Core Platform
TrackX
Unified workforce operations platform for regulated, multi-site organizations
- Organization-aware workforce platform
- Security, workflow, reporting, notification, integration, and mobile services in one product
- Designed for staged rollout across departments, branches, and workforce modules
- Built for regulated operations where payroll, attendance, performance, and assets must be explainable
Product Overview
Unified workforce operations platform for regulated, multi-site organizations
TrackX is the operating platform behind the TrackX workforce suite. It brings organization structure, identity, permissions, workflow approvals, notifications, reporting, integrations, mobile access, and system administration into one governed foundation so payroll, attendance, leave, performance, assets, loans, and contracts operate from the same source of truth.
Who it is for: HR, finance, operations, IT, and executive teams.
Key Features
Built around outcomes, not feature noise
Each capability is designed to improve how teams operate, govern work, and make decisions.
Single Workforce Operating Core
Organization, employee, position, security, workflow, notification, reporting, and mobile services are shared across every TrackX module.
Reduces duplicate setup, conflicting data, and disconnected approvals.Organization-Aware Data Model
Organizations, divisions, departments, positions, teams, groups, reporting lines, and organograms provide scope for every workflow and permission decision.
Makes TrackX realistic for multi-branch, multi-department, and authority-based operations.Configurable Feature Governance
Feature toggles, dependencies, module visibility, sub-feature control, runtime settings, and rollout state allow staged activation by organization and role.
Supports phased enterprise adoption without separate deployments for each client.Enterprise Security Backbone
Role and scope controls, route-permission mapping, MFA flows, trusted-device handling, session controls, password expiry warnings, security notifications, and audit-ready preferences protect sensitive workforce data.
Gives buyers confidence that payroll, employee, and performance data are governed centrally.Workflow and Revision Engine
Approvals, revisions, returned work, stage actors, inboxes, status transitions, and escalation-ready workflow state are reusable across payroll, leave, overtime, performance, assets, contracts, and loans.
Keeps operational decisions traceable instead of hidden in email or chat.Notification Operating Layer
In-app, email, push, read-state, delivery preferences, event logs, and module-specific alerts give employees and administrators actionable updates.
Prevents approvals, security alerts, and employee actions from being missed.Reporting and Export Foundation
Reusable reports, saved views, execution history, branded exports, CSV/PDF flows, overtime exports, payroll reports, and compliance outputs support operational and executive reporting.
Turns workforce data into evidence for audits, payroll control, and management decisions.Mobile and Self-Service Layer
TrackX exposes employee-facing attendance, leave, payroll, loans, assets, organization, notifications, and performance actions through web and mobile experiences.
Moves routine HR work to the employee while keeping policy checks server-led.Offline and Device-Aware Mobile Operations
Mobile flows support offline queueing, biometric checks, device security checks, app passcode fallback, push notifications, GPS, and Wi-Fi assisted attendance verification.
Supports field teams and unstable connectivity without losing governance.Integration and Domain Engine
TrackX can connect identity, employee lifecycle, payroll, accounting, attendance, calendar, holiday, notifications, and reporting domains through shared APIs and source-linked records.
Reduces re-entry and makes every module stronger when deployed together.TrackX Authentication & Security
TrackX Authentication & Security is an enterprise-grade identity and access management platform providing multi-protocol single sign-on, risk-based adaptive authentication, multi-factor authentication, hierarchical role-based access control, session management, and comprehensive security observability. The module integrates biometric authentication, device trust, and zero-trust security principles across web and mobile applications.
Included as a TrackX platform capability: Enterprise identity and access management with adaptive authentication.TrackX Integrations & Domain Engine
TrackX Integrations & Domain Engine provides a unified identity federation and integration platform supporting SAML 2.0, OpenID Connect, and LDAP/Active Directory for single sign-on, user provisioning, and directory synchronization. The module enables organizations to connect TrackX with existing identity infrastructure, automate user lifecycle management, and configure third-party service integrations through a centralized connector management system.
Included as a TrackX platform capability: Identity federation platform with SAML, OIDC, and LDAP/AD.TrackX Mobile Platform
TrackX Mobile Platform is a native mobile application for Android and iOS providing self-service workforce management capabilities including attendance tracking with GPS verification, leave management, payslip access, loan management, and asset verification. The platform features offline-first architecture, biometric authentication, device security attestation, and push notification support for field and remote workforce enablement.
Included as a TrackX platform capability: Native mobile workforce management with offline-first architecture.TrackX Notifications
TrackX Notifications provides centralized event-driven delivery of in-app, email, and push notifications across all TrackX modules. The system features a registry-driven event model with 154 registered events, tiered preference management respecting organizational policy and user preferences, configurable retention policies, failed delivery recovery, and comprehensive delivery analytics.
Included as a TrackX platform capability: Event-driven multi-channel notification engine.TrackX Organization Management
TrackX Organization Management provides comprehensive organizational structure management spanning organizations, divisions, departments, positions, teams, and groups. The module includes interactive organogram generation, position authority configuration, team and group management, and integration with all TrackX modules for scope-based access control and workflow routing.
Included as a TrackX platform capability: Six-level organizational hierarchy with interactive organograms.TrackX Reports & Analytics
TrackX Reports & Analytics provides a catalog-driven, modular reporting engine for unified report generation, execution, export, and scheduling across all TrackX modules. The platform features 82 pre-built report definitions across five modules, configurable report templates with branding, multi-format export, saved views, background job processing, and comprehensive execution history with access control.
