Visitor Management System
A visitor management system replaces the paper register at your reception with a digital record of who entered your premises, who authorised them, when they arrived and when they left — a record that survives an audit, a police enquiry or an insurance claim. Foxnet Securitas designs, supplies and commissions visitor management for corporate offices, factories, hospitals, data centres, bank branches and gated campuses, with field teams across 15+ Indian cities. Because we also install the access control, surveillance and fire systems behind the lobby, the visitor platform we deploy is wired into doors, cameras and evacuation procedure rather than sitting on a tablet by itself, disconnected from everything that matters during an incident.
What we deliver
- Self check-in kiosks at reception — tablet or all-in-one terminals with QR and OTP verification, on-screen consent capture, photograph, badge printing and, where required, a turnstile or boom barrier release on successful check-in.
- Pre-registration and invite flows so a host raises a visit in advance and the guest receives an emailed or WhatsApp invite carrying a QR pass, parking and gate instructions, and any site rules they must accept before arrival.
- Identity capture with OCR of government-issued ID, controlled to the minimum field set the site genuinely needs, plus photo capture and optional signature on an NDA or safety declaration presented at the kiosk.
- Watchlist and denied-entry screening that checks arrivals against an internally maintained list of blocked persons, ex-employees under dispute or vendors with a suspended pass, and routes any hit to a security supervisor rather than silently refusing the visitor.
- Host notification the moment a guest checks in, delivered by email, SMS, Microsoft Teams, Slack or the mobile app, with accept, delegate or reject options so the front desk is not left phoning extensions.
- Contractor and labour induction workflows covering document validity (police verification, ESI/PF records, height-work or hot-work permits, insurance), a safety induction video with a pass or fail quiz, and automatic blocking at the gate when a document expires.
- Temporary credential issue through access control integration, so a visitor badge is a real credential valid for named doors and a fixed time window, and dies automatically at check-out or end of day.
- Live on-site register and evacuation roll-call, exportable to a marshal's phone or printed at the assembly point, so a fire evacuation accounts for visitors and contractors as well as employees.
- Multi-site administration with per-location policies, common reporting, Active Directory or HRMS synchronisation of the host directory, and role-based access to visitor records with an audit trail of who viewed or exported what.
How a Foxnet deployment works
- Site survey and requirement capture. We map every point a person can enter — main lobby, contractor gate, loading dock, basement lift lobby — count peak arrival rates, note who currently signs people in, and record what your legal, HR and EHS teams need the record to prove. Visitor categories are agreed here, because guests, contractors, interview candidates, drivers and auditors need different flows.
- Design and BoQ. You receive a flow diagram per visitor type, kiosk and desk hardware placement with power and network drops, badge and label specification, an integration map to access control, surveillance and fire, a defined data retention schedule, and a line-item bill of quantities separating hardware, licences and implementation.
- Installation and commissioning. Kiosks, badge printers, scanners and cameras are mounted and cabled, the platform is configured with your visitor types, consent text, approval rules and notification templates, host records are synchronised, credential rules are tested against real doors, and the system is run in parallel with the paper register for a short shadow period.
- Handover, training and documentation. Reception staff and security officers are trained on kiosk assistance, walk-in handling, watchlist hits, badge reprinting and evacuation reports. Administrators are trained on visitor types, retention settings and reporting. You receive as-built drawings, configuration records, a data-flow note for your privacy file and a signed test report.
- AMC and ongoing support. A typical engagement structure covers preventive visits, printer and scanner servicing, consumables planning, platform version upgrades, periodic review of retention and purge jobs, re-training after reception turnover, and configuration changes as new gates, tenants or contractor categories appear on site.
Why the paper register fails an audit
The bound visitor book at reception fails on four counts, and every one of them shows up when something goes wrong. It is not searchable: asking who visited the third floor on a Tuesday eleven months ago means a person turning pages. It is not verified: the name, company and phone number are whatever the visitor chose to write, and nothing checks them. It is not private: the previous twenty entries, including names, phone numbers, vehicle numbers and host details, are readable by every subsequent visitor, which is a disclosure of personal data by design. And it has no exit discipline — the out-time column is the first thing to be abandoned on a busy morning, so the register cannot tell you who is still in the building when the fire alarm sounds.
