When the PAGA notice arrives, you have the record.
MicroForensics runs the real-time employee attestations, shift-event alerts, and adaptive learning courses that document the reasonable steps your defense needs. Built for California construction and logistics. Integrates with the timekeeping and payroll you already use. Reviewed by named labor counsel.
Book a discovery call→Industry-specific shape: Construction · Logistics.
The 15% cap doesn’t apply itself.
AB 2288 and SB 92 amended Labor Code §2699 in 2024. The reform kept PAGA in force and raised the documentary bar.
The cap is conditional, not automatic. Penalties are capped at 15%if the employer can show “all reasonable steps” were taken before a PAGA notice arrived — and at 30% if within 60 days after. No documentation, no cap.
Reasonable steps must be evidentiary. The statute lists examples: periodic payroll audits, written policies, supervisor training, and corrective action when violations are surfaced. Each one has to be shown, not asserted — with timestamps, signatures, and a chain of custody that survives discovery.
The volume keeps rising. LWDA received roughly 9,900 PAGA notices in calendar 2025 — a record. The average California PAGA settlement runs around $1.12M. The delta between the 15% and 30% caps on a reference case is roughly $168k. That is the dollar number MicroForensics is built around.
The damage isn’t only the settlement. It’s twelve to eighteen months of legal fees, executive distraction, and the morale hit of a wage-theft accusation — usually for paperwork failures, not actual underpayment.
- No documented steps
- full exposure
- Steps shown within 60 days of notice
- 30% cap
- Steps documented before notice
- 15% cap
- Penalty exposure at 30%
- ~$336k
- Penalty exposure at 15%
- ~$168k
- Cap delta
- ~$168k
Reference figures based on LWDA-reported averages. Real numbers vary by industry, headcount, and fact pattern. We run yours in the audit.
PAGA is the multiplier, not the whole bill.
A common misread of California exposure: that a PAGA settlement is a single penalty paid to the state. It isn’t. A real demand letter is a stacked recovery, and most of the dollars are paid directly to employees.
The base layer is statutory penalties under the Labor Code. §226 (wage statement, up to $4,000 plus fees), §203 (waiting time, up to thirty days’ wages), §226.7 (meal and rest premium), §510 (overtime), §2802 (expense reimbursement) — all payable to the affected employee, not to LWDA and not to the state.
PAGA sits on top. Civil penalties under §2699 are layered on as the multiplier — and the fee-shifting hook that makes the case worth bringing for a contingency firm. Of the PAGA civil-penalty layer, 65% goes to LWDA and 35% to aggrieved employees (the split changed from 75/25 under the 2024 reform).
This is why demand letters rarely itemize an LWDA share. The bulk of the dollar figure is non-PAGA statutory penalties paid to employees. The LWDA allocation only attaches to the PAGA civil-penalty slice, and only at court-supervised settlement — not at the demand stage where most cases get resolved.
The compliance posture MicroForensics builds addresses both surfaces. The §2699 reasonable-steps cap compresses the PAGA layer. The same record — per-period attestations, signed acknowledgments, defensible audit trail — is what neutralizes the §226 and §203 claims at the underlying layer.
- Unpaid wages and liquidated
- to employee
- §226 wage-statement penalty
- to employee
- §203 waiting-time penalty
- to employee
- §226.7 meal/rest premium
- to employee
- §2802 expense reimbursement
- to employee
- §2699 PAGA civil penalty
- 65% LWDA / 35% employees
- Plaintiff’s fees
- fee-shifted
The §2699 reasonable-steps cap compresses the PAGA layer. The underlying record — per-period attestations, signed corrections, integrated time and pay — is what neutralizes the rest.
We have audited compliance at six California employers. None were trying to cheat. All of them had gaps.
- 01
Attestation lives at hire, not per pay cycle.
The ‘I waived my break voluntarily’ acknowledgment is signed on the first day of employment and never refreshed. Three years later it is worth almost nothing. Donohue v. AMN Services (Cal. 2021) is explicit on this point: per-period attestations are the rebuttal evidence; one-time hire-day signatures are not.
