HR compliance in Spain: what each law requires and how to comply

With QuantummycosAll plans

Each person clocks in, takes breaks and clocks out on the web or in the app, and the time is set by the server, never by the device. A clock-in cannot be deleted: it is corrected with a reason, and its history keeps the before and after, who changed it, when and why.

With QuantummycosAll plans

Clock-ins and the history of their corrections have no deletion date: they are kept while the account exists, and archiving someone who leaves keeps their history in view. If the company closes its account, they are kept blocked for four years, as the data processing agreement sets out.

With QuantummycosAll plans

Each person can see all their clock-ins and breaks at any time on the web, and the latest ones in the app, with a mark on those the company corrected and, on the web, the history of each correction.

With QuantummycosAll plans

Each working day is recorded on its date, and the clock-in timeline adds up what each person worked in the month, excluding breaks. As clock-ins have no deletion date, the total for any past month can be checked again.

With QuantummycosAll plans

The hours actually worked each day are recorded. The clock-in timeline flags days that go beyond the contracted hours as overtime and adds up what each person worked in the month.

With QuantummycosAll plans

With notifications on, the app reminds anyone whose time has passed to clock in or out. The clock-in timeline flags shifts left open, and anyone who forgot to clock in asks for a correction from the web or the app, giving a reason.

Still yours

Getting everyone to clock in every day and reviewing open shifts: Quantummycos records what is clocked, but it cannot make anyone clock in.

With QuantummycosProfessional and Enterprise plans

With Analytics and reporting, the record comes out as a PDF per person and month, with the DNI or NIE, breaks, overtime, how each day was recorded and an annex listing every correction, or in Excel to work with the data.

Still yours

Downloading it and handing it over when asked: the representatives and the inspectorate have no access of their own to Quantummycos.

With QuantummycosProfessional and Enterprise plans

The working-time record report gives, per person and month, the hours actually worked each day and the monthly total, in a PDF with a “Received” box for the person’s signature.

Still yours

Downloading it and handing it over with each payslip, and noting the supplementary hours, which Quantummycos does not separate from ordinary ones.

With QuantummycosProfessional and Enterprise plans

The working-time record PDF is per person and month, with each day’s overtime and the monthly total, ready to hand over with the payslip.

Still yours

Handing it over with each payslip, checking which hours count as overtime under the agreed working time, and paying them or giving time off in lieu as the collective agreement or contract says (without an agreement, time off within the next four months). Also watching the cap of 80 a year and making sure overtime is voluntary unless agreed otherwise: Quantummycos does not keep the yearly count or track time off in lieu.

With QuantummycosEnterprise plan

The Whistleblowing channel is that internal channel. A report is submitted on the web or in the app, comes in with a case number and is handled on the web from receipt to response: stages, deadlines, conversation with the whistleblower and closure.

With QuantummycosEnterprise plan

Staff use it with their own account. Anyone else uses the public entry, a page that opens without an account through a link or QR code the company creates in the channel itself: there they submit their report, anonymously or with their name, and follow it with a code.

With QuantummycosEnterprise plan

Reports are anonymous by default, on the web, in the app and through the public entry. An anonymous report stores no name, user account, IP address, device data or time, only the date. It is followed and answered with a tracking code shown only once: Quantummycos keeps only a one-way fingerprint of it, so the code cannot be recovered.

With QuantummycosEnterprise plan

The channel screen, on the web and in the app, and the public entry remind people that they can go to the external channel of the Independent Whistleblower Protection Authority, with a direct link.

With QuantummycosEnterprise plan

The channel accepts them in writing from the web, the app and the public entry, which is one of the forms the Law allows. It does not take calls or voice messages.

With QuantummycosEnterprise plan

Each report has a conversation with the person who submitted it, even if anonymous, who joins it with their code. Whoever manages the channel writes as “Channel team”, without their name, and their internal notes never reach the whistleblower.

With QuantummycosEnterprise plan

Only those who manage the channel see the reports: a department manager cannot see their team’s, not even named ones. The AI assistant does not read the channel, nothing submitted or written in it goes into the activity log, and the Quantummycos team cannot open it, not even when giving support.

With QuantummycosEnterprise plan

Reports received is that register: every report, with its case number, category, stage and dates of receipt, acknowledgement and closure, and in each one the investigation, with its internal notes, how it was closed and the response. Only those who manage the channel can see it.

