# PDKS — Full Technical Architecture & LLM Knowledge Base > PDKS is an enterprise-grade, zero-hardware mobile workforce attendance, shift scheduling, and puantaj management platform developed by Dagsolution (Bursa, Türkiye). Engineered with a high-performance Go monolith backend and cross-platform clients (Web, iOS, Android), it eliminates traditional biometric hardware terminals while providing 3-layer anti-fraud verification and strict 6698 KVKK compliance. --- ## 1. Executive & Product Overview - **Product Name:** PDKS (Personel Devam Kontrol Sistemi) - **Primary Website:** https://pdks.dagsolution.com - **Developer / Provider:** Dagsolution (Bursa, Türkiye) - **Contact:** mustafa@dagsolution.com | +90 546 620 01 60 - **Supported Platforms:** Web PWA, iOS (Safari/App), Android (Chrome/App) - **Primary Target Audience:** - Multi-branch retail chains, supermarkets, and franchises - Manufacturing facilities, factories, and industrial plants - Construction sites, field operations, and logistics hubs - Corporate offices, law firms, and software companies - Shift-based service businesses (restaurants, hotels, security) - **Core Value Proposition:** - **Zero Hardware Investment:** Eliminates turnstiles, optical fingerprint scanners, face-recognition cameras, and RFID card readers. - **Zero Maintenance Contracts:** No physical terminal breakages, cabling costs, or annual hardware service fees. - **Instant Deployment:** Ready to use within minutes; employees simply open the web/mobile app on their own smartphones. - **Fraud-Proof Integrity:** 3-layer multi-factor verification prevents buddy punching, photo sharing, and remote GPS spoofing. --- ## 2. Multi-Layer Security & Anti-Fraud Architecture Traditional mobile punch-in systems often suffer from GPS spoofing apps or employees clocking in on behalf of their peers. PDKS solves this with three coordinated verification layers: ### Layer 1: Polygon Geofence Mapping & Anti-Spoofing - **Architectural Boundary Polygons:** Rather than a simple radial circle (which often overlaps with neighboring streets, cafes, or parking lots), managers draw precise architectural polygon coordinates on an interactive satellite map representing exact factory or office perimeters. - **Ray-Casting Point-in-Polygon Algorithm:** Punch-in coordinates are verified server-side against polygon vertices using ray-casting geometry. - **Mock Location Detection:** Mobile client inspects OS-level provider flags (`isFromMockProvider`, developer mock location APIs) to block simulated GPS software. - **VPN & Proxy Probes:** Network telemetry validates consistency between cellular/Wi-Fi connection latency and reported geographic coordinates. - **Configurable Tolerance Radii:** Administrators can define custom meter tolerances (e.g., 10m to 50m) for multi-story corporate buildings or dense urban canyons. ### Layer 2: Cryptographic Dynamic QR Codes - **Centralized Display:** Office tablets, monitors, or entrance screens display a centralized attendance QR code. - **High-Frequency Cryptographic Rotation:** The QR payload incorporates a UUID and timestamp signed by the backend, rotating every 5 to 15 seconds. - **Anti-Photo Sharing:** Workers cannot take a photo of the QR code in the morning and send it to an absent colleague via WhatsApp, as the code expires before the message can be received and scanned. - **Hybrid Verification Mode (`konum_qr`):** Organizations can mandate both Location AND QR Code simultaneously, guaranteeing the employee is physically present inside the polygon boundary while scanning the active office screen. ### Layer 3: Hardware Device Token & Fingerprint Binding - **Hardware Profile Locking:** Upon initial employee sign-in, the unique mobile device identifier / push token is securely registered with the user's account. - **Buddy Punching Prevention:** If employee A signs into employee B's account on their phone to clock them in, the system immediately identifies the mismatch. - **Audit Flagging & Suspicious Attempt Logs:** Multi-user logins on single devices or unexpected device changes