Floburn.
Floburn Inc — MicroForensics

When the PAGA notice arrives, you have the record.

MicroForensics runs the real-time employee attestations, shift-event alerts, and adaptive learning courses that document the reasonable steps your defense needs. Built for California construction and logistics. Integrates with the timekeeping and payroll you already use. Reviewed by named labor counsel.

Book a discovery call

Industry-specific shape: Construction · Logistics.

Why the 2024 reform changed the math

The 15% cap doesn’t apply itself.

AB 2288 and SB 92 amended Labor Code §2699 in 2024. The reform kept PAGA in force and raised the documentary bar.

The cap is conditional, not automatic. Penalties are capped at 15%if the employer can show “all reasonable steps” were taken before a PAGA notice arrived — and at 30% if within 60 days after. No documentation, no cap.

Reasonable steps must be evidentiary. The statute lists examples: periodic payroll audits, written policies, supervisor training, and corrective action when violations are surfaced. Each one has to be shown, not asserted — with timestamps, signatures, and a chain of custody that survives discovery.

The volume keeps rising. LWDA received roughly 9,900 PAGA notices in calendar 2025 — a record. The average California PAGA settlement runs around $1.12M. The delta between the 15% and 30% caps on a reference case is roughly $168k. That is the dollar number MicroForensics is built around.

The damage isn’t only the settlement. It’s twelve to eighteen months of legal fees, executive distraction, and the morale hit of a wage-theft accusation — usually for paperwork failures, not actual underpayment.

§2699 cap delta on a $1.12M reference case
No documented steps
full exposure
Steps shown within 60 days of notice
30% cap
Steps documented before notice
15% cap
Penalty exposure at 30%
~$336k
Penalty exposure at 15%
~$168k
Cap delta
~$168k

Reference figures based on LWDA-reported averages. Real numbers vary by industry, headcount, and fact pattern. We run yours in the audit.

Where the dollars actually go

PAGA is the multiplier, not the whole bill.

A common misread of California exposure: that a PAGA settlement is a single penalty paid to the state. It isn’t. A real demand letter is a stacked recovery, and most of the dollars are paid directly to employees.

The base layer is statutory penalties under the Labor Code. §226 (wage statement, up to $4,000 plus fees), §203 (waiting time, up to thirty days’ wages), §226.7 (meal and rest premium), §510 (overtime), §2802 (expense reimbursement) — all payable to the affected employee, not to LWDA and not to the state.

PAGA sits on top. Civil penalties under §2699 are layered on as the multiplier — and the fee-shifting hook that makes the case worth bringing for a contingency firm. Of the PAGA civil-penalty layer, 65% goes to LWDA and 35% to aggrieved employees (the split changed from 75/25 under the 2024 reform).

This is why demand letters rarely itemize an LWDA share. The bulk of the dollar figure is non-PAGA statutory penalties paid to employees. The LWDA allocation only attaches to the PAGA civil-penalty slice, and only at court-supervised settlement — not at the demand stage where most cases get resolved.

The compliance posture MicroForensics builds addresses both surfaces. The §2699 reasonable-steps cap compresses the PAGA layer. The same record — per-period attestations, signed acknowledgments, defensible audit trail — is what neutralizes the §226 and §203 claims at the underlying layer.

Typical demand-letter recovery stack
Unpaid wages and liquidated
to employee
§226 wage-statement penalty
to employee
§203 waiting-time penalty
to employee
§226.7 meal/rest premium
to employee
§2802 expense reimbursement
to employee
§2699 PAGA civil penalty
65% LWDA / 35% employees
Plaintiff’s fees
fee-shifted

The §2699 reasonable-steps cap compresses the PAGA layer. The underlying record — per-period attestations, signed corrections, integrated time and pay — is what neutralizes the rest.

Where the gaps usually live

We have audited compliance at six California employers. None were trying to cheat. All of them had gaps.

  1. 01

    Attestation lives at hire, not per pay cycle.

    The ‘I waived my break voluntarily’ acknowledgment is signed on the first day of employment and never refreshed. Three years later it is worth almost nothing. Donohue v. AMN Services (Cal. 2021) is explicit on this point: per-period attestations are the rebuttal evidence; one-time hire-day signatures are not.