With QuantummycosEnterprise plan

Each report shows the days left for the acknowledgement and for the response, and the deadline is extended with one button, once and while the report is open. The list has counters for reports awaiting acknowledgement and for overdue ones, an overdue filter and a badge in the menu with those awaiting acknowledgement.

Still yours

Acknowledging, investigating and responding on time. Quantummycos sends no email or phone notification about a new report: someone has to check the channel screen.

With QuantummycosEnterprise plan

The channel is managed by roles that see the whole company and have permission on it, and by default the Administrator role has it. In User Privileges you can create a role for the System Manager and remove the channel from the others.

Still yours

Giving the channel only to those who must manage it: the System Manager, whoever runs it directly and, where appropriate, HR (if disciplinary action may follow), legal services and the data protection officer. Any role that sees the whole company and has the channel sees every report and the identity of those who gave their name.

With QuantummycosEnterprise plan

The public entry provides a link and a QR code you can download to print or put on a poster, and its page explains in plain words anonymity, confidentiality, the ban on retaliation and the Authority’s external channel.

Still yours

Publishing that information, with the essential principles of your management procedure, where those who can use the channel will see it and, if you have a website, on its home page, in a separate, easily identifiable section.

With QuantummycosEnterprise plan

The channel screens tell whistleblowers that their identity is confidential and that only those who manage the channel see it, not their manager or colleagues.

Still yours

Drafting the channel’s data protection notice (who processes the data, why, for how long and how to exercise rights) and giving it to whistleblowers, the people concerned and staff, telling whistleblowers expressly that their identity will not be disclosed to the people the facts concern or to third parties. Quantummycos does not include your company’s notice.

With QuantummycosProfessional and Enterprise plans

Quantummycos produces it from the sex and pay on each employee profile, with the pay filled in by AI from the payslip: mean and median pay for women and men across the workforce, the quartiles and, by job, the average base salary and complements and the gap in mean and median terms. It comes as a PDF and in Excel, with nobody named.

With QuantummycosProfessional and Enterprise plans

AI reads the payslip you upload or pick from their files and fills in the year’s base salary, complements and pay in kind on the profile. Payslips are filed in each person’s folder, at hand for the breakdown.

Still yours

Enter variable pay on each profile, as AI does not fill it in, and complete what the register does not give: the median of each component by job, each complement on its own, non-salary payments such as subsistence allowances, and the figures for jobs with fewer than three women or three men, which it does not print so that nobody’s pay is revealed. And check that the figures are what was paid over the calendar year, including to people who have since left: the register uses today’s workforce and the current pay on each profile.

With QuantummycosProfessional and Enterprise plans

The register gives the gap for the whole workforce (the hourly mean and median and the annual mean). With 50 or more people, it flags the gap when the hourly mean reaches 25% and warns which jobs must be justified.

Still yours

Check the gap on total pay, in mean and median terms, which is how the law measures it, and write into the register the justification that it is due to reasons unrelated to sex.

With QuantummycosProfessional and Enterprise plans

The register comes as a PDF, with nobody named and the gap by job as a percentage.

Still yours

Hand it over when asked, and in full to the legal representatives: including the figures for jobs with fewer than three women or three men, which the PDF leaves out. Without legal representatives, whoever asks receives only the percentage differences, by pay component and by job, not the amounts the PDF also shows.

With QuantummycosProfessional and Enterprise plans

The pay register comes as a PDF and in Excel, ready for the committee: the gap by sex and job, the quartiles and the share of women and men receiving complements.

Still yours

Gather the data for the other areas (recruitment and hiring, job classification, training, promotion, working conditions, work-life balance, under-representation of women and harassment) and hand it all to the committee.

With QuantummycosProfessional and Enterprise plans

The plan is uploaded to the company’s File repository, which all staff can open, and announced in Company news. On Enterprise you can also ask each person to read and confirm it, and the date is recorded.

Still yours

Give that information to the workers’ legal representatives and keep it up to date with the monitoring results.

With QuantummycosAll plans

The data processing agreement is part of the Terms and conditions: it is accepted when the company signs up, with the same tick box, and the date is stored. Customers who contract another way accept it when placing their order. It covers what art. 28(3) requires, including that Quantummycos processes the data only to provide the service and on the company’s instructions.

