We catch missed breaks, unpaid break premiums, and open safety items — then chase each one to a documented fix.
What we defend against
- §226.7 — missed meal and rest breaks, premium not paid
- §512 — the break that never got taken
- §510 — unpaid or miscalculated overtime
- §1174(d) — time records that cannot be produced
- §203 — waiting-time penalties on separation
§226 wage-statement defects and §2802 reimbursement are pled alongside these. We make no defense claim there.
In plain words: we build the wage-and-hour record California already requires on top of the timekeeping and payroll you use today, then operate it every pay period. A foreman is alerted to a short break and gets it taken while the shift is still open — and when a lawyer’s letter demanding records arrives, your own custodian of records answers it from one place.
Free · 30 minutes · a fit conversation, not a sales call. If the diagnostic isn’t worth doing, we’ll tell you.

Fifteen California industries. Find yours.
Each page shows how the record works for your crews, on the payroll and time clocks you already run — and answers the questions employers in your industry ask us first.

Non-union construction & specialty trades
Water, shade, and cool-down rest under §3395 — the written plan behind them, and the training documentation, are records California already compels.

Wine & food/beverage manufacturing
The cellar records the harvest to the lot and the tank move; whether the fifth-hour meal actually happened, duty-free and on time, is the record a six-day crush week doesn't keep.

Senior living & post-acute care
On a ratio-bound floor a caregiver leaves for a duty-free meal only when relief arrives; the fifth-hour alert reaches the charge nurse while there is still time to send it.

Agriculture growers & farm labor contractors
Shears still in hand at row's end, the day's work counted in stacked buckets — the Wage Order 14 hours and the fifth-hour meal still need a record, and the field doesn't write one.

Security guard services
A solo gatehouse post after the fact: the officer's incident report entered into the violent incident log that Labor Code §6401.9 has required since July 2024.

Independent grocery stores & markets
A §512 meal period comes due before the end of the fifth hour of a full checkstand shift; the fifth-hour alert reaches the manager on duty while the checker is still on the lane.

Light manufacturing, non-food
A legacy punch clock and its card rack — the record still rounds to the quarter hour, and Donohue v. AMN Services treats a rounded or missing meal-period punch as a presumed violation.

Wholesale distribution & warehouse operations
Mid-wave in the pick aisle: the pallet jack parked for the meal period, beside the written quota description AB 701 requires at larger DCs.

Hotels & lodging
Mid-morning checkout window: the housekeeping board is documented room by room, while the §512 meal period inside that window is the entry the time record has to show.

Auto repair & dealership service departments
A repair paused mid-job while the technician steps away — the rest period a flag-time job clock has no reason to record, and §226.2 requires to be paid separately from flag hours.

Ambulatory healthcare
The clinic's timekeeping deducts thirty minutes for the meal period whether or not the break was taken — the time record is silent either way.

Private K-12 schools
§515.8 exempts teachers, not the custodial staff working the empty building at night — the hourly staff carry the full meal, rest, and time-record machinery, and theirs is the record the campus owes.

Landscaping services
A maintenance crew's meal period between route sites — the interval a job-start clock has no row for, entered as a per-pay-period attestation on the crew member's own phone.

Childcare & daycare centers
The coverage handoff at the classroom door — a floater takes the room so a duty-free meal break can happen at ratio, drawn before the room fills.

