Commercial access control system design defines who can enter, which openings are controlled, when access is allowed, how doors behave during outages or emergencies, and how activity is recorded. Begin with a door-by-door assessment, then specify credentials, locks, readers, power, network connections, integrations, testing and administration before comparing proposals.
What commercial access control system design covers
A commercial access control system authenticates a person or visitor, checks authorization for a specific opening and time, releases the door when permitted, and records the event. A complete design also addresses visitors, contractors, restricted areas, cameras, alarms, infrastructure, safety and ongoing user management.
- Which doors, gates, elevators and interior areas require control?
- Who needs access, during which schedules?
- Which credential suits employees, contractors and visitors?
- Can existing locks, frames, cabling and power be reused?
- How will cameras, alarms, intercoms and visitor management connect?
- What happens during power, network or cloud outages?
- Who will issue, change, suspend and remove credentials?
For Ontario projects, accessibility and life-safety coordination belong in the design from the beginning. The 2024 Ontario Building Code includes accessibility requirements for most new construction and extensive renovations, including barrier-free paths of travel. Review the Ontario Building Code accessibility requirements and provincial accessibility guidance for industry with the appropriate project professionals.
Start with people, risk and property workflow
The best design starts with how people use the property, not with a preferred reader or software platform. Document employees, visitors, contractors, shifts, sensitive rooms, delivery routes and the events the business may need to investigate later.
- Where do visitors wait, and who authorizes entry?
- Which contractors need temporary access with expiry dates?
- Which rooms contain records, medication, inventory or network equipment?
- Do managers administer one property or several?
- What evidence matters: an entry, denied attempt, forced door or visitor release?
A six-stage design process
- Assess the site: inspect doors, frames, routes, readers, network paths and power.
- Create an opening schedule: record every proposed controlled door, gate, elevator or restricted area.
- Select access methods: match credentials, readers, intercoms and locks to each opening.
- Design infrastructure: plan controllers, power, backup power, contacts, request-to-exit devices and cabling.
- Define failure behaviour: document egress, emergency release, fire alarm coordination and recovery.
- Commission and hand over: test every opening, label equipment, train administrators and provide records.
A qualified installer may provide the site assessment, tailored design, installation, configuration, walkthrough and remote-access setup. Treating handover as part of design avoids leaving critical procedures until the equipment is already installed.
Decide which openings need control
Not every opening needs the same system. Consider the users, consequence of unauthorized entry, audit requirement and practical demands of the door or gate.
| Opening | Design questions | Possible approach |
|---|---|---|
| Staff entrance | Who uses it, and do shifts vary? | Card, fob or mobile credential with schedules and door monitoring. |
| Visitor entrance | Who verifies visitors? | Intercom, receptionist release, camera association and visitor workflow. |
| Server or electrical room | Who needs entry, and must every attempt be recorded? | Restricted credential group, contact and suitable higher-assurance reader. |
| Loading door | Will deliveries, forklifts or shifts affect operation? | Commercial hardware, scheduled access, monitoring and camera coverage. |
| Vehicle gate | Are users on foot, in vehicles or both? | Gate interface, keypad, credential reader or intercom after site validation. |
| Elevator | Should users be restricted by floor or time? | Elevator interface coordinated with building and emergency requirements. |
| Multi-tenant area | Who controls permissions and audit access? | Separate user groups, administrative roles and documented responsibility. |
A reader authorizes routine users without staff intervention. An intercom suits a visitor who must communicate with someone before release. Plan that workflow before choosing devices. See the guide to intercom integration with access control for the relationship between visitor communication and entry control.
Choose credentials by how the site operates
There is no universal best credential. Evaluate how each option is issued, replaced, shared, revoked and used by employees, visitors and contractors.
| Method | Strengths | Trade-offs |
|---|---|---|
| Cards and fobs | Familiar, simple to issue and practical for scheduled staff access. | Can be lost, loaned or left active without disciplined replacement and offboarding. |
| Mobile credentials | Reduce reliance on physical cards and suit phone-carrying users. | Depend on phones, accounts and device management. Plan for dead batteries and visitors without compatible devices. |
| PINs | Convenient where carrying a credential is impractical. | Codes can be observed or shared. Individual codes provide better accountability than one shared code. |
| Biometrics | Can connect access to a physical characteristic. | Require careful privacy, hygiene, accessibility, enrolment and failure planning. |
| Video intercom | Supports visitor communication and release. | Needs a defined response workflow and does not replace employee credential management. |
- Office: use cards, fobs or mobile credentials for employees, with separate visitor handling.
- Retail: apply role-based access to stockrooms, offices and staff areas.
- Warehouse: match hardware to shifts, loading activity and safe movement.
- Clinic: separate public, staff, records, medication and service areas.
