Quick answer
Choose access control by starting with your doors and users, not the brand. Pick credentials (cards, mobile or biometric) that balance security and convenience, decide between cloud and on-prem management, specify door hardware that meets fire and egress requirements, confirm integrations with cameras and HR systems, and ask installers detailed questions about support and ownership.
Key takeaways
- Modern encrypted smart cards and mobile credentials are far harder to copy than older 125 kHz proximity cards.
- Cloud platforms simplify multi-site management and remote administration; on-prem suits strict data-control or offline requirements.
- Door hardware choices such as electric strikes, maglocks and request-to-exit devices affect security, cost and code compliance.
- Every electrified door must still allow free egress in an emergency; involve your local fire authority early.
- Integrations with cameras, visitor management and HR directories are where access control delivers the most value.
What is an access control system?
An access control system decides who can open which doors, and when, and keeps a record of every attempt. It replaces or supplements metal keys with credentials such as cards, phones or biometrics that can be issued and revoked instantly.
A typical system has four parts: credentials carried by users, readers at each door, door hardware that physically locks and unlocks, and controllers and software that make decisions and store logs. The software may run in the cloud, on a local server or in a hybrid of the two.
For San Diego businesses, the most common triggers for a new system are lost keys and rekeying costs, employee turnover, a move to a new suite, insurance or compliance requirements, and the need to manage multiple locations from one place.
Which credential type is right for your business?
Credentials are what users carry and present to a reader. Most organizations end up using more than one type, for example mobile for staff and cards for contractors.
| Credential | How it works | Strengths | Watch-outs |
|---|---|---|---|
| 125 kHz proximity cards and fobs | Reader reads a fixed ID number over low-frequency radio | Inexpensive and widely installed | Easily cloned with cheap tools; generally not recommended for new systems |
| 13.56 MHz encrypted smart cards | Card and reader authenticate with encryption before sharing data | Much harder to copy; can also support printing, lockers and other uses | Higher card cost; confirm the card technology matches the reader |
| Mobile credentials | Phone app or digital wallet badge uses Bluetooth or NFC | No cards to print or lose; remote issuance and revocation | Requires compatible phones and readers; plan for staff without smartphones |
| PIN keypads | User enters a code, alone or with another credential | No hardware to carry; useful as a second factor | Codes get shared; weak as the only factor |
| Biometrics | Reader matches a fingerprint, face or other trait to an enrolled template | Cannot be lent or lost; strong for high-security rooms | Higher cost; privacy, consent and data-handling obligations; check applicable laws |
Cloud vs on-prem access control: which is better?
Both models can be secure and reliable. The right choice depends on how many sites you manage, who administers the system and your IT policies.
Cloud-based access control
Cloud platforms host the software and database online, with controllers at each site. Administrators manage doors and users from a browser or app, updates arrive automatically and adding a site is straightforward. Pricing is usually a recurring subscription per door, reader or site. Well-designed systems keep working locally if the internet connection drops, then sync when it returns.
On-premises access control
On-prem systems run on a server you own and maintain. They suit organizations with strict data-residency rules, limited internet connectivity or existing server infrastructure. You typically pay more upfront for software licenses and hardware, plus ongoing maintenance and IT effort for patching and backups.
Hybrid approaches
Some platforms combine local servers with cloud management or mobile features. These can be a good fit when upgrading a large existing on-prem system without replacing every controller at once.
What door hardware do you need?
Door hardware is where software meets the physical building, and it is where many projects go over budget. Each door should be evaluated for frame type, door material, traffic and life-safety needs.
- Electric strikes: replace the strike plate in the frame and release the latch electronically. Often fail-secure, so the door stays locked from the outside if power is lost, while the inside lever still allows exit.
- Electrified locksets and exit devices: motorized or solenoid-driven mortise locks, cylindrical locks and panic bars control the lock in the door itself. They are common on glass storefronts, stairwells and high-traffic doors.
- Magnetic locks (maglocks): hold the door closed with an electromagnet. They are fail-safe by design and release when power is cut, which brings extra life-safety requirements.