Included as a TrackX platform capability: Unified reporting platform with 82 pre-built reports and branded exports.TrackX System Administration
TrackX System Administration provides centralized configuration management, feature toggle control, system settings administration, integrity monitoring, and runtime configuration for the entire TrackX platform. The module enables administrators to manage system-wide settings, control feature availability with dependency resolution, configure third-party integrations, and monitor system health through a unified administration interface.
Included as a TrackX platform capability: Centralized configuration and feature management for the TrackX platform.TrackX Workflow & Approvals
TrackX Workflow & Approvals provides an enterprise-grade approval engine powering configurable multi-stage approval processes across all TrackX modules. The system features entity-aware workflow configuration, position-based and role-based approver routing, escalation management, approval intelligence analytics, and comprehensive audit trails with deep-diff change tracking.
Included as a TrackX platform capability: Configurable multi-stage approval engine for enterprise governance.Technical Specifications
A reusable product foundation for enterprise needs
Deployment
Cloud, private cloud, or on-premise
Platforms
Web application, admin portal, mobile application, and REST API
Modules Included
TrackX Authentication & Security, TrackX Integrations & Domain Engine, TrackX Mobile Platform, TrackX Notifications, TrackX Organization Management, TrackX Reports & Analytics, TrackX System Administration, TrackX Workflow & Approvals
PlatformModules
TrackX Authentication & Security, TrackX Integrations & Domain Engine, TrackX Mobile Platform, TrackX Notifications, TrackX Organization Management, TrackX Reports & Analytics, TrackX System Administration, TrackX Workflow & Approvals
AdvancedCapabilities
Feature-gated employee self-service modules, Route-level permission governance, MFA, trusted-device, and session controls, Reusable approval and revision flows, Central event and notification delivery, Organization hierarchy and organogram context, Mobile offline queue and device verification, Report execution, export, and audit history
Use Cases
Configurable for the work your teams actually manage
Product configuration can be adapted to the business workflows, departments, and operational priorities that matter most.
Integrations
Connect the systems your business already depends on
- SAML 2.0 identity providers with certificate chain validation
- OpenID Connect providers with dynamic discovery and PKCE
- LDAP/Active Directory with TLS, group sync, and user provisioning
- Firebase Cloud Messaging for push notification delivery
- Email service for OTP and security alerts
- Platform-native biometric APIs for fingerprint and face recognition
- Mobile device attestation services
- SAML 2.0 identity providers with multi-certificate support and metadata exchange
- OpenID Connect providers with dynamic discovery and PKCE flow
- LDAP v3 directories and Active Directory with TLS/StartTLS
- Firebase Admin SDK for push notification configuration
- Google Maps and Geocoding APIs for location services
- Calendar provider API for external sync
- Holiday provider API for international holiday import
- Human verification providers (Turnstile, hCaptcha, reCAPTCHA v2)
- TrackX backend API for all data operations
- Firebase Cloud Messaging for push notifications
- Device biometric APIs for fingerprint and face authentication
- Platform-native attestation services for device integrity
- Google Maps SDK for location display and route visualization
Security & Compliance
Designed with control, traceability, and responsible access
- Zero-trust architecture with cryptographically signed security contexts
- Bank-grade MFA with AES-256-GCM encrypted TOTP secrets
- Multi-dimensional rate limiting with persistent state
- Password protection with HMAC-based trivial variation detection
- Login anomaly detection with 15 risk signals and graduated thresholds
- Session security with refresh token rotation and family revocation
- Device security with trusted device and physical identity binding
- Comprehensive audit logging across 50+ entity types
- Connector secret encryption for LDAP credentials, OIDC secrets, and SAML private keys
- Certificate validation with bundle parsing, metadata extraction, and health checking
- TLS enforcement for LDAP connections with StartTLS support
- SAML replay attack protection with InResponseTo validation via MongoDB cache
- PKCE flow with S256 code challenge for OIDC
- Rate limiting on authentication attempts per user and IP
- Domain policy controlling local account availability and provisioning behavior
- Root/jailbreak detection via flutter_jailbreak_detection
- Certificate pinning with SHA-256 fingerprints per host
- Device attestation via native platform channels with 10-minute cached tokens
- Biometric binding with server-issued tokens and SHA-256 hashed storage
- JWT access and refresh tokens with proactive refresh scheduling
Customer Success
Proof points that matter to decision makers
The product story focuses on operational improvements buyers can understand and evaluate.
TrackX in practice
Platform services and workforce modules connected in one operating system.
trackx
trackx
FAQ
Questions about TrackX
TrackX is the core platform. Payroll, attendance, leave, performance, assets, contracts, and loans are product modules that run on the same governed platform services.
Related Products
Explore more Offensive X product directions
TrackX Loan Management
TrackX Loan Management provides complete loan administration for employer-sponsored loan programs including salary advances, emergency loans, education financing, and housing loans. The module features configurable loan products, application processing, disbursement management, automated repayment scheduling, delinquency tracking, write-off workflows, payroll deduction integration, and portfolio risk reporting.
TrackX Employee Contract Management
TrackX Employee Contract Management provides comprehensive contract lifecycle management from creation through approval, activation, renewal, and termination. The module supports master contracts as position-level templates, individual user contracts with compensation and benefits, multi-level approval workflows, document generation, and payroll integration for synchronized salary and allowance management.
Ready to discuss TrackX?
Talk with Offensive X about product fit, implementation planning, integrations, and the right technology path for your organization.