- Industrial site: coordinate employee permissions with gates, vehicles, perimeter and restricted areas.
- Multi-site operator: standardize roles and offboarding while allowing each property to differ.
Plan architecture, network and door hardware together
Cloud, on-premise and hybrid architectures can all work. Choose according to remote administration, local operation, connectivity, site count and maintenance responsibility.
| Architecture | Useful when | Resolve before approval |
|---|---|---|
| Cloud-managed | Remote or multi-site administration is important. | What continues without internet or cloud access? Who manages accounts and support? |
| On-premise | Key functions should remain at the property. | Where are servers or controllers, and who handles updates and backups? |
| Hybrid | Local door operation must coexist with selected remote management. | Which functions are local, remote or synchronized after reconnection? |
Each opening may require a controller, power supply, backup battery, request-to-exit device, door contact, reader, network connection and interface with an existing door or gate operator. Inspect the frame, hinges, closer, strike, panic hardware and cable route before assuming compatibility.
Network and power planning should happen together. Commercial security installations commonly depend on cable runs, network equipment, professional termination and testing. A well-planned system should account for access control integration, reliable wired infrastructure and centralised recording from the outset.
Design safe failure behaviour and continuity
Fail-safe and fail-secure describe what a lock does when power is removed. Neither is universally correct. The final choice depends on the opening, egress path, occupancy, hardware, fire and life-safety interfaces, security risk and applicable requirements.
- Can occupants exit without presenting a credential?
- What happens if the controller loses power?
- What happens if the network or cloud connection fails?
- Does a fire alarm interface affect the opening?
- Is there an authorized manual or mechanical override?
- Which doors need battery backup?
- How will administrators learn that a lock, controller or connection has failed?
- How is normal operation restored after an outage?
A network outage is not the same as total power loss. Depending on the architecture, local door decisions may continue during a communication interruption, while events are stored and synchronized later. Document the exact user experience, retained records and recovery process.
Emergency release, fire alarm interfaces and egress are safety-critical matters. The installer, door hardware specialists, fire and life-safety professionals, building team and relevant authorities may each have a role in confirming the final arrangement.
Integrate access control with the security system
Integration is valuable when it improves a defined workflow. A door event can be associated with nearby video, a forced door can trigger an alarm workflow, an intercom can support visitor release, and a multi-site administrator can review activity across properties.
| Integration | Purpose | Question |
|---|---|---|
| CCTV | Relate access events to relevant footage. | Which opening needs coverage, and which camera view is correct? |
| Alarms | Escalate forced or held-open doors. | Who receives the event, and what response follows? |
| Intercom | Support visitor communication and release. | Who answers during and outside business hours? |
| Visitor management | Issue temporary permissions and record visits. | Who sponsors the visitor, when does access expire and what is retained? |
| Remote administration | Manage users and events across sites. | How are administrator permissions protected? |
The useful outcome is not connecting every platform. It is defining what each event means and who responds. For portfolio operators, the security integration planning approach for property managers helps distinguish common governance rules from site-specific hardware and workflows.
For additional educational context on cameras, access events and security operations, review this access control integration overview. Related reading: Access Control Integration Basics: How Entry Systems Work with Cameras and Security Teams.
Use a door schedule as the design brief
A door schedule gives an installer something more useful than a request for “a complete system.” This example is hypothetical, not a True Vision project or a recommendation for a specific building.
| Opening | Users and schedule | Credential or workflow | Hardware and safety | Infrastructure |
|---|---|---|---|---|
| Staff entrance | Employees and approved shifts. | Card, fob or mobile credential. | Confirm closer, lock, free egress and emergency release. | Reader, contact, controller, network, backup power and camera. |
| Visitor entrance | Visitors during reception and occasional after-hours callers. | Video intercom and receptionist release. | Confirm accessible approach and emergency operation. | Intercom, camera, network, power and response process. |
| Server room | IT staff and security administrators. | Individual restricted credential. | Confirm exit method, override and forced-door alert. | Reader, contact, controller, audit record and suitable camera. |
| Loading door | Warehouse staff, delivery windows and contractors. | Role-based credential and schedule. | Check high-use hardware and held-open timing. | Reader, contact, camera, network, power and alarm workflow. |
| Vehicle gate | Employees, vendors and visitors. | Validated gate credential, intercom or site-suitable method. | Confirm operator compatibility, pedestrian separation and emergency access. | Gate interface, communications, power and camera coverage. |
For every row, add the physical location, cable route, controller location, power source, user groups, schedule, camera view, visitor process, emergency procedure and expansion requirement. Mark assumptions that require on-site validation so they do not become hidden exclusions in a quote.
Understand cost without relying on a headline price
Commercial access control is custom quoted because properties differ. Door count is only one factor. Hardware, gates, cabling, power, software, integrations, programming, testing and support can change the scope substantially.
