A lost key is inconvenient. A lost master key, an unrecorded contractor visit, or a side entrance left unsecured can become a much larger problem. When comparing access control systems UK suppliers, the useful question is not “Which reader looks smartest?” It is “Who can enter, where, when, and what happens when something goes wrong?”
The right system should form part of wider access control solutions that protect people, property and day-to-day operations without turning every door into an administrative task. It should also give managers proper evidence, not vague assumptions.
This guide covers the decisions that affect cost, safety, compliance and long-term reliability.
Key takeaways
- Access control is more than an electronic lock. It combines credentials, readers, controllers, door hardware and software to decide who may enter.
- Standalone systems suit a small, stable site. Networked access control and cloud-hosted systems suit buildings with several doors, changing staff lists or multiple locations.
- Smart cards, key fobs and mobile credentials are usually simpler to administer than biometric readers, particularly where staff turnover is high.
- Emergency escape must never be compromised by security measures. Door locking arrangements need to match the building’s fire strategy.
- A cheap installation can become expensive if licences, replacement credentials, support, integration and call-outs were left out of the original quote.
- An audit trail only helps if people review it, retain it for an appropriate period and know what action to take after an exception.
What an electronic access control system actually does
Electronic access control decides whether a person may pass through a particular door at a particular time. It replaces the blunt instrument of a mechanical key with permissions that can be issued, changed and removed without re-keying a building.
That distinction matters in commercial premises. A warehouse supervisor may need access to a loading bay at 06:00. A cleaner may need access after office hours. Visitor management can issue time-limited permissions for guests who need temporary access.
The reader, credential, controller and lock
A user presents a credential, such as a card, fob, PIN or mobile phone, to a reader. The reader sends that request to a door controller, which checks the database of authorised users and either releases the electronic door lock or keeps it secured.
Door controllers may sit close to the door, in a secure cabinet or within a wider network. Access control software gives authorised managers a place to add users, set access schedules and review activity.
A system should still have a planned response to power or network failure. Ask which doors remain secure, which doors release and how the site remains safe during an outage.
Audit trails turn entry into evidence
A networked access control system records events such as granted access, denied access, forced doors and doors held open. This audit trail can help investigate an incident, resolve a dispute or identify a recurring fault.
It is not surveillance in the usual sense. CCTV records what occurred in an area. Access control records that a credential was presented at a door. Door entry intercoms let someone request admission, often with audio or video, but they don’t necessarily manage permissions across the building.
The three systems can work together, but they solve different problems.
Choosing access control systems UK: system architecture
The most suitable design depends on the building, not the brochure. Start with the number of controlled doors, future phases, staff turnover, contractor access and whether the site operates across several locations.
Standalone system for contained risk
A standalone arrangement stores permissions at the door or reader. It can suit one or two doors, such as a small office, plant room or staff-only stock area.
It’s usually lower cost and doesn’t require central software. The trade-off is administration. Adding or deleting users may require someone to attend each door, and reporting is limited.
This approach is practical where access patterns rarely change. It’s less appropriate for a busy site with agency staff, frequent visitors or several departments.
Networked access control for shared management
Networked access control links door controllers to central software. A manager can issue permissions, apply time schedules and run reports from one administration point.
This is the sensible middle ground for offices, schools, mixed-use buildings and warehouses with several controlled areas. It also provides a stronger audit trail, provided the system is configured properly and backed up.
Networked systems usually involve more cabling, commissioning and ongoing support. They also make expansion easier. Adding a controlled door later is still a project, but not a complete change of approach.
Cloud-hosted system for multi-site facilities
Cloud-based systems can suit a multi-site facility where managers need to issue or remove access without travelling between locations. Administration takes place in a secure web portal rather than on a server in the building.
Check what happens if the internet connection fails. A properly specified system should retain local door decisions for an agreed period, rather than leaving staff stranded outside a building.
Also ask where data is hosted, whether software licences are recurring, how user accounts are protected and what happens if you change supplier.
Choosing credentials people will actually use
Credentials should match the site’s working conditions. A polished office reception, a cold distribution yard and a high-security laboratory do not have the same practical needs.
Smart cards and key fobs remain dependable
Smart cards and key fobs are familiar, durable and easy to hand over or cancel. They work well for regular staff, and replacement costs are usually modest.
Their weakness is simple: they can be lost, borrowed or passed between people. Policies still matter. If a staff member leaves, their credential should be removed promptly, not left active until the next monthly review.
Cards can also support visual identification where required, although a printed photo badge is not proof that the right person is using it.
PINs and mobile options have different risks
A PIN keypad can avoid carrying a fob, but codes are easily shared or observed. It works best as part of multi-factor authentication, not as the sole protection for a high-risk door.
Mobile credentials can be convenient for employees who already carry a work phone. They are useful for temporary permissions and remote administration. However, procurement teams should check device compatibility, battery failure arrangements, enrolment processes and whether a subscription applies.
Card and fob entry isn’t old-fashioned if it is reliable, easy to replace and suited to the site.
Life safety and data protection must be designed in
Security systems can create risk when treated as an isolated package. Access control touches emergency escape, staff monitoring and personal data. Agree those responsibilities before ordering hardware.
Emergency egress comes before security
Electromagnetic locks, electric strikes and controlled fire exits must never trap people. The building’s fire risk assessment, fire strategy and door design should determine the locking arrangement.
Manchester Fire and Rescue Service states in its fire safety guidance documents that doors normally secured by electromagnetic locks should release when the alarm sounds, and override switches should be checked. The exact arrangement depends on the door, occupancy and fire strategy.