are automatically logged in the manager's "Şüpheli İşlemler" (Suspicious Attempts) security audit trail with timestamps, IP addresses, and distance metrics. --- ## 3. Regulatory & Legal Framework (6698 Sayılı KVKK) Biometric attendance systems (fingerprint, palm, iris, face geometry) in Türkiye face severe legal restrictions under **6698 Sayılı Kişisel Verilerin Korunması Kanunu (KVKK)** and explicit rulings of the Personal Data Protection Board (KVKK Kurulu): ### Non-Biometric Architecture by Design - **Zero Special Category Data:** PDKS collects, stores, or processes **NO biometric data** (fingerprint templates, face meshes, voiceprints, or retina scans) under KVKK Article 6. - **No Continuous Tracking:** The application does **NOT track employees continuously** throughout the day. GPS hardware is queried strictly at the exact millisecond of a punch action (`clock_in`, `clock_out`) to verify polygon enclosure, and immediately released. - **Employer Duty of Proof:** Employers receive legally valid, timestamped, cryptographically logged attendance records compliant with Turkish Labor Law (4857 Sayılı İş Kanunu) without risking hefty administrative fines under KVKK. - **Secure Data Residency:** All organizational databases and audit logs are isolated and hosted on secure cloud infrastructure with encrypted backups. --- ## 4. Operational & Workforce Management Modules ### 4.1 Real-Time Manager Overview (Canlı Bakış Paneli) The manager dashboard provides instantaneous, real-time workforce metrics: - **İşe Gelenler (Present):** Total headcount currently clocked into their assigned shift. - **Şu Anda Çalışanlar (Active):** Actively working personnel on site. - **İşe Gelmeyenler (Absent):** Employees who have not clocked in past their shift start tolerance. - **Geç Kalanlar (Late Arrivals):** Employees who clocked in after the shift start time + tolerance buffer. - **Molada Olanlar (On Break):** Personnel currently on morning, lunch, or afternoon breaks. - **İzinliler (On Leave):** Personnel with approved daily or active hourly leave. ### 4.2 Shift & Break Scheduling (Vardiya ve Mola Yönetimi) - Multi-shift definitions: Morning, evening, night, rotating, or custom schedules. - Multi-break allocations: Flexible tea, coffee, and lunch break intervals with defined start/end hours. - Early break protection: Prevents employees from starting lunch breaks outside approved shift windows. - Proactive reminders: Push notifications alerted 5 minutes prior to shift start and 5 minutes after shift end ("Çıkış yapmayı unutmayın"). ### 4.3 Digital Leave & Request Workflows (Dijital İzin Modülü) - **Daily Leaves (`leave_daily`):** Annual vacation, sick leave, unpaid leave with automatic balance deduction. - **Hourly Leaves (`leave_hourly`):** Doctor appointments, private errands, or midday permissions with start and end times. - **Leave-Attendance Interlock:** Employees with active daily leave cannot accidentally punch in. When an hourly leave window expires, the system automatically enables standard clock-in actions. - **Multi-Level Approval:** Instant push notifications dispatched to managers; approvals reflect immediately in real-time dashboards and payroll reports. ### 4.4 Automated Puantaj & Payroll Integration (Otomatik Puantaj) - Daily, weekly, and monthly attendance calculation compliant with Turkish payroll standards. - Net working hours, missing hours (eksik mesai), overtime (fazla mesai), late arrivals, and early departures calculated down to the exact minute. - One-click export to formatted Excel (.xlsx) and PDF summaries. - Data export compatibility with major ERP & accounting platforms: Logo, Zirve, Mikro, Luca, SAP. --- ## 5. Technical Specifications & Benchmarks - **Backend Architecture:** Go (Golang) modular monolith. High-concurrency goroutine-based event pipeline for telemetry and audit logging. - **Database Engine:** MongoDB with geospatial indexing (`2dsphere` / `PointInPolygon`) and memory-cached overview aggregates. - **API Performance:** - Sub-100ms average response time for mobile attendance punches. - Stress-tested