Workforce Management

Deputy

Capable API with rough edges and undocumented limits

Researched March 2026 workforce-management, scheduling, time-attendance, rostering, payroll-integration, shift-management, hospitality, retail, australian

Executive Summary

Deputy is an Australian-founded workforce management platform built for businesses with hourly and shift-based workers. Founded in 2008 and now valued at over $1 billion, it handles scheduling, time and attendance, leave management, and payroll integration. It's used by over 1.5 million workers across 375,000 workplaces in 100+ countries, with particularly strong adoption in hospitality, retail, and healthcare.

From an integration standpoint, Deputy has a functional REST API that covers most of what you'd need, plus webhook support and a solid ecosystem of pre-built integrations with payroll systems like Xero, MYOB, and ADP. The main pain points are undocumented rate limits, a hard 500-record pagination cap, and no official SDKs. If you're connecting Deputy to your existing stack using one of their native integrations, it's straightforward. Custom integration work is doable but expect some learning curve.

The company is financially stable, profitable, and well-backed. Their security credentials are strong with SOC 2 Type II and ISO 27001 certification. The main concerns are around support quality (consistently criticised across review platforms) and a pattern of pushing features behind more expensive tiers. For Australian SMBs running shift-based teams, Deputy is a solid choice if you go in with realistic expectations about support responsiveness.

Bottom Line

Deputy is a solid workforce management platform for Australian SMBs running shift-based teams, particularly in hospitality, retail, and healthcare. The scheduling and time tracking core is well-built, the mobile experience is genuinely good for frontline workers, and the Australian award interpretation saves real time on payroll compliance.

From an integration perspective, Deputy plays well with the major payroll and accounting systems. If you're connecting it to Xero, MYOB, or QuickBooks through their native integrations, it's straightforward. Custom API work is doable but budget extra time for learning the resource model and working around undocumented limits.

Who should use it: SMBs with 10-200 shift-based workers who need scheduling, time tracking, and payroll integration in one place. Especially strong for Australian businesses that need award interpretation.

Who should think twice: Businesses that need responsive support (it's consistently poor), organisations that require SSO on a budget (it's locked to the more expensive tiers), or teams in areas with unreliable internet (Deputy has no offline mode). If you're a very large enterprise, the undocumented API limits and Enterprise-only webhook security might give your IT team pause.

What It Does

Deputy is a workforce management platform designed for businesses that employ hourly, shift-based, or casual workers. Its core capabilities include drag-and-drop employee scheduling with AI-powered auto-scheduling, time and attendance tracking (via mobile app, tablet kiosk with facial recognition, or web), automatic timesheet generation with manager approval workflows, leave management, task assignment, and team communication through an in-app news feed.

A key differentiator for Australian businesses is Deputy's built-in award interpretation engine, which handles penalty rates and compliance calculations for Australian modern awards. The platform integrates directly with major payroll systems to streamline the scheduling-to-pay pipeline.

The target market is SMBs with shift-based workforces. Around 85% of reviewers come from organisations with 2-200 employees. Key industries include hospitality, retail, healthcare, food and beverage, security, and manufacturing. Deputy is used by over 1.5 million workers across 375,000 workplaces in more than 100 countries.

Green Flags

  • Financially stable and profitable with a $1.1 billion valuation, $100M+ ARR, and backing from major investors including a strategic partnership with Express Employment Professionals
  • Strong security credentials (SOC 2 Type II, ISO 27001) with no history of data breaches, which is reassuring for a platform holding employee records
  • Genuinely intuitive for frontline workers with minimal training required, which is critical for industries with high staff turnover
  • Deep Australian market understanding with built-in modern award interpretation and strong integrations with Xero and MYOB

Red Flags

  • Support quality is consistently poor across review platforms, with no phone support, weeks-long ticket response times, and communication threads that go dead after escalation
  • The 2025 pricing restructure moved existing features behind more expensive tiers, with some customers reporting 40% cost increases. This pattern suggests future price creep
  • Notification reliability issues are a serious concern for a scheduling platform, with users reporting missed shift alerts and unconfirmed shifts leading to real financial losses
  • SSO and advanced security features are locked behind the more expensive Pro tier, which is uncomfortable for a platform handling sensitive employee data

Licensing & Pricing

Deputy uses a per-user, per-month pricing model across three tiers. The entry-level Lite plan sits around US$5 per user per month for basic scheduling and time tracking. The Core plan at roughly US$6.50 adds advanced scheduling and reporting. The Pro plan at around US$9 per user per month unlocks compliance features, advanced analytics, and security capabilities like SSO. Enterprise pricing is custom and requires a minimum of 250 users.

There's no permanent free tier, but Deputy offers a 31-day free trial with full feature access and no credit card required. Annual billing gets a 10% discount, and there's a minimum monthly spend of AUD$30 in Australia. Optional add-ons for analytics, messaging, and HR onboarding run an extra $1.50-$2 per user per month.

It's worth noting that Deputy restructured its pricing tiers in late 2025, which some existing customers reported as effectively moving features they already had behind more expensive plans.