  2. 02

    Timesheet corrections leave no defensible audit trail.

    Hours get adjusted — sometimes legitimately, sometimes by a manager — without a structured record of who changed what, when, and why the employee agreed.

  3. 03

    Time-tracking, HR, and payroll don’t talk.

    Three systems, three sources of truth. When a notice arrives, no one can produce a single queryable record of what each employee was paid and what they signed off on. Field-heavy operators almost always run two or three systems that were never wired to each other.

  4. 04

    Communication is verbal, not signed.

    Foremen and dispatchers tell crews about meal-break rules. Crews nod. The system captures none of it. In court, that conversation never happened.

  5. 05

    Violations get caught after payroll runs, not before.

    By the time anyone reviews the cycle, the historical record is locked. Real-time correction prevents the violation; biweekly review only documents it. The 15% cap requires prevention, not after-the-fact reporting.

What MicroForensics is

The orchestration layer that produces the record.

MicroForensics is not an HRIS, a content library, or a PEO. It is the layer that stitches your existing time, payroll, and HR systems into a defensible record — in real time, in English and Spanish, on the platforms your crews already use. We orchestrate. We don’t replace.

  1. 01

    Real-time attestation, configurable cadence

    Per-shift, end-of-day, end-of-week, or per pay cycle — whichever fits the operation. Captures meal and rest break compliance, hours accuracy, and pay-match in the employee’s own words. The same flow doubles as the attestation surface for SB 553 workplace violence reporting, §3395 outdoor and §3396 indoor heat, and observed-incident logging. Bilingual by default.

  2. 02

    AI guidance during the shift

    Alerts the foreman or dispatcher before the fifth-hour window expires, before unapproved overtime accrues, before a missed-break premium triggers. The point is to prevent the violation, not to count it after the pay run closes. Real-time guidance is what moves the cap from 30% to 15%.

  3. 03

    Adaptive courses for repeat offenders

    When the same employee misses three breaks in two weeks, they get a short, role-relevant course — not blanket annual training the whole crew sat through. Behavior triggers learning. Completion lands on the audit trail with a timestamp.

  4. 04

    The defensible record

    Structured. Queryable. Timestamped. Bilingual. Reviewed by named California labor counsel before launch and on every statutory update. The kind of record that converts a $500k claim into a $20k nuisance settlement — or makes the plaintiffs’ firm walk away before filing.

Built and operated by Floburn

We build it for your stack, then we run it.

MicroForensics is not an off-the-shelf SaaS. It’s a configurable orchestration layer Floburn’s engineering team builds and operates per customer — real-time attestation flows, shift-event guidance, and adaptive course routing on top of the customer’s existing timekeeping and payroll stack. Three implementations to date, across three different stack combinations. Two to four weeks from diagnostic to go-live, depending on stack complexity.

  1. 01

    Custom integration to your existing stack.

    Gusto, BusyBusy, QuickBooks Time, Deputy, Rippling, ADP, Paychex, Justworks — or your specific combination. We build the adapters; you keep your tools. Where APIs exist, we use them. Where they don’t, we use exports, SFTP, or structured manual entry that flows into the same audit trail.

  2. 02

    AI assistance, narrowly bounded.

    We use AI where it earns its keep — defense narrative drafting, anomaly detection, bilingual employee Q&A, weekly digests for owners. We do not use AI to fire attestations, modify the audit trail, or generate legal opinions. Every AI action is logged with prompt, input, and output, so any finding can be reconstructed and explained.

  3. 03

    Manual paths preserved as first-class.

    Some clients automate end-to-end; some still hand out paper attestations to crews without phones. Both flow into the same audit trail with the same chain-of-custody integrity. Automation is leverage, not a prerequisite.

  4. 04

    We operate it. You don’t maintain it.

    Floburn runs the platform configuration on your behalf, updates the rules library as California labor law changes, and produces the reports your CFO and counsel actually use. You get the audit-defensible record without owning the maintenance.

