The offline time tracker
for restricted environments

For teams that need local time tracking where SaaS is blocked, restricted, or simply not allowed. Zero outbound calls are required to function. Your organisation remains responsible for endpoint security, employee-monitoring rules, sync-provider choices, and procurement review.

14-day free trial. No account or credit card. Windows 10/11 (64-bit); macOS 13+ on Apple Silicon (alpha).

Zero outbound calls required Local cryptographic licence Portable .exe, no installer needed

Network footprint: time tracking and licence validation work without a server.

Windows checks https://workforcetimetracker.com/version.json for updates, normally no more than once every four hours; manual checks can run sooner. Mac has a manual check in About. Update downloads make further network requests. Settings has no update-check off switch, so enforce an air-gap policy at the operating system or network boundary. Licence signatures are validated locally.

What "fully offline" means in practice

No network

Time tracking

Start and stop timers, log idle time, switch between customers, edit entries, week calendar - all local. Zero network required.

No network

Licence validation

The licence is a small JSON payload signed with RSA-PSS. The app verifies the signature against a public key built into the binary. No server contact, no activation flow.

No network

Exports + invoicing

Excel, CSV and PDF invoice generation are all local. Paste your logo in Settings; the PDF generator runs in-process.

No network

Multi-device sync

Use an internal SMB / NFS share, a NAS, or peer-to-peer SyncThing. For strict EU-only handling, prefer these internally controlled options. The app writes plain, unencrypted JSON files into the folder; your existing replication does the rest.

No network

Auto-detection

The Salesforce / Dynamics / Standalone editions can read the active window title locally when auto-tracking is enabled. They never call a CRM API, but employers should assess notice, consent, works-council, DPIA, and sensitive-title risks before enabling it.

Optional

Version check

Windows normally checks workforcetimetracker.com/version.json no more than once every four hours; manual checks can run sooner. Use operating-system or network policy if your environment forbids egress. Offline tracking remains available with an active trial or licence.

Why this works in environments that block SaaS

No vendor account exists

You never sign up to the Workforce application. There is no "Workforce Time Tracker user" database containing your time entries. We do not receive that data, but your endpoints and chosen sync providers remain part of your organisation's security boundary.

No vendor time-entry database

We do not receive your time-entry data, but that does not remove your organisation's own review. You still need to assess plain local storage, employee monitoring, endpoint controls, payment data, and any sync provider you choose.

Source-of-truth files you can audit

Your time entries, customers, settings and licence live in human-readable JSON in a folder you control. Diff them, grep them, back them up to your NAS, archive them in 30 years. You own the format.

Portable .exe (Windows)

The Windows ZIP contains a self-contained application. Extract and run without installing the .NET runtime. Trial integrity and optional auto-start use local operating-system storage. Review endpoint policy with your IT team for managed or virtual desktops.

Ad-hoc-signed .app (macOS)

Signed but not yet notarised - one-time Gatekeeper click on first launch, then runs normally. Apple Silicon native. Standard macOS quarantine flag, removed after first approval.

One licence, all your devices

Per-user named licence works on any number of your own machines. No per-machine activation lock. Move between desktop, laptop, VM, Citrix - same licence file copied along.

Common questions about offline / air-gap operation

Will the app work on a machine with no internet at all?

Yes. Tracking, exports, PDF invoices, and licence validation work offline. Windows checks workforcetimetracker.com/version.json for updates, normally no more than once every four hours; manual checks can run sooner. Mac has a manual check in About. Settings has no update-check off switch; use your organisation's network policy for air-gapped deployments.

How is the licence validated if there is no internet?

Locally. The licence is a small JSON file with an RSA-PSS digital signature. The app verifies the signature against a public key embedded in the binary. No server contact ever. There is no per-machine activation lock - copy the licence file to as many of your own machines as you want.

Can it be installed on a locked-down corporate VM with no admin rights?

Yes. The Windows build is a portable single-file .exe that can be unzipped to any folder you can write to (Desktop, OneDrive, USB stick) and run without administrator privileges or installer. The macOS build is an .app bundle that runs from anywhere your user account can write to.

How do I get updates if the machine is air-gapped?

Manually. Download the new version zip on a connected machine, transfer it via the channel your organisation already uses (USB stick, secure file share, controlled removable media), and replace the .exe. The licence file and data folder remain untouched between versions.

Is multi-device sync possible without a cloud account?

Yes. Point the app at a folder on your internal SMB / NFS share, NAS, or even a SyncThing peer-to-peer cluster. The app writes JSON data files into that folder; the share replicates between your devices. No external cloud sync provider is required.

Does it phone home with telemetry?

The desktop app has no usage-analytics or telemetry SDK. Update checks contact workforcetimetracker.com/version.json, and downloading updates makes further network requests. Choosing a folder managed by a sync provider lets that provider synchronize your data files.

What happens to my data if my subscription lapses mid-contract?

You get a 14-day grace period after the expiry date during which the app keeps working normally. After that, the app shows renewal reminders but does not lock, encrypt or hide your data. Your time entries, customer list, exports, settings and backups remain in plain JSON files you can read with any text editor, archive, or migrate to any other tool. This is written into the EULA at section 8.5 - it is a contractual commitment, not a marketing line.

Try it for 14 days, no account, no credit card

Same product on Windows and macOS. One licence covers both.

Download the trial