A digital visitor management system fixes all four: records are indexed and searchable, arrivals are verified by OTP or a pre-issued QR pass, each visitor sees only their own screen, and check-out is enforced by badge return, turnstile exit or automatic end-of-day closure. For ISO, customer security audits and client due-diligence questionnaires — routine in IT/ITES, BFSI and pharma supply chains — an exportable, timestamped, access-controlled visitor log is usually the evidence being asked for.
Technical specifications and standards
The reference points below are the ones we design against. Standards are attributed to the bodies that publish them; what is applied to your site is confirmed at design stage.
| Area | Reference point | Why it matters |
|---|---|---|
| Check-in methods | QR code pass (pre-registered), OTP to mobile (walk-in), kiosk self-service, assisted desk mode, and vehicle or driver check-in at the gate | Peak lobby throughput is set by the slowest method; a site with a 9 a.m. rush needs pre-registration to carry most of the load. |
| Credential handover | Time-bound cards over OSDP v2 (SIA) readers, mobile credentials over BLE or NFC, or a printed QR badge read at the turnstile | A visitor pass that is a genuine credential can be scoped to named doors and expired automatically; a laminated card cannot. |
| Badge printing | Direct thermal adhesive labels (self-expiring stock available) or PVC card printers where the pass is returned and reused | Self-voiding labels remove the recurring problem of yesterday's visitor badge being reused to walk past a guard. |
| Identity capture | OCR of ID documents with configurable field masking; Aadhaar handled only in masked or offline-verification form, and only where there is a lawful basis | Collecting and storing full ID numbers you do not need converts a lobby record into a high-risk personal data store. |
| Screening | Internally maintained watchlist and blocklist matching, repeat-visitor recognition, and optional face match against the pre-registration photo | Screening rules must be defined by the client's policy and applied consistently, with a human decision on every hit. |
| Integrations | REST APIs and webhooks to access control, video management, Active Directory or Azure AD, HRMS, Microsoft Teams, Slack, SMS and email gateways | The host directory must come from a system of record; manually maintained employee lists rot within a quarter. |
| Video linkage | Check-in events tagged against ONVIF-compliant camera streams covering the reception and turnstile line | An investigation needs the badge event and the footage of the person who used it, retrieved together rather than reconciled by hand. |
| Evacuation | Live on-site roll-call triggered by a fire alarm input, delivered to marshal devices and the assembly point printer | Headcount at the muster point is the one number that matters during an evacuation, and visitors are the people nobody knows. |
| Resilience | Offline kiosk mode with local queueing and later sync, UPS-backed reception hardware, and a documented manual fallback procedure | A lobby cannot stop working because a WAN link dropped; the fallback must be designed rather than improvised. |
| Data protection controls | Digital Personal Data Protection Act, 2023 (India); TLS in transit and encryption at rest; role-based access; automated retention purge; exportable consent and access logs | Visitor records are personal data; the platform must be able to prove notice, consent, retention limits and controlled access. |
Visitor data and the DPDP Act 2023
India's Digital Personal Data Protection Act, 2023 applies squarely to reception. A visitor's name, mobile number, photograph, employer, vehicle number and ID details are personal data, and the organisation collecting them at the front desk is acting as a data fiduciary. Most visitor management deployments in India were designed before this legislation and quietly do the opposite of what it expects: they collect more than they need, keep it indefinitely, present no notice, and let anyone with a reception login browse the lot. Retro-fitting compliance after the platform is live is far more expensive than configuring it correctly at design stage, which is why we treat the following as design inputs rather than legal garnish.
