| Organization | A client entity that consumes manpower services. Top of the tenant hierarchy. |
| Organization Unit | A physical location (hospital, warehouse, retail store) where manpower is deployed. Geo-fencing is configured per unit. |
| Employee | An individual deployed at one or more org units. Categories: Permanent, Intern, Consultant, Locum. |
| Shift | A defined working time slot with start/end and an overnight flag. |
| Shift Assignment | A roster row — employee × shift × date at a unit. |
| Roster | A monthly grid of shift assignments for a unit. |
| Locum | A temporary replacement employee for a covered shift. |
| Punch | A raw check-in or check-out event captured from a channel. |
| Attendance Record | A derived row (per employee × shift date) computed from punches and rules. |
| Red Flag | A policy violation attached to an attendance record (late, early out, geo fail, etc.). |
| Regularization | A request to correct an attendance record. |
| Locking | Freezing a month's attendance so downstream systems can rely on it. |
| Geo-fence | A lat/lon + radius around an org unit inside which check-ins are valid. |
| Device Binding | A mapping of an employee to one or more approved devices (by fingerprint). |
| RBAC | Role-Based Access Control. Combined with row-level scopes (org/unit). |
| Scope | The row-filtering applied on top of a role: global, org, or unit. |