SECURITY · 01

Visitor management system for housing societies

Replace the gate register with pre-approved passes, photo-verified entry and a log you can actually search. Guards keep working when the network drops; residents approve from the app, a phone call or an SMS.

ENTRY · UNIT · VISITOR
IN SHORT

A visitor management system replaces the gate register with digital pre-approval and verified entry. Residents approve visitors by app, SMS or automated call; guards capture a photo and log the entry in seconds; every movement is searchable by date, flat or name. KeyMatrix works offline and syncs when the network returns.

The paper register is your weakest security layer

The register at your gate is doing more work than it can carry. It is the only record of who entered the property, the only evidence if something goes missing, and the only thing a committee can point to when a resident asks how a stranger reached the eighth floor. It is also a paper notebook filled in at speed by a guard who is simultaneously opening a barrier, taking a phone call and signing for a parcel.

The failures are predictable because they are structural, not personal. Handwriting is unreadable within a week. Names are written as the visitor pronounces them and nobody checks. Phone numbers are transposed. Exit times go unrecorded because nobody is standing at the gate when the visitor leaves, which means the register cannot tell you who is inside the property right now — the one question it exists to answer.

The moment the register matters is the moment it fails. After a theft, a committee turns to the book and finds three illegible entries and no exit times across the relevant afternoon. There is no photograph, no way to confirm the phone number was real, and no way to search four months of entries for the same person visiting different flats. The register was never a security control. It was a record of the intention to keep one.

  • Unreadable at the point of use. A name written at a gate in the rain is not evidence, and it cannot be searched.
  • No exit capture. Without exit times, the register cannot answer who is on the property at any given moment.
  • Unverified identity. A number written by hand is never dialled, so nothing about the visitor was ever confirmed.
  • No pattern visibility. Repeated visits by the same person to different flats are invisible when each day is a separate page.

Key capabilities

Six capabilities cover the full life of a visit — from the resident expecting someone to the log a committee reads six months later.

Pre-approved entry with OTP and QR passes

A resident expecting a guest creates a pass before the visitor arrives. The visitor receives a QR code and a one-time code by SMS or WhatsApp; at the gate they show either one and the guard scans or types it. Entry takes a few seconds and requires no call to the flat, which is what makes it stick — the fastest path through the gate is also the recorded one.

Passes carry their own rules. A one-time pass for a dinner guest expires the same evening. A recurring pass for a tutor covers Tuesday and Thursday afternoons and nothing else. A pass issued for a party covers thirty named guests under one code. When a pass expires it stops working at the gate rather than quietly continuing to be honoured.

Guard app with photo and ID capture

For unannounced visitors the guard raises the request instead. The app captures a photograph, the visitor name, the flat being visited and the purpose, then notifies the resident and waits. The photograph is the part that changes behaviour: it takes one second, it cannot be faked at the point of capture, and it converts an entry from a claim into evidence.

Where a society requires it, the guard can also capture an ID document. That is a policy decision rather than a default — collecting identity documents creates an obligation to protect them, so the setting is off unless a committee turns it on, and captured documents follow the same retention schedule as everything else.

Delivery and cab approvals in one tap

Deliveries are the highest-volume event at any gate and the one most likely to be waved through unlogged. The app handles them as their own type: the guard selects the courier, the resident gets a single notification with approve and leave-at-gate as the two options, and the parcel is logged either way. Cabs work the same way, with the vehicle number captured so that a complaint about a driver has something attached to it.

Leave-at-gate creates a holding record rather than closing the entry. The parcel sits against the flat until someone collects it, which is what stops the weekly argument about whether a delivery ever arrived.

Blacklist and watchlist alerts at the gate

A committee can add a person or a vehicle to a watchlist with a reason and an expiry. When that number or plate appears at the gate the app tells the guard before entry is granted, rather than after somebody reviews the log. A blacklist blocks; a watchlist warns and notifies a named committee member.

Both carry an audit trail. Who added the entry, when, and on what grounds is recorded, because a list that can be edited silently is a list that will eventually be used to settle a personal dispute.

Passes for domestic help and frequent visitors

Domestic staff, drivers, tutors and physiotherapists are not visitors in any meaningful sense — they arrive daily, often to several flats. They get a durable pass tied to the people they work for, so entry is a scan rather than a fresh approval each morning, and their attendance across the property is visible to the committee without anyone keeping a parallel notebook.

When a household stops employing someone, the resident revokes their own share of the pass. If that was their only employer the pass stops working; if they still work for three other flats, it continues for those three. This is the case a spreadsheet always gets wrong.

Real-time, searchable entry and exit logs

Every event lands in one log that can be filtered by date range, flat, gate, visitor name, phone number or vehicle. The questions a committee actually asks — who visited flat B-704 in March, has this number been here before, which vehicles were inside between 2am and 5am — are queries rather than an afternoon spent with a notebook.