With QuantummycosAll plans

Connections are encrypted, and passwords are stored with a key derivation function, never in plain text; a new one needs at least ten characters, with letters and numbers. Sessions expire on their own, and resetting a password closes every open session. Files go to private storage, and each download uses a link that expires after five minutes.

With QuantummycosAll plans

Each role has a scope (the whole company, its departments or only the person’s own data) and permissions for each module, and Quantummycos enforces them on every screen, in files and in the AI assistant’s answers. Pay is visible only to the person concerned and to company-wide roles.

With QuantummycosProfessional and Enterprise plans

With the File repository, each person’s signed notice can be kept in their files. On Enterprise, Document compliance also comes with the “Data protection and confidentiality policy” to read and confirm: it is requested from all staff, including new joiners, and records who has confirmed it and when.

Still yours

Writing the notice, with the purposes, legal basis, retention periods and recipients, and giving it to each person when their data is collected. The catalogue policy comes with a name and description only; the company provides the text.

With QuantummycosAll plans

In Quantummycos, location is read only at the moment of clocking in, never in the background; clocking in uses no fingerprint, face or camera; and the activity log records who changed what and when, but not what they wrote.

Still yours

Deciding which staff data is really needed and entering nothing more. Clock-in location is on by default on Professional and Enterprise, so if it is not needed it should be switched off in Settings. And adjusting each role’s permissions.

With QuantummycosAll plans

The three default roles come with every plan, and Enterprise adds custom roles. Two-step verification, with a code sent by email, is switched on in Settings, and on Professional the activity log records who made each change and when.

Still yours

Giving each person the role they need, reviewing who has company-wide scope and switching on two-step verification, which is off by default. And looking after the credentials and devices used to sign in.

With QuantummycosAll plans

The data processing agreement requires Quantummycos to tell the company without undue delay about any breach of its data that it becomes aware of, with the information the company needs to meet its own obligations.

Still yours

Assessing the risk, notifying the AEPD within 72 hours where required and documenting every breach, whether or not it is notified.

With QuantummycosAll plans

Sick leave, a workplace accident or a medical appointment is recorded by its type, without asking for a diagnosis. Phone notifications only show the dates, never the type of absence, because they can be seen on the lock screen.

Still yours

Not asking for or attaching medical reports or anything that reveals a diagnosis, including in a request’s notes, and using roles to limit who sees absences: the type of each one is visible to anyone who can see that person’s absences.

With QuantummycosAll plans

Each person can see their data in My Profile and correct their personal details (name, surnames, date of birth, phone, DNI or NIE and social security number), and check their clock-ins and absences on the web and in the app. On Professional, a person’s working-time record can also be exported as a PDF or Excel file from Analytics and reporting.

Still yours

Answering each request within one month (art. 12(3)), extendable by two more if it is complex. The app has no download of a person’s own data and no permanent erasure: erasure is requested from Quantummycos in writing, and Quantummycos helps the company respond.

With QuantummycosProfessional and Enterprise plans

Clock-in geolocation stores a single point, at the moment of clocking in, with its accuracy: never when clocking out, during breaks or in the background. The company switches it off or makes it mandatory in Settings, and the notice can be kept signed in each person’s files or, on Enterprise, sent out to be read and confirmed.

Still yours

Writing the notice (what is collected, why, how long it is kept and how to exercise the rights of access, rectification, restriction and erasure) and giving it to staff and, if there are any, their representatives before anyone clocks in with location. Location is on by default on Professional and Enterprise, and the phone or browser permission prompt does not replace this information.

With QuantummycosEnterprise plan

The Whistleblowing channel has a “Workplace harassment” type: anyone on the staff can report it, anonymously by default, and whoever manages the channel can talk to them and keep internal notes. The Document compliance catalogue also includes an “Equality and harassment policy” type so that each employee reads and confirms your company’s protocol.

Still yours

Assess psychosocial risks as part of the risk assessment and write the protocol that sets out how a harassment case is investigated and acted on: the channel is the way to report it, not the procedure.

With QuantummycosEnterprise plan

The Document compliance catalogue includes the “Health and safety plan” to read and confirm: each employee reads and confirms it, the date is recorded and it is requested again after 12 months. You can create types by department with the risks of each job.

Still yours

Write up the information on the risks of each job and upload it: the type that comes as standard is the same document for the whole staff. Where there are representatives, general information goes through them, but the risks of each job are explained to each employee directly.