A controlled exit is not a safe exit unless people can leave without a credential during an emergency.
The responsible person should involve the fire-risk assessor, installer and relevant building professionals. The Fire Safety (England) Regulations 2022 guidance is useful context, but it doesn’t replace site-specific advice.
Biometric readers need a defensible case
Fingerprint recognition and facial recognition hardware can remove the problem of lost cards. Biometric readers also create greater obligations. Facial recognition can remove the need for physical cards, but it isn’t automatically appropriate.
Where biometric data is processed to uniquely identify someone, it is special-category data, so UK GDPR requirements apply.
The ICO says organisations must complete a DPIA when using biometric data to identify workers. Its guidance on biometric time and access control sets this out plainly.
Any proposed deployment of biometric readers needs a documented necessity and proportionality case. A DPIA should consider whether biometric access is necessary, whether a less intrusive credential would work and the lawful basis for processing. It should also address how facial recognition templates are protected, who can access the data and when it will be deleted. Obtain appropriate data-protection advice for the particular use case.
Plan installation and integration before choosing hardware
A reader and lock can look tidy on a drawing. The difficult parts of access control installation are usually hidden, including door condition, power supplies, cable routes, escape hardware and handover responsibilities.
Start with a proper door survey
A survey should identify the door type, frame, hinges, existing lock, fire rating, traffic volume and how people leave the area. A heavy external steel door and a glazed internal office door need different hardware.
Confirm where controllers and power supplies will be located. Decide how doors will release during fire alarm activation, power loss and emergency evacuation. Existing cabling may be reusable, but that should be tested rather than assumed.
A phased installation can reduce disruption, especially where a building remains occupied. Agree access arrangements, out-of-hours work, testing and handover before the first door is taken out of service.
Integrate time and attendance with care
Access events can feed time and attendance or payroll platforms, but access data doesn’t automatically prove attendance. Someone entering a building doesn’t prove they started work at that moment, nor does a missed swipe explain an absence.
Ask the supplier to confirm the exact connector, data fields, synchronisation frequency and error handling within the access control software. HR, payroll and security teams should agree who owns the data and who corrects exceptions.
The ICO’s worker monitoring guidance is relevant where entry records are used to monitor working patterns. Tell staff clearly what is collected, why it is needed and how long it will be kept.
Access control costs in the UK: look beyond the first quote
Installed pricing varies widely because every door has its own conditions. A basic standalone single-door system often falls around £800 to £1,500 installed. Networked card-based systems commonly sit around £1,500 to £3,000 per door.
Packaged access control kits may show a lower headline price. That figure isn’t the cost of a correctly installed and supported commercial door.
Those are indicative market ranges, not fixed tariffs. A well-prepared door with nearby power costs less than a fire-rated entrance requiring new cabling, specialist locking hardware and integration work.
What changes the installed price
| Cost factor | Why it affects the quote |
|---|---|
| Door and frame condition | Fire-rated, glazed, external and high-traffic doors may need different hardware. |
| Cabling and power | Long routes, difficult containment and new power supplies add labour. |
| System architecture | Network controllers, licences and remote administration cost more than standalone units. |
| Integration | HR, payroll, CCTV or intercom connections need configuration and testing. |
| Support and hardware warranty | Check exclusions, replacement hardware and the conditions needed to keep cover valid. |
The useful comparison is not price per reader. It is the cost of a working door, correctly installed and supported.
Price the next five to ten years
Request a total-cost schedule covering hardware, installation, software licences, mobile credential fees, maintenance, replacement cards or fobs, batteries, call-out rates and training. Ask whether a system can be extended with another door controller, or whether a later expansion requires a new platform.
Supplier support deserves the same scrutiny. Find out who answers a fault call, the response times, spare-parts availability and whether your team can manage routine changes without paying for every amendment.
Questions that expose weak quotations
A supplier should be comfortable answering practical questions in writing:
- Which doors will remain operational if the network fails, and for how long?
- How will each controlled exit release during a fire alarm, power failure or emergency evacuation?
- What licence, subscription or support charges apply after year one?
- Does the quotation include visitor management, such as temporary passes, host notifications and visitor records?
- Who owns the audit data, where is it stored and how can it be exported?
- Can the system connect with existing time-and-attendance software, and what work is excluded from the quoted price?
- Which parts are covered by warranty, and what maintenance is required to keep that cover valid?
Vague answers are a warning. A good proposal identifies exclusions, dependencies and site responsibilities before work starts.
Frequently asked questions
Is a door entry intercom the same as access control?
No. An intercom lets a visitor call someone inside and request admission. Access control grants or denies entry against pre-set permissions and records the event. Many commercial buildings use both at the main entrance.
Can access control systems work with payroll software?
They can, but compatibility depends on the access control software and the payroll or time and attendance platform. Confirm the supported integration, data mapping, approval process and handling of missed or disputed events before relying on it for pay calculations.
Are facial recognition readers lawful in UK workplaces?
They’re not automatically unlawful, but a facial-recognition deployment requires more than a supplier’s assurance. The ICO says facial recognition used to identify workers requires a lawful basis and a separate condition for processing special-category data. Read the ICO’s biometric recognition guidance and obtain appropriate professional advice before deployment.
Choose the system that remains manageable
The strongest access control solutions aren’t necessarily the ones with the longest feature list. They’re the ones your team can administer properly, your staff can use without friction and your building can safely rely on during an incident.
For most commercial buyers, that means treating access control as part of wider security solutions, while prioritising reliable permissions, clear audit trails, safe egress and accountable supplier support.
0 Comments