Everything about Leopardo RH
Guides, API reference, webhooks and SDKs to integrate Leopardo RH into your tools.
API Quick Start
Ready-to-copy examples
POST /api/v1/auth/login
Content-Type: application/json
{
"email": "manager@acme.com",
"password": "secret",
"device_name": "Mobile App"
}GET /api/v1/auth/me Authorization: Bearer <token>
{
"event": "attendance.checked_in",
"tenant_id": "acme",
"data": {
"employee_id": 42,
"checked_in_at": "2026-05-31T08:00:00Z"
}
}Real-time webhooks
Receive HR events directly in your systems
Check-in
attendance.checked_in
attendance.checked_out
attendance.auto_closed
Absences
leave.requested
leave.approved
leave.rejected
Payroll & advances
salary_advance.requested
salary_advance.paid
payroll.run_completed
Notifications
notification.sent
notification.failed
Every payload is signed with X-Leopardo-Signature (HMAC-SHA256). Read the docs →
Flutter Mobile SDKs
leopardo_core — the shared package across the 3 apps
Kiosk check-in (ZKTeco)
Biometric/QR entry terminal + local offline-first desktop bridge
Installation
- Copy config.example.json to config.json
- Fill in apiBaseUrl, deviceCode and kioskToken (generated from the manager app)
- Run python desktop-bridge/bridge.py on the local PC/mini-PC
- Open the terminal at http://127.0.0.1:8037/index.html
How it works
- Fingerprint, face or QR/matricule with HID keyboard fallback
- Offline mode: local SQLite queue, automatic sync when the network returns
- Local admin (admin.html) to force a manual synchronisation
- Raw biometric matching stays on the ZKTeco terminal/SDK
Full source of the bridge and kiosk UI: front/zkteco-kiosk/. See the download page →
Security & GDPR
Encryption, multi-tenant isolation and regulatory compliance
Encryption in transit
All communications go through TLS 1.3. No plain-text exchange between clients, the API and terminals.
Encryption at rest
Sensitive data is AES-256 encrypted. Biometric data stays on the terminal; only hashes travel.
Multi-tenant isolation
One isolated PostgreSQL schema per company. Access is controlled by RBAC (Principal, HR, Employee, Super Admin).
GDPR compliance
European hosting, full audit trail, GDPR-compliant exports and deletion of personal data.
Install the mobile apps
Employee, Manager and Platform Admin — iOS & Android
Leopardo Employee
Mobile check-in, geolocation, payslips, leave requests and push notifications.
Google Play and App Store: coming soon.
Join the testersLeopardo Manager
Team, schedules, tasks, request approvals and simplified payroll from the field.
Google Play and App Store: coming soon.
Join the testersLeopardo Platform Admin
Tenant creation, supervision of client companies and 2FA provisioning.
Google Play and App Store: coming soon.
Join the testersMore details about the three apps: mobile apps page →.