Exit capture is what makes the log complete. Scanning out closes the entry, and anything still open after a threshold is flagged, so the count of people currently on the property is a number the system can state rather than an estimate.

HOW IT WORKS

How it works

Three steps at the gate, none of which asks the guard to make a judgement call about who someone is.

01
Resident pre-approves, or the guard raises a request
The resident creates a pass from the app and the visitor receives a QR code and OTP. For an unannounced arrival the guard raises the request instead, capturing a photograph and the flat being visited, and the resident is notified immediately.
02
Visitor is verified with photo, OTP or QR at the gate
The guard scans the code or enters the OTP. The app confirms the pass is valid, unexpired and for this gate, checks the watchlist, and shows the guard a clear allow or hold. Nothing depends on the guard remembering a face or a name.
03
Entry is logged and the resident is notified instantly
The entry is written with a timestamp, gate, guard, photograph and flat, and the resident gets a notification that their visitor has entered. Exit is scanned the same way, which closes the record and keeps the on-property count accurate.
WHO IT HELPS

Who it helps

A gate system is only adopted if it makes each group’s day easier than the register did. These are the four groups whose behaviour has to change, and what each one gets in return.

For the managing committee
A defensible record. Every entry has a time, a photograph and a named guard, so an incident review takes minutes and a resident complaint can be answered with evidence rather than recollection. Watchlists, retention and who can read the logs are all committee-controlled settings.
For residents
No intercom call at an inconvenient moment. Guests arrive with a code and walk in; deliveries are approved with one tap or left at the gate; domestic staff enter without a daily approval. Residents see only their own flat’s entries, which is what makes the system acceptable to live with.
For guards and staff
Less writing and fewer arguments. Approval is on the record rather than a verbal instruction the guard has to defend later, the app keeps working when the network drops, and the shift handover is a screen instead of a paragraph in a notebook.
For property and facility managers
Comparable numbers across sites. Entry volumes, average approval time, unclosed exits and delivery load can be read per gate and per property, which turns staffing at the gate into a decision with evidence behind it.

What gets recorded, by entry type

Different arrivals need different amounts of friction. The system varies the check rather than applying the slowest one to everybody.

Verification, resident action and resulting record for each type of arrival at the gate.
Entry typeVerificationResident actionLogged as
Pre-approved guestQR or OTP shown at the gateCreates the pass in advanceEntry with pass reference and expiry
Unannounced visitorPhoto captured by the guardApproves or declines the requestEntry with photo, purpose and approver
DeliveryCourier selected by the guardApprove, or leave at gateDelivery record held against the flat
Cab or taxiVehicle number capturedApproves the pickup or dropEntry with vehicle number
Domestic staffDurable pass, scanned dailyNone after the first setupAttendance against every employing flat
Watchlisted personAlert raised before entryCommittee member notifiedBlocked or held, with the reason recorded

Works with the rest of KeyMatrix

Gate data stops being a silo the moment it shares a record with everything else. A visitor entry is attached to the same unit record that carries the maintenance bill, the complaint history and the owner and tenant of record — so the gate knows that B-704 is tenanted, who the current tenant is, and that their agreement expires in March.

That shared record is what makes the small things work. A resident with dues does not lose gate access, because collections and security are separate concerns and conflating them is how a committee ends up in a dispute. But a flat that has changed hands stops honouring the previous owner’s domestic staff passes automatically, because the handover updated the unit record and the passes hang off it.

The same applies outward. A delivery left at the gate can raise a helpdesk ticket if it is not collected within a day. A watchlist alert can notify the committee members on duty this week rather than a fixed list that went stale two AGMs ago. None of this requires an integration, because none of it crosses a system boundary.

  • Unit management. Owner, tenant and occupancy come from the unit record, so passes follow the flat rather than a name typed at the gate.
  • Helpdesk. An uncollected parcel or a gate incident becomes a ticket with the entry already attached.
  • Staff attendance. Domestic staff and society staff share one attendance history instead of two registers.
  • Parking and ANPR. Vehicle numbers captured at the gate reconcile against allotted parking, so an unfamiliar plate is visible.

Frequently asked questions

Yes. The guard app keeps logging visitors offline and syncs automatically when connectivity returns, so entries are never lost. Approvals fall back to call-based confirmation until the network is restored.

Yes. Visitor approvals work over an automated phone call and SMS in addition to the app, and any registered family member on the same flat account can approve on their behalf.

Visitor logs are retained per the society's chosen policy - commonly one to three years - and are searchable by date, flat or name. Admins see full logs; residents see only entries for their own flat.

Just an Android smartphone or tablet for the guard. Printers for visitor slips, ANPR cameras and biometric devices are optional add-ons - most societies start with a single device per gate.

Visitor photos and numbers are visible only to authorized roles, are never sold or used for marketing, and can be purged on schedule. Access to logs is itself audit-logged.

Digitize your gate this week.

ONE ANDROID PHONE PER GATE IS ENOUGH TO START
Book a demoAll features