With QuantummycosProfessional and Enterprise plans

With Staff surveys you can ask the whole staff about a measure or a proposal, in a named or an anonymous survey, and see the answers and how many people took part.

Still yours

Consult in good time before deciding and take the proposals into account. Where there are representatives, consultation is with them: the prevention delegates and, in companies or workplaces with 50 or more employees, the health and safety committee.

With QuantummycosEnterprise plan

The “New starter” process in Onboarding and offboarding includes the task “Health and safety induction for the role”, recording who marked it done and when. And you can create a document type with an expiry date to request the training certificate.

Still yours

Deliver the training, both theory and practice, during working hours or deducting that time from them, at no cost to the employee, and repeat it when needed.

With QuantummycosEnterprise plan

The “Occupational health check” type in the catalogue asks for the fitness certificate and expires 12 months after approval, so you can see whose next check-up is due.

Still yours

Offer it and set how often it happens according to the risks of the job. It is voluntary except in specific cases and the type comes marked as mandatory: mark it optional if it is not compulsory for everyone in your company. Upload only the fitness certificate, never the medical report, and check who can see it: department managers see their team’s documents.

With QuantummycosProfessional and Enterprise plans

In the File repository you keep the plan, the assessment and the planning, with a record of who uploaded each file and when. Absences of the “Work accident” type are kept with their dates, and the Leave and absence report can be narrowed down to that type.

Still yours

Draw up those documents, keep the list of work accidents and occupational diseases that caused more than one day off work, and report harm to health to the labour authority through the official channel: the app does not send anything. Health check records do not belong in the company area of the File repository, which the whole staff can see.

With QuantummycosEnterprise plan

The Whistleblowing channel has its own category, “Sexual or gender-based harassment”. The complaint is submitted on the web or in the app, anonymously if preferred, followed with the code or under “Your reports”, with a conversation with whoever manages it, and only those who manage the channel can see it.

With QuantummycosEnterprise plan

The catalogue that Document compliance starts with includes the “Equality and harassment policy” as a read-and-confirm requirement every 24 months. It is requested from all staff, including new joiners, and its record shows who has confirmed it, when, and who has not.

Still yours

Adding the protocol’s text, as a PDF or written into the requirement itself, before staff start confirming it, because the catalogue includes the requirement without the text, and training all staff: reading and confirming the protocol is no substitute for training.

With QuantummycosEnterprise plan

Harassment or discrimination is reported in the Whistleblowing channel, anonymously if preferred, and people outside the staff, such as a job applicant or a supplier, can use the public entry. Only those who manage the channel can see the complaints, and each one is recorded with its stages and the conversation with the person who made it.

Still yours

Agreeing in the protocol who on the committee receives complaints, the deadline for resolving them, interim measures, the report and the resolution. The channel has no category of its own for anti-LGTBI harassment: it is reported under “Workplace harassment” or “Discrimination”.

With QuantummycosEnterprise plan

In Document compliance, the measures and the protocol are uploaded as a “Read and confirm” requirement and requested from all staff: each person reads and confirms them, the date is recorded, and new joiners receive them too.

Still yours

Including modules on the workplace rights of LGTBI people in the training plan, for all staff, including middle managers, senior managers and those who run HR: reading and confirming is no substitute for training.

With QuantummycosAll plans

The clock-in timeline flags every rest of less than twelve hours between two working days, showing the hours there were and the text of the article.

Still yours

Organising schedules and shifts to respect it and correcting whatever is flagged: the warning does not stop anyone clocking in and the rota does not check it when planning.

With QuantummycosAll plans

The record gives the hours actually worked each day, excluding breaks, and the clock-in timeline flags anything beyond each person’s contracted hours as overtime.

Still yours

Watching the nine-hour ordinary maximum, or the one set by your collective agreement, and the eight-hour limit for under-18s: Quantummycos does not check them.

With QuantummycosAll plans

Breaks are clocked, and the clock-in timeline flags days of more than six hours without 15 minutes’ rest, showing the minutes there were and the text of the article.

Still yours

Organising the break, applying what the collective agreement or contract says about whether it counts as working time, and watching the 30-minute break for under-18s, due when their continuous working day exceeds four and a half hours, which Quantummycos does not check.