Logistics & distribution fleets
Dock doors down at shift end: the time clock holds the punches, the per-period attestation adds the crew’s confirmation — and where the two disagree, the exception is reconciled.
What we deliver is one loop, run from the punch clock to the export your own authorized custodian of records produces. Every item it opens gets closed, and the closing is what goes on the record:
- Your crews confirm their hours and breaks from a phone, in English or Spanish, on whatever cadence fits the operation — per shift, end of day, end of week, or per pay cycle — a cadence of its own, decoupled from the payroll run. Each sign-off is dated, not a form signed once at hire.
- A fifth-hour window approaching, unapproved overtime accruing, or a missed-break premium about to trigger reaches the foreman or dispatcher while the shift is still open, carrying an attorney-reviewed protocol for what to do and what to enter — so the break gets taken rather than a premium owed, and whatever lands anyway is closed on a dated record.
- The employee who keeps missing breaks gets a short course in their own language, and so does the supervisor who kept signing off on it; completion is timestamped. Supervisor training and corrective action as to supervisors are two of the four reasonable steps Labor Code §2699(g)(2) names.
- Entries are captured as the shift happens — timestamped, signature-captured, tamper-evident — not assembled after a claim lands. A correction is entered beside the item it corrects rather than over it, so the original entry and the fix both stay readable.
- When a lawyer's letter demanding records arrives — a request under section 226, 432, or 1198.5 — or a §2699 PAGA notice after it, that custodian — not Floburn — exports one production package — the payroll records, the timecards with each short break and the premium paid beside it, the written policy your crews acknowledged and each dated per-period sign-off, on a cadence of its own, decoupled from the payroll run, the training completions, and the hazard, heat, and incident records, on one record rather than in separate systems — and authenticates it as the person who has held it all along. The records that can go into the package are inventoried with you in the records diagnostic.
- Who runs it
- Built and operated by Floburn
- Runs on
- The payroll and time clocks you have
- Cadence
- Operated every pay period
The legal spine under that: your time records, your training file, and your SB 553 violent incident log carry their own distinct duties — the law compels every one of them whether or not anyone helps you keep them, so there is no marginal downside to keeping them well. For the hazard log it goes further: 8 CCR 3203(b)(1) asks for the unsafe condition and the action taken to correct it, in the same entry. On the wage-and-hour side the correction is what the penalty regime rewards, not what the record rules compel.
Built for small and mid-sized California employers with hourly field and shift crews, across fifteen California industries.
Whatever you already run, the loop is built on top of it.
There is no MicroForensics app for your crews to learn and no migration to sit through. The attestation is routed on top of the timekeeping and payroll you have, on a cadence of its own that is never a condition of anyone being paid. Below are configurations we have built, and what each one does.
What we don’t claim. We are not telling you a record changes how a matter comes out; that is not ours to promise and no California appellate court has yet said what satisfies “all reasonable steps.” What scales with headcount is not a cap arithmetic we could publish — it is the number of pay periods, employees, and shift exceptions the record has to cover. That is what the records diagnostic measures, on your data.

