BioTrack by Alcra

Attendance for Hikvision terminals · Windows 11

Every scan,
accounted for.

BioTrack connects your Hikvision terminal to a Windows service that saves every fingerprint, face and card scan to an encrypted database on site. Your team sees who is in, who is late and who hasn’t scanned yet, as it happens. Cloud reporting is there when your organisation needs it.

  • Windows 11, x64 and ARM64
  • Runs as a Windows service
  • No per-employee licences
The BioTrack Today dashboard: 19 employees recorded today, 7 late arrivals, 17 awaiting a later scan and 2 with no scan yet, with an arrivals chart and a list of recent scans. The BioTrack Today dashboard: 19 employees recorded today, 7 late arrivals, 17 awaiting a later scan and 2 with no scan yet, with an arrivals chart and a list of recent scans.

How it works

One chain, each link checked on its own.

Scans move one way: from the terminal, to the service, to the database. The app reads from the end of the chain, and its Connection page shows the health of every link separately.

  1. 01

    Terminal

    Your Hikvision terminal records a fingerprint, face or card scan and calls BioTrack over the local network.

  2. 02

    Collector service

    A Windows service receives the call and saves the scan, whether or not anyone has BioTrack open.

  3. 03

    Encrypted database

    Scans are written to an encrypted database on that computer. Nothing is edited after it is saved.

  4. 04 Optional

    Cloud reporting

    If your organisation turns it on, signed batches go to your cloud service and catch up after any outage.

The BioTrack app sits on top: Today, Attendance, Employees, Reports and Connection. It talks to the collector over a protected local channel and updates live as scans are saved.

Read the details

Features

Built for five past eight on a Monday.

Clear answers to the questions people actually ask: who’s here, who’s late, who still owes a scan, and what the month looks like. The screens say what they know, and are honest about what they can’t know yet.

Today

Know who’s in before the first meeting.

Recorded, late, awaiting a later scan and no scan yet, with each person’s first scan plotted against their start time.

Today’s arrivals chart, with first scans clustered around the 06:00 and 08:00 start times and late arrivals marked in amber. Today’s arrivals chart, with first scans clustered around the 06:00 and 08:00 start times and late arrivals marked in amber.
Attendance

Every day, every scan, in order.

Open any record to see the saved scans, the effective result, the schedule it was measured against and its correction history.

An attendance record for one employee, listing three saved scans at 07:55, 09:40 and 10:31 and the effective result for the day. An attendance record for one employee, listing three saved scans at 07:55, 09:40 and 10:31 and the effective result for the day.
Reports

The month, ready for payroll.

Working days, attendance rate, absences and late arrivals per employee, with a CSV export when you need it.

The monthly report summary: 19 working days, a 91.9% attendance rate, 34 absences and 18 late arrivals. The monthly report summary: 19 working days, a 91.9% attendance rate, 34 absences and 18 late arrivals.
Connection

A quiet hour isn’t an outage.

Every link in the chain is checked on its own, so a slow morning never looks like a fault.

  • Desktop to collectorConnected
  • Collector serviceReady
  • Terminal APIReachable
  • Terminal clockIn sync
  • Last scan received4 min ago
Corrections

Fix the result, keep the evidence.

Administrators correct the day’s result with a reason. The saved scans stay exactly as the terminal sent them.

Last scan10:31
Last scan17:04

mmoyo · 25 Sept, 08:20 · “Forgot to scan out”

Schedules

Shifts, grace periods and a real calendar.

Assign each person a schedule, then mark holidays, working weekends and leave so absences are counted fairly.

Default hours · 08:00–17:00 Early · 06:00–14:00 Late after 10 min grace Public holidays Leave

Cloud reporting · optional

Off-site reporting that never waits for the internet.

Turn on cloud reporting and each BioTrack installation sends its attendance to your organisation’s cloud service from a durable outbox. The database on site stays the source of truth, so an outage delays delivery and loses nothing.

  • Saved here first

    Every scan commits to the local database before it is queued. A dropped connection only means the queue waits.

  • Signed by this installation

    Each batch carries an Ed25519 signature from a key that never leaves the PC. Keys can be rotated, and a lost PC revoked.

  • Retention you choose

    Keep cloud records for 1, 3, 5 or 7 years. Older data is removed on schedule, and late batches can’t bring it back.

  • Nothing sensitive leaves

    No fingerprint or face templates, passwords or terminal credentials. The cloud rejects any field not on its list.

Coming soon The BioTrack portal. Delivered attendance in a browser, account and password management, and signed updates, all in one place.
BioTrack’s Cloud reporting settings: state Up to date, 0 events waiting on this computer, last accepted 25 Sept 10:41, and the installation identity with its site, key version and activation date.

Security & privacy

Private by the way it’s built.

Attendance data is personal. BioTrack keeps it on hardware you control, encrypts it there, and limits exactly what can read it.

Encrypted at rest

The attendance database is encrypted with a random 256-bit key, protected by Windows and readable only by the service and administrators.

A service, not a window

Collection runs under its own Windows service account. Closing the app doesn’t stop scans being saved.

A protected local channel

The app talks to the collector over an authenticated channel. It never opens the database or sees terminal passwords.

Corrections with a trail

Saved scans are never modified. A correction changes the effective result and records who made it, when, and the reason given.

Signed installer

One signed setup for Windows 11 on x64 and ARM64 installs the app and the service together, and checks itself before reporting success.

Backups you can carry

Daily encrypted snapshots stay on the PC. Portable backups are protected by a recovery passphrase that only you hold.

Read the full security model

Light and dark

Easy to read at 6 a.m. and at 6 p.m.

BioTrack follows Windows by default, and anyone can pick Light or Dark for their own computer.

The Today dashboard in the light theme.
The Today dashboard in the dark theme.

Questions

Before you install.

More answers are in the common questions.

Does BioTrack need an internet connection?

No. The terminal, the collector service and the app all work on your local network, and every report is produced on site. The internet is only needed if your organisation turns on cloud reporting.

Which terminals does it work with?

Hikvision access-control terminals that record fingerprint, face or card scans. The setup wizard finds the terminal on your network, signs in to it and asks for a real scan to prove the connection before you finish.

What happens when nobody has the app open?

Nothing changes. The collector is a Windows service that receives and saves scans on its own. When you open BioTrack, the screens load what has been saved and then update live.

Is biometric data uploaded anywhere?

No. Fingerprint and face templates stay on the terminal. Cloud reporting sends attendance records only, from a fixed list of allowed fields, and the cloud service rejects anything else.

Is there a limit on employees?

There is no per-employee licensing. Employees are synced from the terminal, and new people who scan appear for review so you can check the name and assign a schedule.

Can we move BioTrack to a new computer?

Yes. Export a portable encrypted backup, protected by a recovery passphrase, and restore it after installing on the new PC. Terminal and cloud credentials are deliberately left out and entered again afterwards.

Setup ends with a real scan.

The wizard finds your terminal, connects it, and doesn’t finish until a scan arrives, so you know it works before your team relies on it.