- Request-to-exit (REX) devices: motion sensors or push buttons that tell the system someone is leaving so it does not log a forced door, and on some doors release the lock.
- Door position switches: report whether the door is actually closed, enabling held-open and forced-open alerts.
- Wireless and battery locks: reduce wiring for interior offices and doors where running cable is difficult.
What fire and life-safety rules apply?
Access control must never trap people inside. In general, occupants need to be able to exit without a key, card or special knowledge, and many locking arrangements must release when the fire alarm activates or power fails. Maglocks, delayed-egress hardware and stairwell doors are especially closely regulated.
Requirements come from the building code, fire code, accessibility rules and the specific conditions of your building, and they are interpreted by the local authority having jurisdiction (AHJ), usually the fire marshal or building department for your city or county. Involve the AHJ and your fire alarm contractor early, before hardware is ordered, and expect permits and inspections on many projects.
A qualified installer should design each door with egress in mind and document how it behaves during alarm and power-loss conditions.
Which integrations matter most?
Access control becomes far more useful when it shares data with the systems around it.
- Video surveillance: link each door event to camera footage so you can see who used a credential. Pair with IP surveillance systems for fast investigations.
- Visitor management: pre-register guests, print badges or issue temporary mobile passes, and keep a visitor log.
- HR and directory sync: connect to an identity provider or HR platform so access is granted on hire and removed on termination automatically.
- Intercoms: let reception or staff verify and admit visitors from a desk or phone using intercom systems.
- Alarm and monitoring: arm and disarm intrusion zones based on access events and route alerts to the right people.
- Time and attendance or elevators: in some buildings, badges also drive time clocks or floor access.
10 questions to ask access control installers
Use these questions to compare proposals on more than price. For a deeper look at platforms, see our roundup of access control systems for business.
- 1. Which platform are you proposing, and why does it fit our sites and number of doors?
- 2. Which credential technology will we use, and can we move away from proximity cards?
- 3. What happens at each door during a power outage, fire alarm or internet outage?
- 4. Have you reviewed the door hardware and egress requirements with the fire authority or included that in scope?
- 5. What recurring fees apply, and who owns the hardware, software licenses and data?
- 6. Can we switch service providers later without replacing controllers and readers?
- 7. Which integrations are included, and which require additional licenses?
- 8. How are controllers and readers secured on our network, and do you support encrypted reader communication such as OSDP?
- 9. What does training, documentation and handoff look like for our administrators?
- 10. What are your support hours, response times and maintenance options after installation?
How much does access control cost?
Cost depends on door count, hardware per door, credential type, cabling, platform licensing and integrations. Typical industry ranges and the factors behind them are covered in our access control system cost guide.
Technology Beyond Tomorrow designs and installs access control systems for businesses across San Diego County, with factory-trained technicians who handle door hardware, cabling and integrations under one contract. Schedule a free on-site assessment to walk your doors and get a clear plan.
Frequently asked questions
Can I keep my existing card readers when upgrading?
Sometimes. Many newer controllers support existing readers, especially if they use standard wiring. Older proximity readers, however, limit you to less secure credentials, so most upgrades replace them.
Is mobile access secure?
Reputable mobile credential systems use encrypted communication and the phone’s own security features, which can make them more secure than legacy cards. Pair mobile access with good phone policies and fast revocation.
What happens if the internet goes down with a cloud system?
Most cloud platforms store permissions on the local controller so doors keep working offline. Remote management and real-time alerts resume once the connection returns. Confirm this behavior with your vendor.
Do I need a permit to install access control?
Often, especially when locking hardware on egress doors changes or the system ties into the fire alarm. Check with your local building or fire department, which acts as the authority having jurisdiction.
Can access control work with our existing cameras?
Many platforms integrate with popular video management systems. Compatibility varies by brand, so confirm supported integrations before choosing a platform.
Get a free on-site assessment
Talk to a San Diego project specialist about your building, your timeline and your budget. No obligation.
Get a free assessment