Visitor management systems: from paper list to QR check-in

In many companies, visitors still sign a paper book at reception: name, company, host, time in, time out. It looks simple and cheap. In practice it causes three problems at once: data protection, security and fire safety. A digital visitor management system solves all three and saves reception time as well.

The problems with the paper visitor book

Data protection. Every visitor can read the names, companies and times of everyone who signed before them. Under the GDPR that is a disclosure of personal data to unauthorised persons. Old books are rarely deleted on schedule, and nobody can say who had access to them.

Security. A handwritten entry proves nothing. Reception cannot easily check whether a visitor was expected, whether the host is actually in the building, or whether someone is still on site after the meeting ended.

Fire safety and evacuation. In an emergency, the fire brigade and the evacuation officer need to know who is in the building. A paper book at an unattended reception desk, with forgotten check-outs, does not give a reliable answer.

On top of that, the process is slow: visitors wait while reception phones the host, writes a badge by hand and explains the safety instructions.

What a digital visitor management system does

A modern system covers the whole visit, from invitation to check-out:

1. Pre-registration. The host invites the visitor from a web portal or calendar. The visitor receives an email with date, address, parking information and a personal QR code.
2. Check-in. At reception, the visitor scans the QR code at a tablet kiosk or at the reception desk. Walk-in visitors register on the kiosk themselves.
3. Safety and documents. The visitor confirms safety instructions, house rules or a non-disclosure agreement digitally, if required.
4. Host notification. The host gets an instant message by email, app or chat that their visitor has arrived.
5. Badge. A visitor badge is printed or shown digitally, optionally with access rights for specific doors or zones.
6. Check-out. The visitor checks out at the kiosk or reception; open visits are flagged automatically at the end of the day.
7. Evacuation list. At any moment, authorised staff can open a current list of everyone on site, on a phone, even outside the building.

GDPR done properly

A digital system can protect visitor data much better than paper, if it is set up correctly:

• No visibility for other visitors. Each visitor sees only their own data.
• Data minimisation. Ask only for what you need: usually name, company, host and time. No date of birth, no ID copy unless a specific legal reason requires it.
• Automatic deletion. Define retention periods, for example a few weeks for normal visits, and let the system delete data automatically.
• Information. Show the privacy notice under Art. 13 GDPR at check-in.
• Access control and hosting. Only reception, security and hosts see visit data, and the data is stored in the EU.

Integration with parking, access and buildings

Visitor management becomes more valuable when it is connected to the rest of the building:

• Parking: the visitor's licence plate is registered with the invitation, and an ALPR camera opens the barrier on arrival. See our article on ALPR parking and plate recognition.
• Access control: the badge or QR code opens only the doors the visitor needs, only during the visit.
• Workspace and room booking: the meeting room is booked together with the invitation.
• Facility dashboards: occupancy and visitor numbers per site and time help plan reception staff, cleaning and catering.

What to look for when choosing a system

• Ease of use for visitors, reception and hosts. If check-in takes longer than signing the book, people will avoid it.
• Multi-site and multi-tenant capability for companies with several buildings or for facility service providers.
• Languages: at least German and English on the kiosk and in invitations.
• Offline capability at reception, so check-in works even when the network is down.
• Interfaces to calendars, access control, parking and your directory (e.g. Microsoft 365).
• Hosting and data processing agreement in the EU, with clear retention settings.
• Licensing that fits your sites and modules rather than charging for features you do not need.

Example: visitor management in Smart DigiBuild

Visitor management is one module of Smart DigiBuild, the smart building platform we develop for Four Corners Technology (4CT): invitations with QR codes, self-service kiosk check-in, host notifications, an always-current evacuation list and GDPR-compliant retention. It works on its own or together with the washroom monitoring, ALPR parking and workspace modules, on one dashboard. Need visitor management integrated with your own systems? We build it.

Plan your visitor management