.

Whoever does not see employees finds them nowhere: list, search, exports, AI assistants
Someone who only punches in is a light user: they see the Dashboard and the Time clock, nothing else
Every version of a document stays as it was, and you always know who opened or downloaded what

An administrator’s record: every module on, and what they do not need is switched off.

Time clock Contacts

Attendance, holidays and leave from the phone

Employees punch in and out, breaks and lunch from the app, which checks they are inside the workplace’s area. Holidays, leave and corrections are requested from the app or the web, and their manager decides them; the HR office sees who is working right now and everyone’s month, day by day.

Custodo keeps the workplace and whether the employee was inside or outside, never the coordinates
Nobody decides their own request; the type of sick leave is seen only by the employee and the HR office
At month end a PDF timesheet for everyone, in the Archive, and the Excel file for the payroll consultant

Attendance at one workplace: present, on a break and away, with each employee’s last punch.

Document sharing Contacts Documents and AI

Each employee gets their own payslip

With Document sharing you send each employee the documents linked to their contact — this month’s payslip, the CU — behind a personal link with a password and an expiry date. No attachments scattered across mailboxes: every opening and every download is recorded.

Who opened and who downloaded, document by document, with date and time
Automatic sends every day, week or month
A link you can withdraw at any moment

A share’s recipients: openings and downloads, document by document.

Modules for the HR office

What HR needs,
and what for

Every module is included in every package; these are the ones the HR office uses every day.

People data

Attendance and deadlines

With employees

Expenses, approvals, email and PEC, CRM, data tables, dashboards and integrations are included too. All modules

Questions from HR offices

Before you begin

Any other questions? Write to our team.

Does the administrator see payslips?

No, not until they give themselves the HR role.

People documents open only for whoever holds the HR role. An administrator can give it to themselves, after a confirmation, and the assignment stays in the activity log under their name.

Can I give a colleague read access only?

Yes: the Read type.

The HR role has four types, each including the one before: Read, Write, Delete and Manage, which also gives the role to others. It is picked on the person’s record and applies at once, after a confirmation.

Can support staff open People documents?

No.

The HR role works only for a person at work: during a support session People stays closed, and the same goes for API keys and for assistants connected from outside.

Does punching in from the phone track where employees are?

No: it only checks they are at the workplace, when they punch in.

When an employee punches in, the app checks they are inside the workplace’s area: Custodo keeps the workplace, whether they were inside or outside and the distance, never the coordinates. The phone uses the location only while the app is in use, never in the background.

Does every employee who punches in take up a user of the package?

No: someone who only punches in is a light user.

A light user sees the Dashboard and one module only, for example the Time clock: they punch in, request holidays and leave, read the notice board and download their own timesheet. Every paid package includes a number of light users, shown in the price list.

Want to see it on your HR office’s work?

The demo starts from one of your processes — the month’s attendance, a new hire’s first day, the payslips to send out — and from who should see what.