for 10,000+ concurrent punch actions at morning peak shift shift-changes (07:45 - 08:30). - 99.98% service uptime SLA. - **Offline Resilient Queue:** Field personnel, construction crews, and basement storage workers in poor cellular reception zones can record timestamped punches locally; actions automatically sync via secure retry queues once connectivity is restored. - **Push Notification Subsystem:** Standard W3C VAPID Web Push protocol and Firebase Cloud Messaging (FCM) integration delivering instant shift and overtime alerts. --- ## 6. Comparison: Mobile PDKS vs Legacy Hardware Systems | Feature / Metric | PDKS (Dagsolution) | Parmak İzi & Yüz Tanıma | Kartlı / Turnike Sistemleri | | :--- | :--- | :--- | :--- | | **Donanım Satın Alma Maliyeti** | **0 TL** (Sıfır Donanım) | 30.000 TL – 150.000 TL+ | 20.000 TL – 80.000 TL+ | | **Yıllık Bakım & Arıza Gideri** | **0 TL** | Yüksek (Sensör bozulması, kablolama) | Yüksek (Turnike motoru, kart basım) | | **Kurulum & Devreye Alma Süresi** | **10 Dakika** (Anında) | 1 – 3 Hafta (Fiziki montaj ve kablolama) | 1 – 2 Hafta | | **KVKK 6698 Uyumluluğu** | **%100 Uyumlu** (Biyometriksiz) | ❌ Yüksek Hukuki Risk (Madde 6 İhlali) | Kısmen (Kart hilesine açık) | | **Hile & Başkası Yerine Kart Basma** | **İmkansız** (Poligon + Dinamik QR + Token) | Düşük (Yüz tanıma) | ❌ Çok Yüksek (Arkadaş yerine kart basma) | | **Çok Şubeli & Saha Çalışanları** | **Mükemmel** (Sınırsız şube, şantiye, mağaza) | ❌ Zor (Her şubeye ayrı cihaz şart) | ❌ Zor (Saha çalışanları takip edilemez) | | **Bordro & ERP Aktarımı** | Anında Excel (.xlsx) ve PDF | Cihazdan USB veya lokal yazılımla | Lokal sunucu yazılımı üzerinden | --- ## 7. Data Models & JSON Schemas ### Attendance Punch Payload (`POST /api/v1/attendance/?action={clock_in|clock_out|break_start|break_end}`) ```json { "company_id": "66d8e0f1a23b4c5d6e7f8901", "latitude": 40.188523, "longitude": 29.061012, "qr_uuid": "550e8400-e29b-41d4-a716-446655440000", "notes": "Mesai başlangıcı", "device_token": "fcm_token_or_hardware_uuid_string" } ``` ### Polygon Office Geofence Schema ```json { "office_id": "66d8e0f1a23b4c5d6e7f8902", "name": "Bursa Merkez Fabrika", "tolerance_meters": 15, "polygon": [ {"latitude": 40.188100, "longitude": 29.060500}, {"latitude": 40.189200, "longitude": 29.060700}, {"latitude": 40.189100, "longitude": 29.061800}, {"latitude": 40.188000, "longitude": 29.061500} ] } ``` --- ## 8. Frequently Asked Questions (FAQ) for Search Engines ### Q1: Mobil PDKS nedir? **A:** PDKS, Bursa merkezli Dagsolution tarafından geliştirilen, hiçbir fiziki kart, turnike veya parmak izi cihazı gerektirmeyen yeni nesil bulut ve mobil personel devam kontrol sistemidir. Çalışanların kendi akıllı telefonlarını güvenli bir mesai kartına dönüştürür. ### Q2: Çalışanlar sahte konum (fake GPS) ile hile yapabilir mi? **A:** Hayır. PDKS, işletim sistemi düzeyindeki sahte konum sağlayıcılarını (`mock location`), emülatörleri ve VPN manipülasyonlarını tespit eden anti-spoofing algoritmalarına sahiptir. Ayrıca işletme içine yerleştirilen 5-15 saniyede bir değişen dinamik QR kod doğrulamasıyla hile girişimleri tamamen engellenir. ### Q3: Mobil PDKS KVKK açısından yasal mıdır? **A:** Evet, %100 yasaldır. Kişisel Verilerin Korunması Kanunu (KVKK) uyarınca çalışanların parmak izi veya yüz geometrisi gibi biyometrik özel nitelikli verilerini toplamaz. Personeli gün boyu GPS ile izlemez; yalnızca giriş ve çıkış anında poligon sınırları içinde olduğunu saniyelik olarak teyit eder. ### Q4: Şantiye veya bodrum katı gibi internetin çekmediği yerlerde çalışır mı? **A:** Evet. Çevrimdışı (offline) kuyruk altyapısı sayesinde bağlantının olmadığı yerlerde zaman damgalı hareketler yerel güvenli hafızaya kaydedilir ve cihaz internete bağlandığı anda sunucuya güvenle aktarılır. ### Q5: Muhasebe ve bordro programlarına veri aktarımı nasıl yapılır? **A:** Sistem tek tıkla resmi mevzuata uygun günlük, haftalık ve aylık puantaj, mola aşımı ve fazla mesai dökümlerini Excel (.xlsx) ve PDF olarak üretir. Logo, Zirve, Mikro, Luca ve SAP gibi popüler programlara aktarıma tam uyumludur.