Decide where it applies
Enable face check-in for sites where buddy punching is a real risk, such as shift-based or field teams. Office staff may only need web check-in.
Get consent and offer an alternative
Face templates are sensitive data. Explain the purpose, get consent, keep templates only while the person is employed, and offer a non-biometric option.
Handle mismatches fairly
Send failed matches to a manager for review rather than marking people absent automatically.