First sign-in via SMS OTP with Apple's From-Messages autofill — the 6-digit code drops straight into the PIN box. Every shift after that, Face ID unlocks a refresh token held in the Secure Enclave. Stolen phone? One click in /admin force-revokes the session.
We've watched too many workers give up on a safety app at the first sign-in screen. So the first-time flow has been ground down to the absolute minimum.
Worker types their phone number once and taps the button. The platform fires a one-time 6-digit OTP via SMS — no app install, no setup, no IT ticket.
Apple's From-Messages autofill recognises the code on iOS 14+. The 6-digit code appears as a single tappable pill above the keyboard.
One tap and all six digits land in the right place. Worker is signed in and immediately prompted to enrol Face ID for the next session.
Why SMS first? Because every phone has SMS. No app store account, no email password, no forgotten-magic-link-in-spam. The OTP is rate-limited per number + per device, and tied to the SIM's SS7 origin to resist swap attacks.
Once enrolled, every subsequent sign-in is biometric. The worker tap-tap-glances and is on shift. We never charge you for SMS that didn't need to be sent — and the worker never waits 30 seconds for an OTP that's late.
At a 300-worker contractor doing two shifts a day, this is ~18,000 SMS / month avoided versus an SMS-every-shift competitor.
On every subsequent sign-in, the worker just taps the app. iOS prompts for Face ID (or Touch ID on older devices, or device passcode as fallback).
The refresh token never leaves the Secure Enclave. Even if the device is jailbroken or the app's local storage dumped, the token is inaccessible without a successful biometric.
Every successful unlock rotates the refresh token server-side. A stolen old token is dead the moment the real worker signs in again — no replay window.
From /admin/workers/[id] an ops manager can invalidate every refresh token for a worker in under a second. Next attempt to unlock the app fails the refresh, requires re-OTP, and triggers an audit-log entry. Useful for offboarding, lost devices, and policy-suspension events.
/admin/workers/[id] and clicks Force sign-out.One SMS to enrol. Every subsequent shift is biometric. See the round-trip in under 4 seconds.