With QuantummycosProfessional and Enterprise plans

The rota adds up each person’s planned hours by week, month and year, and each person sees their shifts in the app. The working-time record gives the hours actually worked.

Still yours

Working out the annual average, agreeing any irregular distribution (without an agreement, at most 10% of annual working time, with the differences made up within twelve months) and telling each person the resulting day and time at least five days in advance: Quantummycos does not calculate the average or check the notice period.

With QuantummycosProfessional and Enterprise plans

The rota shows, person by person, which days they work each week, at what times, and which days they have off.

Still yours

Planning the weekly rest, which can be accumulated over periods of up to fourteen days, and checking it is respected, with the exceptions Royal Decree 1561/1995 allows in your sector: neither the rota nor the record checks it.

With QuantummycosAll plans

Each person has their annual leave days for each year, either the company’s figure or their own, and requests leave on the web or in the app. Only approved leave uses up that allowance. In the year someone joins, the pro rata share is suggested, and a company administrator can charge a period of leave to a different year, for example when sick leave prevented it from being taken in time.

Still yours

Setting each person’s days (thirty calendar days at least, or whatever your collective agreement says), agreeing the dates, giving two months’ notice of them and letting people take later any leave that overlaps with sick leave or with the suspension for birth: Quantummycos does not check the minimum, the notice or those deadlines.

With QuantummycosAll plans

Marriage or civil partnership, serious illness or hospitalisation of a relative, bereavement, moving house, public duty and union or works council duties each have their own absence type, which does not use up annual leave. They are requested with their dates on the web or in the app and approved or rejected, with a record of who decided and when, and the proof is attached on the web.

Still yours

Checking that the days match the law or your collective agreement (fifteen calendar days for marriage, five for serious illness or hospitalisation of a relative, two for a bereavement plus two more if travel is needed, one for moving house) and asking for the proof: Quantummycos does not control how long each type of leave lasts, and absences are full or half days, not hours.

With QuantummycosAll plans

It has its own absence type, “Family emergency”, which is requested on the web or in the app, approved with a record of who did it and when, and does not use up annual leave.

Still yours

Keeping count of the paid hours under your collective agreement or the agreement with the workers’ legal representatives: Quantummycos does not cap the four days and records full or half days, not hours.

With QuantummycosAll plans

They have their own absence types, “Birth and childcare”, “Parental leave” and “Breastfeeding”, which are requested and approved with a record of who did it and when, and do not use up annual leave.

Still yours

Working out each person’s weeks and deadlines, receiving their notice (fifteen days for the flexible weeks of birth leave and for breastfeeding leave, ten for parental leave) and applying breastfeeding leave the way the person chooses: an hour off a day, half an hour less each day or accumulated into full days. Quantummycos records full or half days and does not control durations or notice.

With QuantummycosAll plans

Training is requested and approved as an absence of the type “Exams or training”, which stays in the person’s history and does not use up annual leave.

Still yours

Keeping count of the twenty hours and how they build up, and agreeing with the person how they are taken if your collective agreement does not say: absences are full or half days and there is no training-hours counter. The right is met if the person can do that training within a training plan run by the company or agreed in a collective agreement.

With QuantummycosEnterprise plan

The Work calendar fills itself in with the national holidays for this year and next, and in it you mark regional holidays, local ones for the people you choose and company closures, with the whole year in view and, beside it, the list of days and who each one applies to.

Still yours

Consulting the workers’ legal representatives first, if there are any, checking which national holidays your autonomous community replaces or moves, completing the calendar with working hours and how working time is spread over the year, and displaying it at each workplace: Quantummycos does not publish it for you.

With QuantummycosEnterprise plan

Each person gets their own holidays: the national ones for their country, the regional ones for their autonomous community and the local ones they are picked for. That day does not use up any absence days, is marked on the absence timeline and calendar and, if they clock in, they get a warning; they do not get the clock-in reminder either.

Still yours

Giving each workplace’s public holidays as paid days off, without asking for them to be made up, and paying or compensating work on a holiday as your collective agreement says: the warning does not stop anyone clocking in and Quantummycos does not calculate that compensation.

With QuantummycosProfessional and Enterprise plans

To calculate the payslip, Analytics and reporting gives each person’s hours worked and overtime by month and their absences in the period by type, in Excel or PDF.

