Skip to main content
    QHSEtech
    Updated 30 September 2026
    Software Guide · Reviewed 30 September 2026

    Visitor management: the roll call decides it

    Badge printing, host notifications and a tidy reception are the features vendors demonstrate. The safety purpose of the system is narrower and is tested about twice a year: when the alarm sounds, can a marshal at an assembly point get an accurate list of who is on site — including the contractor who signed in at a side gate, the delivery driver who never signed in at all, and the visitor whose phone has no signal? Evaluate against that, and treat the reception experience as a secondary benefit.

    Jump to the 6 products

    Editorial responsibility: Dimitris Mitsios (Founder of The QHSE Standard; product marketing at Tekmon) · Tekmon pays for sponsored placements on this site (disclosure) · How pages are made · LinkedIn · Content date: 22 September 2026

    On this page (7 sections)

    What the system is actually for

    Emergency procedures at work require arrangements for evacuation, including accounting for people, and the visitor log is how non-employees are accounted for. That is the duty the software serves. Everything else it does is operational convenience, which may well be worth paying for — but it should not be what you compare products on. Great Britain HSE: emergency procedures at work

    The failure modes are all at the edges. A visitor who leaves without signing out stays on the list and is searched for. A contractor who arrives at a goods entrance never appears on it. A tablet on a kiosk stops working when the power goes, which is exactly when you need it. Ask each vendor how their system handles those three cases specifically, because the demonstration will otherwise only show the happy path.

    The second consideration is that you are accumulating personal data about people who do not work for you, sometimes including photographs, vehicle registrations and health declarations. Collect what the purpose requires and no more, be able to say how long it is kept and what deletes it, and make sure a visitor can be told what is held. This is a data protection question, not a feature question. UK ICO: guidance and resources on data protection

    Three things to test

    Roll call under failure

    The list must be obtainable at an assembly point with the building's power off and its network down. Ask what the fallback is: a phone app on cellular, a printed list on a schedule, or nothing. This single answer sorts the market.

    Sign-out and side entrances

    Establish how the system handles someone who left without signing out, and how a person entering at a gate other than reception is captured. Auto sign-out at a fixed time is a common default and it makes the roll call wrong in the other direction.

    Induction and data minimisation

    If the kiosk delivers a safety briefing, establish what record it produces and whether it can gate entry. Separately, list every field collected and justify each — photographs, vehicle details and health questions all raise the stakes.

    The demonstration: pull the plug

    1

    Ask for the on-site list with the network down

    Disconnect the kiosk and request the roll call. Establish exactly what a fire marshal would have in their hand, and how current it is. If the answer is a printed list from the last scheduled export, ask how often that runs.

    2

    Sign someone in who never signs out

    Leave a visitor open overnight. Establish whether they are auto-signed-out, still shown as present, or flagged — and confirm you can configure it, because the wrong default makes the roll call unreliable in a way nobody notices until it matters.

    3

    Admit a contractor at a side gate

    Sign in away from reception, on a phone if that is the route. Confirm they appear on the same list. Two separate lists is the most common real-world failure in multi-entrance sites.

    4

    Fail an induction and try to enter

    Have a visitor answer the safety briefing incorrectly or decline it. Establish whether entry is blocked, whether a host is notified, and what record is retained either way.

    5

    Ask what is stored about one visitor

    Request every field held about a single person, including photographs and any health declaration, plus the retention period and what deletes it. If the vendor cannot answer quickly, you will not be able to answer a visitor who asks.

    Visitor management software to evaluate

    The list follows the published rule stated beneath it. Dedicated visitor products sit outside our core QHSE catalogue, so their profiles cover the visitor capability only. Where visitor management overlaps with work we have researched, it is usually contractor rather than visitor traffic: contractor safety management for qualification and access decisions, and site induction for the briefing record. If most of your gate traffic is contractors rather than guests, start there — the safety requirements are considerably heavier.

    Tekmon pays for a sponsored placement (above); its place in this list follows the same rule as every entry. How lists are ordered

    Same rule for every product: tagged “Visitor Management”, with a sourced visitor management capability in its record, or one the vendor stated to us, labelled as vendor-stated. 6 qualify.

    Questions that separate candidates

    How is the on-site list obtained with power and network down?
    How current is the fallback list, and how often is it produced?
    What happens to a visitor who never signs out?
    Can auto sign-out be configured or disabled?
    Do side entrances and reception produce one list or several?
    Can a phone-based sign-in reach the same roll call?
    Does a failed induction block entry, and is that recorded?
    Exactly which personal data fields are collected?
    What is the retention period, and what enforces deletion?
    Can we tell a visitor what is held about them?

    Sources and evaluation limits

    2 sources, checked 22 Sep 2026

    Emergency procedures and accounting for people: Great Britain HSE: emergency procedures at work. Personal data handling: UK ICO: guidance and resources on data protection. Both checked 22 September 2026.

    Requirements differ by jurisdiction, building and occupancy, and what your fire risk assessment requires is a judgement for the people accountable for it rather than a software configuration. Nothing here is legal advice, and data protection obligations vary — involve whoever is accountable for that in your organisation before deciding what to collect.

    Products are listed by the published rule stated under the list; none is ranked or tested on this page. We publish no figures on evacuation times or on the effect of any system, because we have not measured any and have not verified published figures worth repeating.

    Software categories to explore

    Use this Process to define the work, then explore these software types. Confirm the exact workflow and module with each vendor.

    See all software categories

    Related Guides

    Site Induction SoftwareContractor Safety Management SoftwareEmergency Response SoftwareLone Worker Safety SoftwareTraining Management SoftwarePermit to Work Software

    More related guides

    Frequently Asked Questions

    What is visitor management software actually for?
    In safety terms, accounting for non-employees during an evacuation. Emergency procedures require arrangements for getting people out and establishing who is unaccounted for, and the visitor log is how people who are not on your payroll appear in that count. Badge printing, host notifications and reception workflow are genuine operational benefits but should not be the basis of the comparison.
    What is the most common failure?
    Visitors who never sign out, and entrances that are not reception. The first inflates the roll call and sends marshals looking for people who went home; the second means someone on site does not appear at all. Many systems auto-sign-out at a fixed time, which fixes the first problem by creating the opposite one. Ask how each is handled and whether the behaviour is configurable.
    Does it work when the power is out?
    That is the question worth asking first, because a fire is exactly when you need the list and exactly when the kiosk may be unavailable. Establish the fallback: a mobile app on cellular data, a printed list produced on a schedule, or nothing. If it is a scheduled print, find out the interval, because that is how stale your roll call can be.
    Can the kiosk deliver a safety induction?
    Most can show a briefing and record acknowledgement. The useful questions are whether a failed or declined briefing blocks entry, whether the host is notified, and what record is kept. For contractors doing work rather than guests attending meetings, a kiosk acknowledgement is usually insufficient — that belongs with site induction and contractor qualification, which carry heavier requirements.
    What personal data should we collect?
    As little as the purpose requires. You are holding data about people who do not work for you, sometimes including photographs, vehicle registrations and health declarations, and each additional field raises what you must protect, justify and eventually delete. Be able to state the retention period and what enforces it, and involve whoever is accountable for data protection before the fields are configured rather than after.