Workforce productivity, policy control and intelligence for Windows workplaces
SmartEPT connects attendance, workstation access, productivity intelligence and policy enforcement in one platform — deployed within your own infrastructure or on SmartEPT Managed Cloud.
Example day, one employee. The register is correct — and incomplete.
SmartEPT records each of these — from the gate to the report.
See the SmartEPT modelEach stage feeds the next, so a productivity figure traces back to a gate punch — and a blocked application to the policy that blocked it.
Punches arrive from your biometric readers — live or on the schedule you set — and are matched to shifts, late log-ins and breaks. A missing sign-out is closed automatically after the shift, so no day runs on forever.
Included in
The SmartEPT agent holds the Windows session at a gate screen until today’s punch arrives. Exclusions and authorised overrides keep the business moving when someone can’t pass a reader.
Included in
Activity is classified against your own rules and scored 0–100 per employee. Meetings and breaks are accounted for separately, and present time is never shown as less than the time actually tracked.
Included in
Applications that shouldn’t run don’t launch. Sites that shouldn’t open don’t. Uploads, USB storage and cameras follow policy — and it all keeps working when the PC is offline.
Included in
Scheduled reports and exception alerts come with every plan, and each report row flags its own data problems. Commander adds authorised, on-demand live screen view and the Live Wall.
Included in
SmartEPT connects your biometric attendance to the Windows session. Until today’s gate punch arrives, the SmartEPT agent keeps the PC at a gate screen. Once it does, work begins — and the time between arriving and starting is on the record.
The biometric reader sends the punch to SmartEPT — live, or on the schedule you set.
The punch is matched to the employee, the shift and the workstation.
Punch out mid-day and the PC locks and a break starts. It resumes on the next punch in.
Office time and desk time, side by side, for every employee and team.
Direct sign-in can be allowed for named employees when an administrator grants it. Gate-to-PC is designed never to stop the business.
Work-from-home staff, field engineers, night shifts and visiting contractors can be excluded from the gate for a dated window. When the window ends, the gate re-arms by itself — nobody has to remember.
The most specific setting wins, so one person can still be required at the gate when their team is excluded.
Start with visibility. Add enforcement when policy has to be applied, not just reported. Add live view where operations need to see work as it happens. Each plan includes everything in the one before it.
Attendance, Gate-to-PC and productivity intelligence for every Windows workstation.
Attendance, access and productivity — with reports
Includes
Best for visibility and accountability across teams and branches.
Everything in Standard, plus Windows-level enforcement of your workstation policies.
Adds enforcement
Everything in Standard, plus
Best for regulated, audit-bound floors — banking, collections, BPO.
Everything in Enforcer, plus authorised live visibility.
Adds live view
Everything in Enforcer, plus
Best for control rooms, audits and time-critical operations.
Standard
Standard turns activity into a clear picture of attendance, presence and productive time — for every team, shift and branch.
Standard shows what happens.Enforcer decides what is allowed.
Enforcer adds a Windows service that applies your rules at the operating-system level, built on Microsoft AppLocker and managed browser policies. Workstation control — without a firewall project.
The application doesn’t start at all — portable copies included — and blocked sites don’t open in any major browser.
Nothing runs, so nothing is left to restrict.The application stays open for work. Only the risky activity is blocked: file uploads and attachments, image transfer, or the camera.
Application allowed. Activity blocked.| Situation | Policy | What the employee sees |
|---|---|---|
| Consumer chat apps on the desktop | Full block | The app doesn’t open. |
| Consumer chat in the browser | Protection · uploads | Chat works; files can’t be attached from the browser. Applies browser-wide and also disables Save As dialogs. |
| Personal webmail — Outlook.com, Yahoo Mail, Proton Mail | Site blocked | A browser block page. |
| Remote-access tools | Full blockorProtection | Blocked outright, or allowed with file transfer switched off where the tool supports it. |
| Portable browsers | Full block | They don’t launch from Downloads, USB drives or user folders. |
| USB storage | Device control | Storage drives are restricted as your policy sets. |
| Webcam | Protection · camera | Off for chosen applications, or off in the browser except on sites you allow. |
New rules start as warnings. Hard blocks are switched on rule by rule, so nobody gets surprise enforcement.
