Privacy is the product here
Employers see participation, never an individual’s attendance or measurements. That boundary is enforced by role and scope on the server, not by which screen the employer happens to open.
Solution
A corporate account buys seats, employees claim them, and the employer gets participation reporting without ever seeing an individual’s health data.
An employer buys N seats; employees enrol against the pool.
Verify by work email domain or an uploaded roster.
One invoice to the employer, not many to individuals.
Aggregate usage, deliberately not individual records.
Team events and leaderboards to lift take-up.
Employees use any branch the agreement covers.
Employers see participation, never an individual’s attendance or measurements. That boundary is enforced by role and scope on the server, not by which screen the employer happens to open.