StaffPortal
by StaffPortal
What StaffPortal is
StaffPortal is a free, self-hosted, open-source HR and workforce platform released under the MIT license. It manages employee records and operations including attendance, leave, timesheets, expenses, visitors, wellness, IT support, onboarding, and time tracking. Attendance tools cover clock-in and clock-out, work-from-home status, late-arrival detection, contracted-hours summaries, and timesheet exports. Leave workflows support multiple leave types, monthly accruals, up to three sequential approvers, and PDF certificates. A PIN kiosk handles staff attendance and visitor check-ins, with QR-coded references and printable passes. Single sign-on integrations include Microsoft Entra ID, Google Workspace, GitHub, and GitLab. CSV payroll exports are compatible with Xero, QuickBooks, and Sage. Security features include Postgres Row Level Security, middleware role checks, an append-only audit log, and JSON GDPR exports. Deployment uses one Supabase project and one Vercel deployment, managed by the operator.
Who it suits
It suits organizations such as agencies, warehouses, charities, schools, clinics, and professional practices that can run self-hosted software. Operators should be prepared to manage the required Supabase and Vercel deployments.
What it does well
- MIT-licensed and self-hosted
- Unlimited employees on free plan
- Attendance and leave workflows
- SSO and payroll export integrations
- Append-only audit log
What to know first
- Each deployment serves one organisation
- SCIM provisioning is not shipped
- No certified payroll engine
- Infrastructure costs may apply
Plans
| Plan | Billed and limits | Price |
|---|---|---|
| StaffPortal | MIT licensed · self-hosted · unlimited employees; infrastructure costs may apply | Free |
As sarmalinux.com lists them, read 12 Oct 2026. The maker's own page has the final word.
Verdict
StaffPortal covers many core HR and workforce tasks without a software fee. Its single-organisation deployment model and operator-managed infrastructure require planning before adoption.
Facts from StaffPortal's own pages
- Attendance
- Attendance features include clock-in and clock-out, work-from-home status, late-arrival detection, contracted-hours summaries, and timesheet exports. · sarmalinux.com, 12 Oct 2026
- Audience
- The maker describes use cases including growing agencies, manufacturers and warehouses, charities, co-ops, schools, clinics, and professional practices. · sarmalinux.com, 12 Oct 2026
- Audit and privacy
- StaffPortal provides an append-only audit log of privileged actions and a JSON GDPR data export for members. · sarmalinux.com, 12 Oct 2026
- Email and AI
- Resend handles notifications, while an optional AI assistant uses Groq by default and is disabled when GROQ_API_KEY is unset. · sarmalinux.com, 12 Oct 2026
- Employee records
- Yes · sarmalinux.com, 22 Sept 2026
- Free plan
- Yes · sarmalinux.com, 22 Sept 2026
- Headquarters
- Hemel Hempstead, UK · sarmalinux.com, 28 Sept 2026
- Hosting
- A deployment uses one Supabase project and one Vercel deployment, and the operator must manage both. · sarmalinux.com, 12 Oct 2026
- Integrations
- The product names Microsoft Entra ID, Google Workspace, GitHub, and GitLab for SSO, and CSV payroll exports compatible with Xero, QuickBooks, and Sage. · sarmalinux.com, 12 Oct 2026
- Leave
- Leave management supports multiple leave types, up to three sequential approvers, monthly accruals, and PDF certificates. · sarmalinux.com, 12 Oct 2026
- License
- The project is released under the MIT license. · sarmalinux.com, 12 Oct 2026
- Limitations
- Each deployment serves one organisation, SCIM provisioning is not shipped, and StaffPortal does not include a certified payroll engine. · sarmalinux.com, 12 Oct 2026
- Maker
- SarmaLinux describes itself as an independent software studio; its About page identifies Sarma as a solo software engineer based in the UK. · sarmalinux.com, 12 Oct 2026
- Employee onboarding
- Yes · sarmalinux.com, 22 Sept 2026
- Purpose
- StaffPortal is a self-hosted, open-source HR and workforce platform for managing attendance, leave, timesheets, expenses, visitors, wellness, and IT support. · sarmalinux.com, 12 Oct 2026
- Security
- The maker says Postgres Row Level Security applies to every table and role checks are also enforced by middleware. · sarmalinux.com, 12 Oct 2026
- Time-off management
- Yes · sarmalinux.com, 22 Sept 2026
- Time tracking
- Yes · sarmalinux.com, 22 Sept 2026
- Visitor kiosk
- A PIN-based kiosk lets staff clock in or out and visitors check in, with QR-coded visitor references and printable passes. · sarmalinux.com, 12 Oct 2026
Where StaffPortal stands on Freedom251
- HR Software#40 of 233