Still yours

Calculating and issuing the payslip with your accountant or payroll software, with every item in the model: Quantummycos does not calculate it.

With QuantummycosProfessional and Enterprise plans

Payslips go into each person’s “Payslips” folder, which only they and the company’s administrators can see, with a record of who uploaded each one and when. They open them on the web and in the app, all in one place, and download them from the web. With “Upload latest payslip”, AI reads it and the copy is filed in that folder automatically, with the month in its name.

Still yours

Uploading each month’s payslip to their “Payslips” folder and keeping the receipt for each transfer, which stands in for the signature (if you pay in cash or by cheque, the person signs the payslip). Quantummycos does not record whether the person opened the payslip, and an archived person can no longer sign in: upload their last payslip before archiving them or get it to them another way.

With QuantummycosProfessional and Enterprise plans

Payslips in each person’s folder have no deletion date, and archiving someone who leaves keeps them along with the rest of their history.

Still yours

Not deleting them or the person who leaves (archive them instead), also keeping the payment receipts and contribution documents and, if you leave Quantummycos, downloading them first: under the data processing agreement, the data is kept blocked for four years, not five.

With QuantummycosProfessional and Enterprise plans

Each person opens their file folder on the web and in the app whenever they like, and downloads any document from the web to store or print it.

With QuantummycosAll plans

Each person’s profile holds several of those details: contract type, start date, job title, working hours and schedule, their annual leave days for each year and, visible only to the company’s administrators, their annual base salary and, separately, the total of their complements.

Still yours

Drafting the information with every item in article 3, each salary complement listed separately, or checking that they are already in the written contract the person holds: Quantummycos does not generate that document.

With QuantummycosProfessional and Enterprise plans

The document goes in the person’s file folder, which records who uploaded it and when, and they open it on the web and in the app.

Still yours

Uploading it before the first day and, with each change, by the day it takes effect at the latest. The person sees it as soon as they accept their invitation, so it is worth inviting them before they start. For anyone already working for you on 5 October 2026 who asks for it, providing it within thirty working days if they do not already have it.

With QuantummycosEnterprise plan

With Document compliance, whatever is the same for all staff, such as the collective agreement, the equality plan or the harassment protocol, can be set up as a “Read and confirm” requirement, which records the date each person confirmed reading it; and the signed contract as a document that is handed in and approved, with its date.

Still yours

Choosing how you prove delivery of what is specific to each person, such as their pay or their schedule: a file in their folder records who uploaded it and when, but not whether they opened it, and “Read and confirm” shows the same document to the whole group.

With QuantummycosEnterprise plan

The standard “Leaver” process includes working out the final settlement and untaken leave and signing it off, and the “End of fixed-term contract” process includes giving notice and the signing, with who marked each step as done and when. The person’s profile shows how many days of annual leave they have left this year.

Still yours

Calculating the amount, handing over the proposal with the notice and, at signing, stating on the receipt whether a representative was present or the person did not ask for one: Quantummycos does not generate the document.

With QuantummycosAll plans

Remote staff clock in, take breaks and clock out from the web or the app, just as in the office. The time is set by the server, not the device, and every correction stays in the history with its reason, who made it, when and what was there before.

With QuantummycosEnterprise plan

The Document compliance catalogue includes a “Remote working agreement” type for uploading the signed agreement: it waits for approval and records who approved it and when. The “Remote starter” process in Onboarding and offboarding includes the task “Sign the contract and the remote working agreement”, recording who marked it done and when.

Still yours

Draft the agreement and sign it before remote work begins. Within the following ten days, give a copy to the workers’ legal representatives, without any data affecting privacy, and then send it to the public employment office. If there are no representatives, a basic copy still goes to the employment office.

With QuantummycosEnterprise plan

The “Remote starter” process in Onboarding and offboarding includes the tasks “Ship the equipment to their home” and “Confirm the equipment arrived”, recording who marked them done and when.

Still yours

Provide the equipment listed in the agreement’s inventory, accessible if the employee has a disability, maintain it and deal with technical problems.

With QuantummycosEnterprise plan

The “Remote starter” process in Onboarding and offboarding includes the task “Risk assessment of the home workstation”, recording who marked it done and when.

Still yours

Carry out the assessment, limited to the area where the person works and not the whole home, and plan the measures. Visiting the home requires the employee’s permission and a written report justifying the visit; without permission, the assessment is based on the information they provide.