Vendor Lock-In Assessment

Vendor lock-in risk with Deputy is moderate. Your data is accessible through CSV exports and the full API, so you can get everything out if you need to. Deputy also maintains an official Singer Tap for bulk data extraction into data warehouses. The practical lock-in comes from the proprietary data model and the scheduling workflows your team builds around the platform. Moving to a competitor means re-mapping employee records, historical timesheets, leave balances, and award configurations, which is time-consuming but not technically blocked. The 500-record API pagination limit makes large-scale extraction slower than ideal but not prohibitive.

Company Overview

Deputy was founded in 2008 in Sydney, Australia by Ashik Ahmed and Steve Shelley. It started as a solution to the administrative burden of managing shift-based workers and has grown into a global platform. The company is privately held, incorporated in Australia as Deputy Group Pty Ltd, with operational headquarters now in Atlanta, Georgia.

Deputy has raised approximately US$143-168 million across multiple rounds from investors including IVP, OpenView, Square Peg Capital, and Xero. In March 2024, a US$37 million strategic investment from Express Employment Professionals (one of the world's largest staffing firms) pushed the valuation past US$1.1 billion, making Deputy Australia's first tech unicorn in two years. That partnership also brings potential access to 500,000 additional hourly workers.

The company employs around 380-400 people and reached AU$100 million in annual recurring revenue by late 2022, achieving its first statutory profit of $8.5 million in FY2023. Co-founder Ashik Ahmed transitioned from CEO to the board in early 2023, with Silvija Martincevic (formerly of Groupon and Affirm) taking over as CEO. The transition appears to have gone smoothly, with the unicorn valuation achieved under her leadership. Deputy is financially stable, profitable, and well-positioned for continued growth.

API

Deputy has a REST API that follows an API-first philosophy, meaning their own interface uses the same API available to third parties. It covers 60+ resource types including employees, timesheets, rosters, leave, locations, pay rules, and custom fields. The API is self-documenting: you can query any resource to discover its fields and relationships.

The API supports filtering, sorting, aggregation, bulk operations, and pagination. However, there's a hard cap of 500 records per response with no way to increase it, which makes bulk data extraction slower than you'd like for large datasets.

Rate limits are a notable blind spot. Deputy doesn't publicly document them anywhere, which is unusual. In practice, integrators report not hitting walls for normal operations, but if you're building something that hammers the API, you'd want to contact their support team to understand the boundaries before committing.

Authentication is via OAuth 2.0 for production use, with permanent tokens available for development. There are no official SDKs, though community-maintained libraries exist for PHP and Python. The developer portal at developer.deputy.com has interactive API testing, vertical-specific guides, and Postman collections.

Webhooks

Webhooks are supported

Deputy has broad webhook support covering almost every resource type. You subscribe to specific resource and action combinations (create, update, delete) and receive JSON payloads via POST. There's no limit on the number of webhooks per installation. However, HMAC payload verification is only available on Enterprise plans, which is a security concern for lower tiers. Retry behaviour on failed deliveries is not documented, so you'd need to build your own reliability layer or check with support.

Data Portability

Deputy provides reasonable data portability. There's a built-in Data Exporter (for System Administrators) that exports timesheets, schedules, and leave data as CSV files, plus a custom export template builder. Bulk CSV import is supported for employees, schedules, and timesheets.

On the API side, all 60+ resource types are readable, so you can programmatically extract everything. Deputy also maintains an official Singer Tap for piping data into data warehouses via the Singer ETL format.

The main friction point is the 500-record pagination limit, which makes large-scale extraction slower than ideal. Your data isn't locked in, but migration to another platform would require mapping Deputy's proprietary data model to whatever you're moving to. That's standard for any workforce management platform, not a Deputy-specific concern.

Developer Experience

The developer experience is mixed. On the positive side, the developer portal at developer.deputy.com is functional with interactive API testing, vertical-specific integration guides, developer recipes with code examples, and Postman collections. Deputy's API support team is reportedly responsive and proactively offers to meet with developers during the build phase.

On the negative side, there's no dedicated sandbox environment. You sign up for a free trial and email their support to get it extended for development. Important details like rate limits and webhook retry behaviour are missing from the documentation. Some developers have noted unintuitive response structures, particularly for aggregation queries which return full objects with appended fields rather than just the aggregated values.

There are no official SDKs, so you're working with raw HTTP requests unless you use community libraries. The newer v2 Employee API shows they're actively improving, reducing what used to require a dozen API calls down to a single call. Overall, a competent developer will get through it, but expect to spend some time learning the resource model's quirks.

Compliance & Security

SOC 2 Type IIISO 27001UK Cyber EssentialsPCI-DSS Level 3CSA Star Level 1

Deputy has a strong security posture for a workforce management platform. Data is encrypted with AES-256 at rest and TLS 1.2+ in transit, hosted on AWS across three regions (Australia, UK, US) for data sovereignty. They run annual penetration tests, maintain a private bug bounty programme, and use a SIEM with SOAR capabilities. MFA is available on all accounts, though SSO is restricted to Pro and Enterprise tiers. No publicly reported data breaches or security incidents on record. Their Trust Centre at trust.deputy.com provides transparency into their security programme.

Community & Support

Resources

Interested in Deputy Integration?

Let's discuss how we can help you get the most out of your software.