- Door, gate, elevator and frame condition.
- Electrified locks, strikes, panic hardware and gate operators.
- Readers, controllers, contacts, request-to-exit and emergency release.
- Cable distance, access, wall construction, trenching and network changes.
- Power supplies, backup power and electrical work.
- Cloud, on-premise or hybrid software and licensing.
- Intercom, CCTV, alarm, visitor and multi-site integration.
- Programming, credential enrolment, testing and training.
- Documentation, warranty, maintenance and support.
- Work in occupied areas, restricted site access and operating-hour coordination.
Ask each installer to state inclusions and exclusions for every opening. A useful proposal identifies hardware, cable assumptions, controller and power locations, software, programming, integrations, testing, training, documentation, warranty and ongoing support. Ask how it handles existing hardware, emergency release, outages, former employees and future doors.
Commission the system before relying on it
Commissioning should cover every controlled opening, not only the main entrance.
- Test valid, expired, disabled and unauthorized credentials.
- Verify schedules, relocking, door contacts, forced-door alerts and held-open timing.
- Test request-to-exit and confirm normal egress records correctly.
- Test emergency release and applicable fire alarm interfaces.
- Test power loss, network interruption and recovery.
- Confirm the correct camera, alarm or intercom response.
- Verify timestamps, user names, denied events and administrator visibility.
- Confirm remote administration where included.
Handover should include labelled equipment, an updated door schedule, administrator roles, credential procedures, outage instructions, test results, drawings and training. If an existing system is changed, document what was retained, removed, replaced or reserved for future work. A controlled transition matters more than a simple hardware swap. See the security system replacement planning guide for related cutover considerations.
Plan access control as a continuing programme
- Enrolment: define approval, information and role assignment.
- Role changes: update permissions when duties or shifts change.
- Offboarding: promptly disable employee, contractor, mobile, PIN and administrator access.
- Lost credentials: suspend and replace them through a controlled process.
- Temporary access: set expiry dates for visitors and contractors.
- Permission reviews: compare active access with current responsibilities.
- Audit records: decide who can review events and why.
- Updates: assign responsibility for software, firmware and controllers.
- Maintenance: inspect locks, contacts, readers, power, batteries and network connections.
- Expansion: reserve capacity and consistent naming for future openings.
Multi-site organizations should standardize roles, approval rules and offboarding while allowing each building's doors and workflows to differ.
Questions to settle before requesting a quote
- What are the property plans, operating hours and site constraints?
- How many doors, gates, elevators and restricted rooms are involved?
- Which user groups, visitors and contractors need access?
- Which credentials are acceptable?
- What existing locks, operators, cameras, alarms, intercoms and cabling can be inspected?
- Where are the network closets, cable routes and power sources?
- Which integrations and responses are required?
- How should egress, emergency release and outages be handled?
- What future doors, sites and central administration are planned?
- What testing, documentation, training, maintenance and support are included?
Ask the installer to identify every assumption requiring site validation. Accessibility and life-safety decisions should be coordinated for the particular building and use, not copied from a generic checklist.
Frequently asked questions about commercial access control design
How many doors should a commercial system control?
Control openings where authorization, accountability or restricted access matters, then size the system for confirmed growth. Start with a door schedule covering staff routes, sensitive rooms, loading areas, gates, parking, elevators and tenant boundaries.
Can access control use existing hardware and cabling?
Sometimes, but compatibility must be inspected and tested. Existing hardware may lack suitable electrification, monitoring or egress, while cabling may not meet controller, network or power requirements. State all reused and replaced components in the proposal.
Should a small business choose cloud or on-premise access control?
Cloud management suits remote administration and simple multi-site oversight when connectivity and account responsibilities are acceptable. On-premise or hybrid designs suit businesses prioritizing local control or existing infrastructure. Ask what continues during an internet outage.
What happens when an employee leaves?
Disable or remove the credential promptly, including mobile access, PINs, visitor permissions and administrator accounts. Assign responsibility, record the change and review shared credentials the person may have known.
How should the system behave during an outage?
Document egress, emergency release, backup power, local decisions, event storage and recovery for each opening. Network, cloud and total power outages can produce different results, so do not accept a generic fail-safe or fail-secure statement.
Plan the next site assessment
A useful brief identifies openings, people, credentials, infrastructure, safety behaviour, integrations, testing and lifecycle responsibilities before equipment is priced. That gives you a fairer basis for comparing proposals and reduces the chance of discovering a critical cable route or outage decision after installation begins.
True Vision Surveillance canada inc is based in Brampton and offers commercial security, access control and structured cabling. To discuss your requirements, review the company's commercial security services after preparing your opening schedule.