With QuantummycosProfessional and Enterprise plans

Location is only stored at the moment of clocking in, never during the day or in the background. It is switched on by default on the Professional and Enterprise plans, and the company can switch it off or make it mandatory in Settings.

Still yours

Decide whether storing the position of someone clocking in from home is proportionate, and tell them, and their representatives if there are any, expressly beforehand (art. 90 LOPDGDD). And do not require them to install the app on their own phone: they can clock in from the web on the company’s equipment.

With QuantummycosProfessional and Enterprise plans

The Leave and absence report gives, for the period you choose (a quarter, for example), each absence with its type, dates and days, plus a summary per person with their sick days. It can be narrowed down to one type, such as “Work accident”, and downloaded as PDF or Excel.

Still yours

Prepare each quarter’s information and hand it to the representatives, with the causes of absenteeism, the absence rate, accident rates and the prevention measures in use: the app does not calculate those rates or send anything.

With QuantummycosProfessional and Enterprise plans

The Pay report gives, for each job title, how many women and men there are, their average basic pay and complements, and the mean and median gap. It can be downloaded as PDF or Excel.

Still yours

Hand it to the representatives at least once a year, with the equality measures you have taken and, if you have an equality plan, how it is being applied. The report groups people by the job title on their profile: if your professional levels are different, you prepare the proportion by level yourself. And it withholds the figures for jobs with fewer than three women or three men, which the representatives are entitled to see: you fill those in yourself.

With QuantummycosAll plans

The clock-in timeline flags any rest of less than twelve hours between two working days, including at a shift change, showing how many hours there were.

Still yours

Checking that each short rest is due to a shift change and does not fall below seven hours, and giving the shortfall up to twelve hours in the days immediately after: the warning does not know about this exception or keep track of the compensation.

With QuantummycosProfessional and Enterprise plans

Pick a person and the pay register prepares their written answer: their own pay and the mean and median for their job for women and men, with the deadline to reply. If their job has fewer than three women or three men, it leaves those figures out so that nobody’s pay is revealed.

Still yours

Reply on time, remind staff of this right every year and group together work of equal value, because the register compares people in the same job. Today, under Royal Decree 902/2020, someone who asks without workers’ legal representatives is only owed the percentage differences.

With QuantummycosProfessional and Enterprise plans

The pay register already calculates those figures: the gap in mean and median terms, including for complements, the share of women and men who receive them, the quartiles and the gap per job. It also says how often the report would be due for your headcount under the Directive.

Still yours

Confirm the figures after consulting the workers’ legal representatives and send them to the body the Spanish rule designates, whose draft changes thresholds and dates. Quantummycos sends nothing to any authority.

With QuantummycosProfessional and Enterprise plans

The pay register flags jobs with an average gap of 5% or more and warns that, if it is neither justified nor corrected, a joint pay assessment is required.

Still yours

Justify the gap on objective, gender-neutral criteria or correct it within six months and, if not, carry out the assessment with the workers’ representatives. The Spanish draft moves this analysis into the pay audit of the equality plan.

With QuantummycosAll plans

It already works this way: each person clocks in with their own account on the web or in the app at the time, the server sets the time and a past time cannot be clocked. A clock-in is never deleted, and every correction keeps the before and after, who made it, when and why.

With QuantummycosAll plans

It already has it: who clocks in, the start and end time of the day and of each break, the hours worked each day and the monthly total, and who made each correction or whether the person asked for it.

With QuantummycosAll plans

It already works this way: each person sees all their clock-ins and breaks straight away on the web, and the latest ones in the app, with a mark on those the company corrected and, on the web, the history of each correction.

With QuantummycosAll plans

Anyone who cannot correct their own clock-in asks for the change with a reason, and the company approves or rejects it. Both the request and the decision are kept.

Still yours

Under the October 2025 text, also obtaining the person’s agreement when the company corrects on its own initiative and, if they disagree, informing the legal representatives and recording the disagreement: Quantummycos does not ask for it.

With QuantummycosProfessional and Enterprise plans

The working-time record report comes out as a PDF or Excel file per person and month, ready to hand over with the payslip.

Still yours

Under the October 2025 text, the person would have to be able to get the copy themselves. Today it is downloaded by someone with access to Analytics and reporting, which the Employee role does not have by default, and the company hands over the summary with the payslip.