- Stack
BusyBusy time tracking + Gusto payroll (migrated from QuickBooks)
A Nevada-based commercial construction firm working California job sites
What the loop looks like. Exports from BusyBusy fed a DocuSign attestation routed to every hourly employee — capturing explicit acknowledgments on overtime, missed breaks, and other compliance signals. It ran on a bi-weekly cadence of its own, decoupled from the payroll run; the sign-off was never a condition of being paid.
- Stack
Gusto (timekeeping + payroll)
A Salinas Valley winery with a large direct-to-consumer business
What the loop looks like. Same bi-weekly DocuSign attestation flow, this time fed by Gusto’s native timekeeping. Cleaner data in, same defensible record out.
- Stack
QuickBooks → Gusto + a custom AI application
A home staging business in the greater Sacramento area
What the loop looks like. A purpose-built AI application that routes per-cycle compliance and time-keeping questionnaires to every employee — with far greater granularity than the DocuSign approach. The owner sees exceptions in near-real time and acts before payroll closes.
Identifying details anonymized at each client’s preference. Direct references available on request, under NDA, once the audit conversation gets specific.
Penalties cap at 15% only if the record existed before the notice. No documentation, no cap.
Why the cap is conditional→None of the California employers we’ve audited were trying to cheat. All of them had gaps.
01Attestation lives at hire, not per pay cycle.
The ‘I waived my break voluntarily’ acknowledgment is signed on the first day of employment and never refreshed. It says nothing about any specific pay period. Donohue v. AMN Services (Cal. 2021): time records showing missed, short, or late meal periods raise a rebuttable presumption of violation. The California Supreme Court described an employer system of the same per-period design and said that, without the rounding, it “would have ensured accurate tracking of meal period violations.” We don’t round: attestation prompts fire on unrounded punch times — where a customer’s timekeeping rounds punches, deployment turns the rounding off, and where unrounded punches can’t be supplied, we say so rather than prompt off rounded data. No court has yet held that an attestation rebuts the presumption — what a contemporaneous attestation does is put dated evidence in front of the person who decides.
02Timesheet corrections leave no defensible audit trail.
Hours get adjusted — sometimes legitimately, sometimes by a manager — without a structured record of who changed what, when, and why the employee agreed.
03Time-tracking, HR, and payroll don’t talk.
Three systems, three sources of truth. When a lawyer’s letter demanding records arrives, no one can produce a single queryable record of what each employee was paid and what they signed off on — the answer is spread across payroll, the time clock, the HR file, and the safety binder, and somebody has to go and assemble it. Field-heavy operators almost always run two or three systems that were never wired to each other.
04Communication is verbal, not signed.
Foremen and dispatchers tell crews about meal-break rules. Crews nod. The system captures none of it. In court, that conversation never happened.
05Violations get caught after payroll runs, not before.
By the time anyone reviews the cycle, the historical record is locked. A same-shift correction closes the item while it can still be fixed; a biweekly review only records that it wasn’t. The statute names corrective action — not detection — among its examples, and a finding with no correction beside it is a record of the finding.
Every alternative produces something. Here is where each one stops short, and what we do after that point.
A handbook signed at hire
Policy, not evidence. It says nothing about any specific pay period — which is where the presumption lives.
The payroll app’s clock-out checkbox
Time data, not the employee’s contemporaneous affirmation — and where the checkbox does exist, it captures a signature and stops. It will not chase the exception, pay the premium, retrain the foreman, or close the item.
A PEO
Co-employment leaves wage-and-hour compliance responsibility with you. The PEO relies on the hours you report; the record problem stays yours.
A one-time law-firm audit
A memo that starts decaying the day it’s delivered. Point-in-time, no operating layer, no standing record between audits.
Self-serve compliance software
You configure it, drive crew adoption, and operate it yourself — exactly the job a company without an HR department cannot staff.
EPLI and hope
Wage-and-hour is usually the narrow part of the policy — excluded outright, or sublimited to defense costs. Read your own wage-and-hour endorsement before assuming otherwise; we make no claim about what your policy covers. We are also not aware of any published California EPLI or workers’ comp credit for running a documented compliance program, so don’t buy this expecting a premium reduction. Insurance is, at best, money after the fact; the §2699 caps turn on the record you built before.
The record is the byproduct. The product is that nothing stays open.