- 02
Timesheet corrections leave no defensible audit trail.
Hours get adjusted — sometimes legitimately, sometimes by a manager — without a structured record of who changed what, when, and why the employee agreed.
- 03
Time-tracking, HR, and payroll don’t talk.
Three systems, three sources of truth. When a notice arrives, no one can produce a single queryable record of what each employee was paid and what they signed off on. Field-heavy operators almost always run two or three systems that were never wired to each other.
- 04
Communication is verbal, not signed.
Foremen and dispatchers tell crews about meal-break rules. Crews nod. The system captures none of it. In court, that conversation never happened.
- 05
Violations get caught after payroll runs, not before.
By the time anyone reviews the cycle, the historical record is locked. Real-time correction prevents the violation; biweekly review only documents it. The 15% cap requires prevention, not after-the-fact reporting.
The orchestration layer that produces the record.
MicroForensics is not an HRIS, a content library, or a PEO. It is the layer that stitches your existing time, payroll, and HR systems into a defensible record — in real time, in English and Spanish, on the platforms your crews already use. We orchestrate. We don’t replace.
- 01
Real-time attestation, configurable cadence
Per-shift, end-of-day, end-of-week, or per pay cycle — whichever fits the operation. Captures meal and rest break compliance, hours accuracy, and pay-match in the employee’s own words. The same flow doubles as the attestation surface for SB 553 workplace violence reporting, §3395 outdoor and §3396 indoor heat, and observed-incident logging. Bilingual by default.
- 02
AI guidance during the shift
Alerts the foreman or dispatcher before the fifth-hour window expires, before unapproved overtime accrues, before a missed-break premium triggers. The point is to prevent the violation, not to count it after the pay run closes. Real-time guidance is what moves the cap from 30% to 15%.
- 03
Adaptive courses for repeat offenders
When the same employee misses three breaks in two weeks, they get a short, role-relevant course — not blanket annual training the whole crew sat through. Behavior triggers learning. Completion lands on the audit trail with a timestamp.
- 04
The defensible record
Structured. Queryable. Timestamped. Bilingual. Reviewed by named California labor counsel before launch and on every statutory update. The kind of record that converts a $500k claim into a $20k nuisance settlement — or makes the plaintiffs’ firm walk away before filing.
We build it for your stack, then we run it.
MicroForensics is not an off-the-shelf SaaS. It’s a configurable orchestration layer Floburn’s engineering team builds and operates per customer — real-time attestation flows, shift-event guidance, and adaptive course routing on top of the customer’s existing timekeeping and payroll stack. Three implementations to date, across three different stack combinations. Two to four weeks from diagnostic to go-live, depending on stack complexity.
- 01
Custom integration to your existing stack.
Gusto, BusyBusy, QuickBooks Time, Deputy, Rippling, ADP, Paychex, Justworks — or your specific combination. We build the adapters; you keep your tools. Where APIs exist, we use them. Where they don’t, we use exports, SFTP, or structured manual entry that flows into the same audit trail.
- 02
AI assistance, narrowly bounded.
We use AI where it earns its keep — defense narrative drafting, anomaly detection, bilingual employee Q&A, weekly digests for owners. We do not use AI to fire attestations, modify the audit trail, or generate legal opinions. Every AI action is logged with prompt, input, and output, so any finding can be reconstructed and explained.
- 03
Manual paths preserved as first-class.
Some clients automate end-to-end; some still hand out paper attestations to crews without phones. Both flow into the same audit trail with the same chain-of-custody integrity. Automation is leverage, not a prerequisite.
- 04
We operate it. You don’t maintain it.
Floburn runs the platform configuration on your behalf, updates the rules library as California labor law changes, and produces the reports your CFO and counsel actually use. You get the audit-defensible record without owning the maintenance.
Three California employers. Three different stacks. One outcome.