What we’ve shipped

Three California employers. Three different stacks. One outcome.

These were custom builds, refined across three engagements. MicroForensics is the productized framework that came out of them. Zero dollars paid in settlements.

Sector benchmark. For California employers in the under-50-employee band these three engagements covered, wage-and-hour matters at this scale typically settle in the $50k–$500k+ range. At MicroForensics’s primary target band — 200 to 2,000 employees — the average California PAGA settlement is around $1.12M (LWDA / CalChamber data, 2024). The cap delta and the avoided exposure scale accordingly.

  1. 01

    A Reno-based commercial construction firm holding Tesla and T-Mobile contracts across California

    Headcount
    10–50 (seasonal)
    Stack
    BusyBusy time tracking + Gusto payroll (migrated from QuickBooks)

    What we built. Exports from BusyBusy fed a bi-weekly DocuSign attestation routed to every hourly employee — capturing explicit acknowledgments on overtime, missed breaks, and other compliance signals before payroll ran.

    Outcome. A contingency-fee firm pursued a wage-and-hour claim. We produced the audit trail. The firm walked away. Zero dollars settled.

  2. 02

    A Salinas Valley winery — the #1 direct-to-consumer wine seller in the country in 2024

    Headcount
    ~20
    Stack
    Gusto (timekeeping + payroll)

    What we built. Same bi-weekly DocuSign attestation flow, this time fed by Gusto’s native timekeeping. Cleaner data in, same defensible record out.

    Outcome. A contingency-fee firm came sniffing. The bi-weekly attestation log was the answer. Zero dollars settled.

  3. 03

    One of the largest home staging businesses in the greater Sacramento area

    Headcount
    11
    Stack
    QuickBooks → Gusto + a custom AI application

    What we built. A purpose-built AI application that routes per-cycle compliance and time-keeping questionnaires to every employee — with far greater granularity than the DocuSign approach. The owner sees exceptions in near-real time and acts before payroll closes.

    Outcome. Same pattern. A contingency firm tested for exposure; the audit trail closed it. Zero dollars settled.

Identifying details anonymized at each client’s preference. Direct references available on request, under NDA, once the audit conversation gets specific.

Frequently asked

Questions worth answering before a call.

  1. 01

    What is the 15% PAGA penalty cap?

    California’s Private Attorneys General Act caps civil penalties at 15% of the statutory maximum if the employer can document “all reasonable steps” toward compliance before a PAGA notice arrives — and at 30% if those steps are demonstrated within 60 days after the notice. The cap is in Labor Code §2699, as amended by AB 2288 and SB 92 (2024). It is conditional on evidence, not policies. No record, no cap.

  2. 02

    What counts as “reasonable steps” under amended §2699?

    The statute names four examples: periodic payroll audits, written policies disseminated to employees, supervisor training on Labor Code and Wage Order compliance, and corrective action when violations are surfaced. Each must be shown — with timestamps, signatures, and a chain of custody that survives discovery. MicroForensics produces all four as evidentiary artifacts. Policies that exist only in a handbook do not count.

  3. 03

    What do AB 2288 and SB 92 actually require employers to document?

    Together, the 2024 reforms require employers claiming the §2699 cap to demonstrate four things contemporaneously: that policies were written and distributed, that supervisors were trained, that the employer audited compliance periodically, and that surfaced violations were corrected. LWDA’s February 2026 proposed regulations raise that documentary bar further. Demonstration is by evidence, not assertion — meaning a per-pay-period record tied to specific employees, dates, and times.

  4. 04

    Does our BusyBusy or ExakTime data already satisfy the per-pay-period attestation requirement?

    BusyBusy and ExakTime produce time data — clock-in, clock-out, GPS, geofencing. They do not produce attestation. The §2699 record requires the employee’s contemporaneous affirmation or dispute that meal and rest breaks were taken, hours are accurate, and pay matches expectation. MicroForensics rides on top of BusyBusy or ExakTime, ingests the time data, and routes per-pay-period attestations to each hourly employee — with the employee’s signature and timestamp joining the audit trail.