Notice and consent at the point of collection
The visitor should see a plain-language notice before they hand anything over — what is being collected, why, how long it is kept and who to contact about it — and give a clear affirmative action, not a pre-ticked box. We configure that notice on the kiosk screen and in the pre-registration invite, in English and in the regional language where the site needs it, and store the consent record with a timestamp against the visit so it can be produced later.
Purpose limitation and data minimisation
Collect what the purpose requires and nothing more. A visitor to a sales meeting does not need their ID number recorded; a contractor entering a live plant probably does. We configure field sets per visitor type rather than applying one maximal form to everybody, mask ID numbers where only verification is needed, and avoid capturing Aadhaar unless there is a lawful basis and an offline verification path. Data collected for entry control should not quietly become a marketing list.
Retention, erasure and access
Personal data should not be kept once the purpose is served and no legal requirement compels retention. We set an explicit retention period per record type — visitor logs, ID images, photographs and consent records may each warrant a different period — and enable an automated purge that actually deletes rather than archives. Access to visitor records is role-based and logged, so a request from a data principal, an internal audit or a regulator can be answered with evidence. We also configure the platform to support erasure and correction requests, and to record the grievance contact your organisation publishes. Foxnet configures the system to support these obligations; the legal determination of your basis, retention periods and notice wording should be made with your own counsel.
Where we deploy
Foxnet Securitas delivers visitor management system implementations with field teams across 15+ Indian cities, including Delhi NCR, Noida and Gurgaon, Mumbai, Pune, Bangalore, Hyderabad, Kolkata, Chennai and Ahmedabad. Multi-site clients get one configuration standard rather than a different lobby experience in every city: the same visitor types, the same consent text, the same badge design, the same retention rules and the same reporting. That matters more than it sounds, because a group security head answering a customer audit needs one answer about how visitors are handled, not nine.
The requirement changes sharply by vertical. Manufacturing and warehousing sites are dominated by contractor and driver flows, where document validity and safety induction do the heavy lifting and the gate, not the lobby, is the real control point. IT/ITES and fintech campuses run high volumes of pre-registered guests and interview candidates and care about NDA capture and turnstile integration. BFSI branches and back offices arrive with prescriptive internal standards on identity checks and record retention. Hospitals need attendant passes and ward-level limits rather than a generic guest badge. Government and data centre sites need escorted-visit enforcement, where a visit cannot start until a named escort accepts responsibility.
Visitor management is usually specified alongside the access control estate rather than after it. Our work at Avalara in Pune, covering roughly 90,000 sq ft with cloud access control and CCTV, is a representative example of the lobby, the doors and the cameras being designed as one system, and the Sber Bank Bangalore banking-grade security transformation shows the same approach under a regulated brief where identity checks and record-keeping are non-negotiable.
Indicative investment
Visitor management pricing has two parts: a one-time cost for kiosk hardware, printers, scanners, integration and implementation, and a recurring software subscription usually charged per site or per entry point rather than per visitor. The figures below are indicative ranges only — actual pricing depends on site survey, and are published so you can sanity-check a budget before procurement.
Indicative ranges by deployment tier
| Tier | Typical scope | Indicative first-year cost |
|---|---|---|
| Single reception, software-led | One tablet kiosk, badge printer, pre-registration and host notification, no access control integration | ₹75,000 – ₹2.5 lakh |
| Corporate office, integrated | 2–4 kiosks, ID capture, watchlist, AD sync, temporary credentials into access control, turnstile release | ₹3 lakh – ₹9 lakh |
| Plant or campus with contractor flow | Lobby plus contractor gate and driver check-in, induction and permit workflows, document expiry blocking, evacuation roll-call | ₹8 lakh – ₹25 lakh |
| Enterprise multi-site | 10+ locations, central policy and reporting, SSO, HRMS and VMS integration, DPDP-aligned retention automation | ₹25 lakh upwards |
Indicative unit-level ranges
| Line item | Indicative range |
|---|---|
| Tablet kiosk with floor or desk stand | ₹25,000 – ₹90,000 per position |
| Thermal badge printer and label stock | ₹18,000 – ₹60,000 plus consumables |
| ID scanner or document camera | ₹12,000 – ₹45,000 per desk |
| Visitor management software subscription | ₹15,000 – ₹1,20,000 per site per annum by module set |
| Access control and HRMS integration effort | ₹40,000 – ₹3,00,000 one-time by number of systems |
| Tripod turnstile or speed gate at the visitor lane | ₹60,000 – ₹6,00,000 per lane |
What moves the number up or down
Cost rises with the number of entry points rather than the number of visitors, with contractor and permit workflows, with turnstile or barrier automation, with integrations into systems that have no modern API, with multilingual kiosk content, and with any requirement for on-premise hosting instead of cloud. Cost falls where an existing tablet estate or reception PC can be reused, where pre-registration handles most arrivals so fewer kiosks are needed, where one configuration is replicated across similar sites, and where access control from the same integrator is already in place so the credential integration is straightforward rather than bespoke.