These were custom builds, refined across three engagements. MicroForensics is the productized framework that came out of them. Zero dollars paid in settlements.
Sector benchmark. For California employers in the under-50-employee band these three engagements covered, wage-and-hour matters at this scale typically settle in the $50k–$500k+ range. At MicroForensics’s primary target band — 200 to 2,000 employees — the average California PAGA settlement is around $1.12M (LWDA / CalChamber data, 2024). The cap delta and the avoided exposure scale accordingly.
- 01
A Reno-based commercial construction firm holding Tesla and T-Mobile contracts across California
- Headcount
- 10–50 (seasonal)
- Stack
- BusyBusy time tracking + Gusto payroll (migrated from QuickBooks)
What we built. Exports from BusyBusy fed a bi-weekly DocuSign attestation routed to every hourly employee — capturing explicit acknowledgments on overtime, missed breaks, and other compliance signals before payroll ran.
Outcome. A contingency-fee firm pursued a wage-and-hour claim. We produced the audit trail. The firm walked away. Zero dollars settled.
- 02
A Salinas Valley winery — the #1 direct-to-consumer wine seller in the country in 2024
- Headcount
- ~20
- Stack
- Gusto (timekeeping + payroll)
What we built. Same bi-weekly DocuSign attestation flow, this time fed by Gusto’s native timekeeping. Cleaner data in, same defensible record out.
Outcome. A contingency-fee firm came sniffing. The bi-weekly attestation log was the answer. Zero dollars settled.
- 03
One of the largest home staging businesses in the greater Sacramento area
- Headcount
- 11
- Stack
- QuickBooks → Gusto + a custom AI application
What we built. A purpose-built AI application that routes per-cycle compliance and time-keeping questionnaires to every employee — with far greater granularity than the DocuSign approach. The owner sees exceptions in near-real time and acts before payroll closes.
Outcome. Same pattern. A contingency firm tested for exposure; the audit trail closed it. Zero dollars settled.
Identifying details anonymized at each client’s preference. Direct references available on request, under NDA, once the audit conversation gets specific.
Questions worth answering before a call.
- 01
What is the 15% PAGA penalty cap?
California’s Private Attorneys General Act caps civil penalties at 15% of the statutory maximum if the employer can document “all reasonable steps” toward compliance before a PAGA notice arrives — and at 30% if those steps are demonstrated within 60 days after the notice. The cap is in Labor Code §2699, as amended by AB 2288 and SB 92 (2024). It is conditional on evidence, not policies. No record, no cap.
- 02
What counts as “reasonable steps” under amended §2699?
The statute names four examples: periodic payroll audits, written policies disseminated to employees, supervisor training on Labor Code and Wage Order compliance, and corrective action when violations are surfaced. Each must be shown — with timestamps, signatures, and a chain of custody that survives discovery. MicroForensics produces all four as evidentiary artifacts. Policies that exist only in a handbook do not count.
- 03
What do AB 2288 and SB 92 actually require employers to document?
Together, the 2024 reforms require employers claiming the §2699 cap to demonstrate four things contemporaneously: that policies were written and distributed, that supervisors were trained, that the employer audited compliance periodically, and that surfaced violations were corrected. LWDA’s February 2026 proposed regulations raise that documentary bar further. Demonstration is by evidence, not assertion — meaning a per-pay-period record tied to specific employees, dates, and times.
- 04
Does our BusyBusy or ExakTime data already satisfy the per-pay-period attestation requirement?
BusyBusy and ExakTime produce time data — clock-in, clock-out, GPS, geofencing. They do not produce attestation. The §2699 record requires the employee’s contemporaneous affirmation or dispute that meal and rest breaks were taken, hours are accurate, and pay matches expectation. MicroForensics rides on top of BusyBusy or ExakTime, ingests the time data, and routes per-pay-period attestations to each hourly employee — with the employee’s signature and timestamp joining the audit trail.