  5. 05

    We use ADP or Paylocity for payroll. Do we have to migrate to use MicroForensics?

    No. MicroForensics is the orchestration layer above your existing HRIS, timekeeping, and payroll systems. We integrate with ADP Workforce Now, Paylocity, Gusto, BusyBusy, ExakTime, Samsara, Motive, and Geotab. You keep your stack. We orchestrate. We don’t replace.

  6. 06

    What is the difference between a one-time hire-day waiver and a per-pay-period meal break attestation?

    A waiver signed at hire establishes that the employee was informed of the meal-break rule. It does not establish that any particular break on any particular day was taken or knowingly waived. Donohue v. AMN Services (Cal. 2021) held that noncompliant time records create a rebuttable presumption of violation; per-pay-period attestation is the rebuttal vehicle the California Supreme Court contemplated. The hire-day signature is policy. The per-pay-period attestation is evidence.

  7. 07

    A PAGA notice just landed. What does MicroForensics do for us now?

    If your reasonable steps were documented before the notice, your penalty exposure is capped at 15%. If documentation is incomplete, you have 60 days to demonstrate steps and qualify for the 30% cap. MicroForensics can be implemented inside that 60-day cure window — that is the cure-provision use case. Employers with 100 or more employees can request a court-supervised early evaluation conference, which gives Floburn time to implement and your counsel time to build a defensible record. The earlier we start, the more material we can produce.

MicroForensics — Diagnostic

Before the implementation, a fixed-scope diagnostic.

Most California employers don’t need a custom-build conversation on the first call. They need a clear answer to a different question: given what we have today — the timekeeping, the policies, the records — where does our PAGA exposure actually sit, and what would it take to close it?

The MicroForensics Diagnostic answers that question in two weeks. We pull and review your time, payroll, and attestation records; interview your HR, payroll, and operations leads; and deliver a written report with three things in it.

  1. 01

    A finding-by-finding map of where your existing posture fails the §2699 documentary standard.

    Meal/rest break attestations, accrual tracking, training records, equipment certifications, missing signatures, audit-trail integrity, and the surfaces no one else looks at.

  2. 02

    A draft of the defense narrative your attorney could tell today with the records you have today.

    This is the section most clients keep. Knowing the story your existing data already supports is what separates a posture from a guess.

  3. 03

    A remediation roadmap.

    What you can fix in the tools you already use. What requires the MicroForensics implementation. What is genuinely optional.

The diagnostic stands on its own. You can take the report and act on it without ever buying anything else from us. About a third of clients do exactly that.

Two ways to engage the diagnostic

The right structure depends on what you want the diagnostic to do. We don’t push one over the other; we pick the right one with you on the discovery call.

Standard diagnostic

$7,500 fixed

Engagement
Floburn ↔ You
Privilege
None
Discovery exposure
Findings discoverable
Timeline
14 calendar days
Best fit
Baseline assessment, no specific dispute on the horizon
Diagnostic through counsel

From $11,500

Engagement
Your counsel ↔ You; counsel engages Floburn
Privilege
Attorney–client privilege via Kovel
Discovery exposure
Findings protected, subject to standard exceptions
Timeline
14–21 calendar days
Best fit
Post-notice, M&A diligence, prior settlement, board mandate

Privilege is a function of the engagement structure, not the work itself. We can route the diagnostic through your existing employment counsel or introduce you to firms we work with regularly. Some firms in this category add “attorney-reviewed” framing to non-privileged reports and imply protection that isn’t there. We don’t. If it ever matters, that pretense doesn’t survive scrutiny.

Or start with a conversation

Free 30-minute discovery call.

A fit conversation, not a sales call. Tell us about your timekeeping and payroll setup, your headcount, and what’s prompting the conversation. We’ll tell you whether the diagnostic makes sense for you, which engagement structure (standard or through counsel) fits your situation, and what to expect if you proceed. No deck, no deliverable, no commitment. If we’re not the right fit, we’ll say so.

Book a discovery call

MicroForensics is reviewed by named California labor and employment counsel. Counsel does not represent your company; you should retain your own counsel for advice specific to your situation.