Managing member access outside staffed hours

Offer member access outside staffed hours only when the entitlement, entry route and support arrangement work for that period. A card that opens the main door is one part of the service. Members also need a usable route to their work area, basic facilities, an exit and a way to get help when reception is closed.

Define the after-hours promise

For each membership type, record permitted days, times, entrance and areas. Check whether public holidays, other building entrances or private offices have different rules. Tell members which hours have staff on site and which rely on remote or on-call support. Entry at any hour does not mean the building is continuously staffed.

Confirm arrangements with the building manager where the operator does not control an entrance, lift or alarm. The member's entitlement should match access settings at every controlled point on the route.

Walk the route when reception is closed

Follow the journey a member would make: arrive, use the permitted entrance, reach the work area, use toilets and drinking water, and leave. Check lighting, signs and doors that behave differently after hours. Where someone needs a particular route or facility, check the arrangement with that person. Do not assume the daytime route works for them.

Review the site's emergency instructions for the same period. Applicable requirements depend on the jurisdiction and workplace. Establish who receives an alarm or urgent call and how people on site receive instructions.

Decide how a failed entry is handled

Give members a contact and a fallback if that contact does not answer. The responder needs a way to check current entitlement without asking the member to reveal a reusable credential. Define what the responder may do: explain the correct entrance, check a service alert, arrange authorised assistance or contact the building manager. If the member cannot enter, give the next practical option and an update time.

Record the time, entrance, account or credential reference, reported failure and response. Keep card codes, identity-document images and unrelated personal details out of general incident messages. If the operator is an APP entity, APP 1 requires it to manage personal information in an open and transparent way and have an up-to-date privacy policy. Coverage must be checked for the business.

Control changes and exceptions

A new member, changed work hours, lost card or departed team member should trigger a permission check. Restrict the staff accounts used to administer access to those who need them, and record approval for changes.

For a guest or contractor arriving when reception is closed, check whether the visit is permitted and how admission is authorised. Do not lend a standing member credential as a workaround. If the agreed help route or a basic facility is unavailable, reassess the after-hours arrangement until there is a workable response.

Before relying on the process, schedule an authorised check using the member route and account type involved. Record the date, conditions and result. A successful check at one entrance does not establish that every route and time will work.

Key Compliance Metrics for After-Hours Access