Web Platforms

Devixa-HR

A cloud-native, multi-tenant biometric attendance platform that links ZKTeco fingerprint terminals to the cloud through an offline-tolerant branch agent.

Visit live site

Client: Devix - SaaS product for retail owners and multi-branch chains
Completed: January 2026
Technologies: FastAPIPythonSQLAlchemyMySQLAlpine.jsTailwind CSSChart.jsRedis/RQDocker

Devixa-HR connects ZKTeco biometric terminals (ZK protocol) to the cloud via a Windows branch agent, giving retail owners and multi-branch chains a bilingual attendance dashboard they can open from a phone. It scales from a single store with one device to a full SaaS provider running many isolated tenants — with self-service company signup, subscription plans enforced server-side, and a database-driven landing CMS the super admin edits without touching code.

Multi-tenant

Tenancy

Report types

ZKTeco

Devices

Docker

Deploy

The challenge

Retail chains needed reliable fingerprint attendance across branches without on-site IT. Devices sit on branch LANs, connectivity is intermittent, and each company needs its own isolated data with managers seeing only their branch. The system also had to be sellable as SaaS with plans, trials, and self-registration.

The solution

A Windows agent reads each ZKTeco device over the LAN, buffers records in a local SQLite store during outages, and pushes them over HTTPS with per-device tokens; the FastAPI backend deduplicates and stores org-scoped attendance. A three-tier RBAC (Super Admin → Admin → Manager) enforces tenant isolation, subscription limits are checked in the API, and a DB-driven landing CMS, six report types, and Excel/PDF export (Arabic/English) round out the product.

Architecture

FastAPI + SQLAlchemy + Alembic with JWT auth on MySQL (utf8mb4); Alpine.js + Tailwind + Chart.js dashboard; Python branch agent with pyzk and SQLite offline buffer; Redis/RQ for background jobs; Docker Compose + Nginx deployment with automated backups and Prometheus/Grafana ops. Device clocks interpreted as Asia/Muscat, stored UTC, displayed per device timezone.

Key features

ZKTeco device sync via offline-tolerant Windows agent
Multi-tenant isolation (Super Admin → Admin → Manager)
Self-service company signup with 14-day trial
Server-enforced subscription plans and limits
Database-driven landing CMS (no code edits)
Six report types with Excel/PDF export (AR/EN)
Device health heartbeat and sync logs
JWT, bcrypt, per-device tokens, rate limiting

Have a similar problem to solve?

Tell us what you're building — we'll tell you honestly whether we're the right team for it.

Start a conversation