The first site is easy. A door controller, a few fobs, a PC in the office. The tenth site is where multi-site access control either becomes a system or a pile of local logins nobody trusts.
Operators with gyms, warehouses, offices or clinics across the UK usually discover the gap in an audit: a contractor still has a card for a building they left last year, or a manager cannot say who opened a fire door in Leeds because that recorder is on a different software version.
Dacha SSI installs and supports access management as an estate, not as a one-off door. That is how leisure operators such as PureGym keep membership access consistent without slowing people down at the lane.
What breaks when every building is different
- Credentials that cannot be revoked from one place
- Staff who collect a new fob at every site
- Contractors and cleaners on shared PINs
- No single report for who went where, and when
- A leaver process that depends on someone remembering to email the local manager
None of that is fixed by a better looking reader. It is fixed by one database, one permission model, and doors that all speak to it. For city-centre estates, that still has to work with local fire strategy and with products we already support in places such as London access control.
One identity, many doors
People should carry one credential — card, mobile or QR — with rights that change by site, time and role. A regional engineer needs plant rooms after hours. A receptionist does not. A cleaner needs a window on Tuesday. A former employee needs nothing, the same day HR closes the file.
On leisure sites that identity often has to match the membership system, so a cancelled member cannot still walk a speed lane at 1am. On commercial and industrial estates it has to match contractors and visitors, not only employees.
Contractors are where most estates leak
Employees are messy. Contractors are worse: agencies, night cleaners, lift engineers, catering. If they share a fob or a door code, you do not have access control. You have a rumour about who was on site.
Give contractors named, time-boxed credentials. Expiry should be a date, not a hope. Pair doors with cameras at the main entries so an event has a face, not only a card number.
Audits, GDPR and the story you can actually tell
When something goes missing, insurers and operators ask the same question: who had rights, and did those rights still make sense? A single platform gives you that story. Five different controllers give you five CSV files and an argument.
Access data is personal data. Keep it for a defined period, restrict who can export it, and do not treat the door system as a shadow HR file. The security benefit is the live control. The compliance benefit is that you can show what you did.
A practical checklist
- Can you disable one person on every site in one action?
- Do contractors expire automatically, or only if someone remembers?
- Is the membership or HR system linked, or is access a separate spreadsheet?
- Can you produce a who-went-where report for last Tuesday without driving to the building?
- Do fire exits and staff doors raise an event if they stay open?
- If you opened a new site next month, would it join the same system or start another island?
Talk to Dacha SSI
If your estate has grown faster than the door system, a survey will show whether you need a migration or a tidy-up. Call 0333 344 5526 or use the contact form.