The layer that runs the loop and produces the record.
MicroForensics is not an HRIS, a 50-state content library, or a PEO. It is the layer that stitches your existing time, payroll, and HR systems into a defensible record — in real time, in English and Spanish, on the platforms your crews already use. Payroll, timekeeping, HR, and the safety records that same crew-facing surface carries are reconciled into one record as the shifts happen, so production is an export from one place rather than a search across several. We run on top of your systems. We don’t replace them. Built for foremen, drivers, and warehouse crews — not desk workers.
01Real-time attestation, configurable cadence
Per-shift, end-of-day, end-of-week, or per pay cycle — whichever fits the operation. Captures meal and rest break compliance, hours accuracy, and pay-match in the employee’s own words. The same crew-facing surface carries the other records California already compels: the IIPP hazard and correction record (8 CCR 3203), the SB 553 violent incident log (Lab. Code §6401.9), §3395 outdoor and §3396 indoor heat training documentation, and the FEHA policy acknowledgment and harassment-prevention training records (2 CCR §§ 11023, 11024(b)(2)). Different statutes, different remedies, no shared mechanism — but the employer owes every one of them anyway, so there is no lawful posture in which they do not exist. Bilingual by default.
02Shift-event alerts and the attorney-reviewed protocol
Alerts the foreman or dispatcher before the §512 fifth-hour window expires, before unapproved overtime accrues, before a missed-break premium triggers — and each alert carries the attorney-reviewed protocol: what to do, in what order, and what to enter on the record. The point is to close the item while the shift is still open, not to count it after the pay run. The statute names corrective action among its examples; nothing names detection.
03Adaptive courses when the same miss repeats
When the same employee misses three breaks in two weeks, they get a short, role-relevant course — not blanket annual training the whole crew sat through. The supervisor who kept signing off on it gets routed too: supervisor training and corrective action as to supervisors are two of the four reasonable steps Labor Code §2699(g)(2) names. Behavior triggers learning. Both courses are bilingual, and completion lands on the audit trail with a timestamp.
04The record, captured as the shift happens
Entries are captured as the shift happens — timestamped, signature-captured, tamper-evident — not assembled after a claim lands. A correction is entered beside the item it corrects rather than over it, so the original entry and the fix both stay readable. Structured, queryable, bilingual, and built in evidentiary format from the first shift rather than reformatted later.
05What your custodian produces when a lawyer’s letter arrives
The record is held by your own authorized custodian of records, not by us, so production is retrieval rather than construction. When a lawyer’s letter demanding records arrives — a request under section 226, 432, or 1198.5 — or a §2699 PAGA notice after it, that custodian — never Floburn — exports one production package in hours, not weeks, and authenticates it as the person who has held it all along. Payroll, timekeeping, HR, and safety are reconciled into one record as the shifts happen, so the package is an export from one place rather than a search across several: the payroll records, the timecards with each short break and the premium paid beside it, the written policy your crews acknowledged and each dated per-period sign-off — on a cadence of its own, decoupled from the payroll run — the training completions, and the hazard, heat, and incident records. The records that can go into the package are inventoried with you in the records diagnostic. The timeline is a property of how the record is kept, not a promise about your matter. No outcome is guaranteed; every matter turns on its facts. If the engagement ends, the closing export is part of offboarding: Floburn operates the loop, your company owns the record.
Your custodian answers the letter with one production package. Retrieval, not construction.
How production works→Field notes from this work.
Field note: the PAGA notice that arrived on a Friday.
Four of the 33 cure-window days disappeared between Friday afternoon and Tuesday morning. A short note on the operational shape of receiving a PAGA notice the wrong way.
Read the note→Field note: the foreman who refused the tablet.
Construction-tech adoption friction is almost never resistance to change. It's a tool that destroyed a working trust ritual nobody on the vendor side noticed.
Read the note→We build it on what you run, then we run it.