Support is quoted separately from the capital cost. Annual maintenance contracts in this market are commonly priced as a percentage of installed system value, typically in the region of 8–15% per annum depending on whether the contract is comprehensive (spares and consumables included) or non-comprehensive (labour and visits only), and how many sites are covered. Software subscription renewals sit alongside that rather than inside it. We quote both at design stage so total cost of ownership is visible from the start.
Frequently asked questions
What is a visitor management system and how does it work?
A visitor management system digitally records every person entering your premises. A host pre-registers the guest, who receives a QR pass; on arrival the visitor scans it at a kiosk or verifies by OTP, accepts your consent notice, has a photo taken and receives a printed badge or temporary credential. The host is notified automatically, and the visit is closed at check-out, leaving a searchable, timestamped record.
How much does a visitor management system cost in India?
A single reception with one kiosk and badge printer typically falls between ₹75,000 and ₹2.5 lakh in the first year, while an integrated corporate office with two to four kiosks and access control integration commonly runs from ₹3 lakh to ₹9 lakh. Plants with contractor and driver workflows sit higher. Cost is driven by entry points, integrations and workflows, not visitor volume. These are indicative ranges only.
Does a visitor management system comply with the DPDP Act 2023?
Compliance depends on configuration, not on the product badge. Under India's Digital Personal Data Protection Act, 2023 the organisation collecting visitor data is the data fiduciary, so the system must present a clear notice, capture and store consent, collect only the fields the purpose requires, enforce a defined retention period with genuine deletion, and log access to records. We configure these controls at design stage; the legal determination should be made with your own counsel.
Can visitors be given temporary access control credentials?
Yes. Where the visitor platform is integrated with access control, check-in issues a real credential — a time-bound card, a mobile pass over BLE or NFC, or a QR read at the turnstile — scoped to named doors and a fixed validity window. The credential expires automatically at check-out or end of day, which removes the common failure of visitor cards staying live for months after the visit.
How does an e-gatepass system handle contractors and labour?
Contractor flows differ from guest flows. The system holds each worker against their contracting firm, checks document validity such as police verification, insurance and work permits, requires a safety induction with a pass or fail record before first entry, and blocks entry automatically when a document expires or a permit lapses. Daily gate passes are then issued against that verified record rather than being written by hand.
Can the system produce an evacuation roll-call during a fire alarm?
Yes. The live on-site list of visitors and contractors can be triggered by a fire alarm input and sent to fire marshals' phones or printed at the assembly point, so the muster count includes people no department knows by name. Accuracy depends on check-out discipline, which is why we pair it with turnstile-based exit or automatic end-of-day closure rather than relying on visitors remembering.
Related services
- Access Control — the system that turns a visitor badge into a time-bound credential valid on named doors.
- Surveillance & Monitoring — reception and turnstile cameras that let a check-in event be reviewed with its footage.
- Fire Alarm Systems — the alarm input that triggers evacuation roll-call, and the life-safety design behind it.
- Public Addressing — zoned evacuation announcements that direct visitors who do not know the building.