Policies live on the PC, so they keep working at home, on the road and offline — no VPN. Events sync when it reconnects.
Every change is test-launched and rolled back automatically if a known-good program stops opening. A kill switch works even with no network.
Exempt a night shift, a team or one person — by device, employee, shift, team, department or branch. The most specific setting wins.
Launch blocking works on Windows 10 (version 2004 or later) and every Windows 11 edition, including Pro; Windows Home is being validated. Enforcer protects enrolled Windows PCs — it isn’t a network firewall.
Commander · authorised operational visibility
Commander adds live, on-demand screen view to everything in Enforcer — for control rooms, audits and time-critical operations. Live views are started from the console by authorised users, under your disclosed monitoring policy.
Visible, disclosed, deliberate. Live view runs only where your monitoring policy enables it and employees have been informed. Employees can always see the SmartEPT agent and their current status.
Choose where SmartEPT runs. Either way the data is yours — and the monitoring is visible to the people it covers.
Perpetual licence, on your own server or private cloud
Screenshots, activity, attendance and camera events stay in your environment. Ametecs receives licence validation only.
Subscription, hosted and maintained by Ametecs
Ametecs hosts the platform under contractual access, retention and deletion controls, with retention configurable up to three months. The data remains yours.
The same record, seen from the seat that needs it — and limited to what that role is allowed to see.
eTimeOffice and eSSL devices by cloud sync, on-site readers, plus CSV import.
Daily attendance every night and punch events in real time, into Ametecs’ HR and payroll platform.
Push punches in from another system, and read attendance out into your HRMS.
CSV and Excel exports for any payroll system, on demand.
The same SmartEPT either way. The difference is who runs the server, and whether you own the licence or subscribe.
| On-premisesPerpetual licence | SmartEPT Managed CloudSubscription | |
|---|---|---|
| Where it runs | Your server or private cloud | Infrastructure operated by Ametecs |
| Who maintains it | Your IT team | Ametecs |
| How you pay | Once, by user capacity | Per user per month — quarterly, half-yearly or annual |
| Storage | Your own disk, at no charge from Ametecs | 500 MB per subscribed user, pooled; extra from ₹3 per GB per month |
| Retention | Set by your own policy | Configurable up to three months |
| Updates & support | First 12 months included, then optional AMC | Included while subscribed |
| Setup | Optional assisted setup, from ₹5,000 | Free |
| Licence | Never expires | Active while subscribed |
Windows 10 version 1809 or later (64-bit), or Windows 11. Nothing below Windows 10 is supported.
Windows Server 2016 or later, or Windows 10 version 1809 or later, with PHP 8.2.
From about 50 users, run nginx or Apache with MySQL. From about 150, give the database its own server.
System requirements
Choose your plan and team size. We will tell you in plain words what the PCs, the network and — if you host it yourself — the server need to be.
Choose where SmartEPT runs, pick a plan and set your team size. All prices exclude 18% GST.
Standard, the full platform, for up to 10 monitored employees. Biometric and client-hosted installs are set up separately.
You pay for monitored employees. Dashboard-only administrators, HR users and managers don’t use a licence unless they’re also monitored.
Increase capacity at any time by paying the difference at the prevailing price. Data and configuration stay as they are.
Every plan shares the same attendance, productivity and reporting core. The differences are enforcement and live visibility.
| Feature | Standard | Enforcer | Commander |
|---|
From data privacy to deployment and plans — get the clarity you need to choose SmartEPT with confidence.