- 05
We use ADP or Paylocity for payroll. Do we have to migrate to use MicroForensics?
No. MicroForensics is the orchestration layer above your existing HRIS, timekeeping, and payroll systems. We integrate with ADP Workforce Now, Paylocity, Gusto, BusyBusy, ExakTime, Samsara, Motive, and Geotab. You keep your stack. We orchestrate. We don’t replace.
- 06
What is the difference between a one-time hire-day waiver and a per-pay-period meal break attestation?
A waiver signed at hire establishes that the employee was informed of the meal-break rule. It does not establish that any particular break on any particular day was taken or knowingly waived. Donohue v. AMN Services (Cal. 2021) held that noncompliant time records create a rebuttable presumption of violation; per-pay-period attestation is the rebuttal vehicle the California Supreme Court contemplated. The hire-day signature is policy. The per-pay-period attestation is evidence.
- 07
A PAGA notice just landed. What does MicroForensics do for us now?
If your reasonable steps were documented before the notice, your penalty exposure is capped at 15%. If documentation is incomplete, you have 60 days to demonstrate steps and qualify for the 30% cap. MicroForensics can be implemented inside that 60-day cure window — that is the cure-provision use case. Employers with 100 or more employees can request a court-supervised early evaluation conference, which gives Floburn time to implement and your counsel time to build a defensible record. The earlier we start, the more material we can produce.
Before the implementation, a fixed-scope diagnostic.
Most California employers don’t need a custom-build conversation on the first call. They need a clear answer to a different question: given what we have today — the timekeeping, the policies, the records — where does our PAGA exposure actually sit, and what would it take to close it?
The MicroForensics Diagnostic answers that question in two weeks. We pull and review your time, payroll, and attestation records; interview your HR, payroll, and operations leads; and deliver a written report with three things in it.
- 01
A finding-by-finding map of where your existing posture fails the §2699 documentary standard.
Meal/rest break attestations, accrual tracking, training records, equipment certifications, missing signatures, audit-trail integrity, and the surfaces no one else looks at.
- 02
A draft of the defense narrative your attorney could tell today with the records you have today.
This is the section most clients keep. Knowing the story your existing data already supports is what separates a posture from a guess.
- 03
A remediation roadmap.
What you can fix in the tools you already use. What requires the MicroForensics implementation. What is genuinely optional.
The diagnostic stands on its own. You can take the report and act on it without ever buying anything else from us. About a third of clients do exactly that.
The right structure depends on what you want the diagnostic to do. We don’t push one over the other; we pick the right one with you on the discovery call.
$7,500 fixed
- Engagement
- Floburn ↔ You
- Privilege
- None
- Discovery exposure
- Findings discoverable
- Timeline
- 14 calendar days
- Best fit
- Baseline assessment, no specific dispute on the horizon
From $11,500
- Engagement
- Your counsel ↔ You; counsel engages Floburn
- Privilege
- Attorney–client privilege via Kovel
- Discovery exposure
- Findings protected, subject to standard exceptions
- Timeline
- 14–21 calendar days
- Best fit
- Post-notice, M&A diligence, prior settlement, board mandate
Privilege is a function of the engagement structure, not the work itself. We can route the diagnostic through your existing employment counsel or introduce you to firms we work with regularly. Some firms in this category add “attorney-reviewed” framing to non-privileged reports and imply protection that isn’t there. We don’t. If it ever matters, that pretense doesn’t survive scrutiny.
Free 30-minute discovery call.
A fit conversation, not a sales call. Tell us about your timekeeping and payroll setup, your headcount, and what’s prompting the conversation. We’ll tell you whether the diagnostic makes sense for you, which engagement structure (standard or through counsel) fits your situation, and what to expect if you proceed. No deck, no deliverable, no commitment. If we’re not the right fit, we’ll say so.
Book a discovery call→MicroForensics is reviewed by named California labor and employment counsel. Counsel does not represent your company; you should retain your own counsel for advice specific to your situation.