MicroForensics is a system Floburn’s engineers build and operate for you — attestation flows, shift-event guidance, and adaptive course routing on top of the timekeeping and payroll you already run. Two to four weeks from records diagnostic to go-live, depending on how many systems we have to connect.
- 01
Custom integration to your existing stack.
Gusto, BusyBusy, QuickBooks Time, Deputy, Rippling, ADP, Paychex, Justworks — or your specific combination. We build the adapters; you keep your tools. Where APIs exist, we use them. Where they don’t, we use exports, SFTP, or structured manual entry that flows into the same audit trail.
- 02
AI assistance, narrowly bounded.
We use AI where it earns its keep — defense narrative drafting, anomaly detection, bilingual employee Q&A, weekly digests for owners. We do not use AI to fire attestations, modify the audit trail, or generate legal opinions. Every AI action is logged with prompt, input, and output, so any finding can be reconstructed and explained.
- 03
Manual paths preserved as first-class.
Some deployments automate end-to-end; some still hand out paper attestations to crews without phones. Both flow into the same audit trail with the same chain-of-custody integrity. Automation is leverage, not a prerequisite.
- 04
We operate it. You don’t maintain it.
Floburn runs the platform configuration on your behalf, updates the attorney-reviewed rules library as California labor law changes, and produces the reports your CFO and counsel actually use. You get the audit-defensible record without owning the maintenance.
- ADP Workforce Now
- Paylocity
- Gusto
- BusyBusy
- ExakTime
- Samsara
- Motive
- Geotab
- QuickBooks Time
- Deputy
- Rippling
- Paychex
- Justworks
We build the connector for your stack — by API where one exists, by export, SFTP, or structured manual entry where one doesn’t — scoped and priced in the records diagnostic.
Questions worth answering before a call.
01What is the 15% PAGA penalty cap?
Labor Code §2699(g) caps PAGA civil penalties at 15% where the employer took all reasonable steps before notice — or before an employee’s personnel or payroll records request, which often comes first; §2699(h) caps them at 30% for remediation within 60 days after. Two qualifications matter. Whether the steps were enough is the court’s call, on the totality of the circumstances. And the percentages are ceilings, not floors: §2699(e)(2) lets a court award more, “notwithstanding the limitations set forth in subdivisions (g) and (h).” The cap reaches Labor Code civil penalties only, it is conditional on evidence rather than policies, and no record means no cap.
02What counts as “reasonable steps” under amended §2699?
§2699(g)(2) names four examples: periodic payroll audits with action taken in response, lawful written policies disseminated to employees, supervisor training on Labor Code and wage order compliance, and corrective action as to supervisors. Reasonableness is judged “on the totality of the circumstances, taking into account the size and resources available to the employer.” Each item must be shown — with timestamps, signatures, and a chain of custody that survives discovery — and we produce a dated, exportable record of all four. The same subdivision adds the part employers rarely hear: “the existence of a violation, despite the steps taken, is insufficient to establish that an employer failed to take all reasonable steps.” Being imperfect does not forfeit the argument. Policies that exist only in a handbook, with nothing showing they were distributed or followed, are what forfeits it. No California appellate court has yet said what satisfies “all reasonable steps.”
03What do AB 2288 and SB 92 actually require employers to document?
Together, the 2024 reforms require employers claiming the §2699 cap to demonstrate four things contemporaneously: that policies were written and distributed, that supervisors were trained, that the employer audited compliance periodically, and that surfaced violations were corrected. LWDA proposed its first PAGA regulations in February 2026; they are procedural — notice content, cure mechanics, settlement review — and do not interpret the reasonable-steps standard. They are proposed, not final, and nothing on this page assumes they take effect. Demonstration is by evidence, not assertion — meaning a per-pay-period record tied to specific employees, dates, and times.
04We already run BusyBusy or ExakTime. Isn’t that the record?
It is the time data — clock-in, clock-out, GPS, geofencing — which is the input, not the record. Several timekeeping products can capture a signature at clock-out, and the box is sometimes configured long before anyone asks who acts on what it surfaces. Capability is not adoption, and a signature is not the loop: an app can capture a signature, but it will not chase the exception, pay the premium, retrain the foreman, or close the item. What a §2699 argument leans on is the employee’s contemporaneous affirmation or dispute that breaks were taken, hours are accurate, and pay matches expectation — and then the correction entered alongside anything that came back wrong. MicroForensics is built on top of BusyBusy or ExakTime — it ingests the time data, routes per-pay-period attestations, and runs the correction to close.
05We use ADP or Paylocity for payroll. Do we have to migrate to use MicroForensics?
No. MicroForensics sits above your existing HRIS, timekeeping, and payroll systems. We build the connector for your stack — ADP Workforce Now, Paylocity, Gusto, BusyBusy, ExakTime, Samsara, Motive, Geotab, or your combination — by API where one exists, by export, SFTP, or structured manual entry where one doesn’t. The connector is scoped and priced in the records diagnostic. You keep your stack. We orchestrate. We don’t replace.
06Doesn’t our EPLI policy cover this?
We can’t tell you what your policy covers, and we won’t guess. What we can tell you is where to look: wage-and-hour is usually the narrow part of an EPLI policy — excluded outright, or sublimited to defense costs — so ask your broker to show you the wage-and-hour endorsement language rather than the summary. We are also not aware of any published California EPLI or workers’ comp credit for running a documented compliance program, so don’t buy this expecting a premium reduction. Insurance is, at best, money after the fact; the §2699 caps turn on the record you built before.