Ask on WhatsAppYes. With a Perpetual licence SmartEPT runs on your own server or private cloud — Windows Server 2016 or later, or Windows 10 (1809+). Screenshots, activity and attendance data stay there; Ametecs receives licence validation only.
Client-hosted: entirely within your environment. Managed Cloud: on infrastructure Ametecs operates for you, under contractual access, retention and deletion controls, with retention configurable up to three months. Either way, the data remains yours.
It links the biometric punch at your entrance to the Windows session. The SmartEPT agent keeps the PC at a gate screen until today’s punch arrives, then opens it for work — so arriving and starting work are recorded separately.
An administrator or assigned authorised person approves access, and the approval is recorded with the approver and reason. Staff who never pass a reader — remote, field or night shift — can be excluded for dated windows, and the gate re-arms by itself when the window ends.
Standard shows how work happens: attendance, Gate-to-PC, productivity, evidence and reports. Enforcer adds Windows-level enforcement of application, website, upload, USB and camera policies. Commander adds authorised live screen view and the Live Wall. Each plan includes everything in the one before it.
Yes. You can add users, or move up from Standard to Enforcer or Commander, at any time. Employees, history, policies and configuration carry over as they are.
You pay only the difference at the prevailing price.
Yes. SmartEPT Managed Cloud is billed per user per month — quarterly, half-yearly or annually — with managed hosting, updates and support included, and free setup.
Storage is pooled across your licensed users: 500 MB per subscribed user is included, and retention is configurable up to three months. Beyond the pool, storage is ₹3 per GB per month up to 500 GB, ₹2.50 per GB to 2 TB and ₹2 per GB above that, billed from a 50 GB or ₹150 minimum.
Screenshots are almost all of the volume, so the screenshot interval and retention period you choose decide whether you stay inside the pool. Violations-only screenshots cut it sharply.
One employee authorised to use the SmartEPT Agent. They can sign in on another authorised PC, but can work on only one at a time. Dashboard-only administrators, HR users and managers do not consume a licence unless they are also monitored.
An authorised console user opens an employee’s live screen on demand — across multiple monitors, at 480p, 720p or 1080p. It starts within seconds and is view-only; there is no remote control. The Live Wall shows every live session on one screen, and how many can run at once is set by your licence and your settings. Live view runs only where your disclosed monitoring policy enables it.
No. Live view is read-only. An authorised user can see the screen and nothing else — no mouse or keyboard control, no file access, and no way to run anything on the employee’s PC.
Changes to what a PC may do are made from policy in the console, never by taking the machine over.
Yes. Every live view is recorded in SmartEPT’s audit trail — who opened it, whose screen and when. Only roles you grant live-view permission can open one, and every view is view-only.
Employee PCs: Windows 10 version 1809 (build 17763) or later, 64-bit, or Windows 11. Nothing below Windows 10 is supported and there is no legacy build — Windows 7 and 8.1 PCs have to be upgraded.
Enforcer: application launch blocking needs Windows 10 version 2004 or later, or any Windows 11 edition — Pro included. On Windows Home it is still being validated.
Your server, if client-hosted: Windows Server 2016 or later, or Windows 10 version 1809 or later, with PHP 8.2. From about 50 users, run nginx or Apache with MySQL; from about 150, give the database its own server.
No. Employees can see the SmartEPT agent and their status, and your monitoring policy is shown to them before tracking starts. The employer decides which controls to enable, informs employees, and stays within applicable law.
No. It controls what runs on — and what leaves — enrolled Windows PCs, without a firewall project. It doesn’t provide inbound protection, intrusion prevention, malware detection or SSL inspection, and a local administrator can remove it.
Tell us your team size, where you want it hosted and what you need to control. We’ll show you the right SmartEPT configuration — on a live call, or in a 7-day trial.
Business hours, IST. Remote support by WhatsApp and phone.
Gate-to-PC emergency? Use the in-product override, or call +91 96666 12424 — a Gate-to-PC outage is always P1.