07Does MicroForensics help with harassment or discrimination claims?
Two different answers, and the difference is worth being plain about. On harassment: California employers are strictly liable for harassment by a supervisor — no record and no service changes that — and Gov. Code §12950.1(c) says training compliance “does not insulate the employer from liability for sexual harassment.” What the law does compel is a record: the FEHA policy acknowledgment and the harassment-prevention training records (2 CCR §§ 11023, 11024(b)(2)). The crew-facing surface carries both, dated and tracked to completion, because the employer owes them anyway. One textual point your counsel may find useful: Gov. Code §12940(k) requires “all reasonable steps” to prevent harassment — the same words amended §2699(g) uses on the wage-and-hour side — so one record architecture answers both statutes’ phrasing. That is evidence and posture, not a statutory penalty mechanism. On discrimination: no. No California statute rewards documentation there the way §2699 does for wage-and-hour civil penalties — liability turns on the adverse decision itself, not on notice — so we make no claim on discrimination, and we would be skeptical of a vendor who does.
08What is the difference between a one-time hire-day waiver and a per-pay-period meal break attestation?
A waiver signed at hire establishes that the employee was informed of the meal-break rule. It does not establish that any particular break on any particular day was taken or knowingly waived. Donohue v. AMN Services (Cal. 2021) held that noncompliant time records create a rebuttable presumption of violation. The California Supreme Court described an employer system of the same per-period design and said that, without the rounding, it “would have ensured accurate tracking of meal period violations” — so we don’t round. Be clear about what that is and isn’t: no court has ever held that an employee attestation rebuts the Donohue presumption, and Donohue itself left sufficiency for remand. The hire-day signature is policy. The contemporaneous attestation is dated evidence your counsel can argue from. Neither is a ruling.
09How fast can the record be produced when a lawyer’s letter demanding records arrives?
In hours, not weeks. A lawyer’s letter demanding records — a request under section 226, 432, or 1198.5 — usually arrives before any lawsuit does, and a §2699 PAGA notice after it; what answers either is one production package. The standing record is already in the evidentiary format defense counsel uses — production is retrieval, not construction. Payroll, timekeeping, HR, and safety are reconciled into one record as the shifts happen, so the package is an export from one place rather than a search across payroll, the time clock, the HR file, and the safety binder. The records that can go into the package are inventoried with you in the records diagnostic. The export is gated to your authorized custodian of records: someone on the defendant’s team, not Floburn, controls it, and that gate is what preserves the chain-of-custody foundation opposing counsel would otherwise attack. Weeks of counsel-supervised assembly, billed at counsel rates, collapse to the custodian’s export session. We don’t publish a dollar figure for that difference — it runs on your counsel’s rate card, not ours. The timeline is a property of how the record is kept, not a promise about your matter. No outcome is guaranteed; every matter turns on its facts.
10What happens to our record if Floburn stops operating it?
You keep it — that is a design decision, not a courtesy. The record is built in evidentiary format from the first shift, your authorized custodian of records holds the standing export, and the exports are structured, queryable files your counsel or a successor vendor can use without us. Floburn operates the loop; your company owns the record. If the engagement ends, the closing export is part of offboarding, and nothing about the record’s usability depends on Floburn continuing to exist.
11A PAGA notice just landed. What does MicroForensics do for us now?
If all reasonable steps were taken and documented before the notice, §2699(g) caps civil penalties at 15% — applied by the court on a totality-of-the-circumstances showing, and subject to §2699(e)(2), which lets a court exceed the limits. If documentation is incomplete, §2699(h) caps penalties at 30% for remediation within 60 days after. MicroForensics can be implemented inside that window — that is the cure-provision use case. Separate pathways exist by headcount: employers with 100 or more employees can request a court-supervised early evaluation conference; employers under 100 have a confidential LWDA cure path with its own short clock. Which pathway applies to you, whether you qualify, what to cure, and what your exposure is are legal conclusions on your facts. Your counsel makes those calls; we build the material they argue from, and the earlier we start the more of it there is.
Two weeks, a fixed fee, and a finding-by-finding answer: which of these records do you actually hold?
What the records diagnostic finds→We build the record. You make the argument.
Working through your engagement→Free 30-minute discovery call.
A fit conversation, not a sales call. Tell us about your timekeeping and payroll setup, your headcount, and what’s prompting the conversation. We’ll tell you whether the records diagnostic makes sense for you, which engagement structure (standard or through counsel) fits your situation, and what to expect if you proceed. No deck, no deliverable, no commitment. If we’re not the right fit, we’ll say so.
Floburn Inc. is not a law firm and does not provide legal advice. We build the record; your counsel makes the argument. Counsel advises Floburn on system design and does not represent your company; retain your own counsel for advice specific to your situation.