ISO 27001 Visitor Management: The Gate Records Your Auditor Asks For
Visitor logs with photos, host approvals, timestamps and consent on every pass — the physical-entry evidence ISO 27001 auditors ask to see. VizPass is not a certification; it is the record.
- No Hardware to Buy
- HQ Sector 62, Noida
- On-Site Demo in Delhi NCR, Live Video Elsewhere
- From ₹1,499/month · 7-Day Free Trial
Companies already running their gates on VizPass
ISO 27001 visitor management comes down to evidence. When an auditor walks to your gate or reception, they want to see who came in, when, who authorised it, whether their identity was checked and when they left. VizPass keeps that record on every pass — photo and ID, host approval, check-in and exit times, consent — and produces it for any date range. VizPass is not ISO 27001 certified, and using it does not make your organisation compliant or certified.
Four Steps, Under a Minute per Visitor
ISO/IEC 27001 certifies an organisation's information security management system, not a product. Its 2022 edition lists 93 reference controls in Annex A, grouped into organisational, people, physical and technological themes — and the physical theme is where your gate and reception come in. VizPass is not ISO 27001 certified, and using it does not make your organisation compliant or certified. What it does is keep the gate records an auditor asks to see.
What ISO 27001 Expects at the Door, in Plain Terms
- Only authorised people get in, and someone is accountable for letting each visitor in.
- A record of who entered, when, and who authorised it.
- Visitors identified and, where your risk assessment calls for it, escorted or supervised.
- The visitor records themselves protected and kept no longer than needed.
Which controls apply to you is decided by your own risk assessment and Statement of Applicability.
Six Questions at the Gate, and the Record That Answers Each
All of it sits on the same visitor register — no separate binder to keep up to date.
Visitor Log
Every visit with name, photo, host, purpose, check-in time and check-out time, searchable by date, site and gate.
Visitor registerAuthorisation
The host approves on WhatsApp, and who approved and when is stamped on the pass.
Approved by, approved atIdentity Check
Photo and ID captured at check-in, with the phone number verified by OTP where you switch it on.
Photo, ID, OTPPasses and Badges
A printed QR pass with the visitor's photo; the number of any physical badge handed out can be recorded on the visit.
Printed QR passExit Records
An exit scan closes the pass. A pass with no exit scan stays open on the log, and overstays alert the host and admins.
Open passes stay visibleContractor Controls
Every pass has an end time and an expired pass is refused at entry; a blocked person cannot be issued a pass until an admin unblocks them.
Expiry and watchlistProtecting the Visitor Records Themselves
A visitor log full of phone numbers and ID images is itself information to protect.
- Consent — every visitor sees your privacy notice and consent is recorded on each pass, as the DPDP Rules 2025 require (deadline 13 May 2027). See DPDP visitor data management.
- Access — only users with report permission can open or export the register, and every export is written to the activity log.
- Corrections — a wrong entry is reversed with a reason, not quietly edited away.
- Retention — you choose 12 to 120 months; older visits, with their photos and ID images, are deleted nightly. See how long to keep visitor records and security.
Gates like yours
What Our Customers Say
“VizPass has made our front desk operations much more organised. Visitor check-ins, courier entries and gate approvals are now handled digitally, which saves time and improves accountability.”
Gagan Mathur
OM Sweets
“VizPass gives our operations team better control over daily gate activity. Material movement, employee exits and reports are now easier to track, approve and review.”
Sandeep Garg
Karan Latex Ltd
“VizPass made our front desk faster and more organised. Visitor check-ins, courier entries and approvals are now handled without paper registers.”
Harman S
Admin Head, Ferozepur College of Engineering
“The platform feels simple for reception staff and professional for guests. Pre-registration and instant host alerts have improved our daily visitor flow.”
Rekha Y
Operation Head, Orchid Petal Ltd
“QR check-ins and OTP verification made guest entry smooth and contactless. Our teams receive notifications on time, without follow-up calls.”
Nitish T
Operation Head, HRIT University
“We have much better control at the gate now. Our security team can verify visitors, track movement and maintain accurate digital records.”
Gaurav S
Facility Manager, MMMIPCollege of Pharmacy
“VizPass gives us clear reports for visitors, couriers and gate activity. It saves admin time and helps management review data quickly.”
Harish G
Plant Head, HPL Ltd
“VizPass has made our front desk operations much more organised. Visitor check-ins, courier entries and gate approvals are now handled digitally, which saves time and improves accountability.”
Gagan Mathur
OM Sweets
“VizPass gives our operations team better control over daily gate activity. Material movement, employee exits and reports are now easier to track, approve and review.”
Sandeep Garg
Karan Latex Ltd
“VizPass made our front desk faster and more organised. Visitor check-ins, courier entries and approvals are now handled without paper registers.”
Harman S
Admin Head, Ferozepur College of Engineering
“The platform feels simple for reception staff and professional for guests. Pre-registration and instant host alerts have improved our daily visitor flow.”
Rekha Y
Operation Head, Orchid Petal Ltd
“QR check-ins and OTP verification made guest entry smooth and contactless. Our teams receive notifications on time, without follow-up calls.”
Nitish T
Operation Head, HRIT University
“We have much better control at the gate now. Our security team can verify visitors, track movement and maintain accurate digital records.”
Gaurav S
Facility Manager, MMMIPCollege of Pharmacy
“VizPass gives us clear reports for visitors, couriers and gate activity. It saves admin time and helps management review data quickly.”
Harish G
Plant Head, HPL Ltd
See It Running at Your Own Gate
An on-site demo across Delhi NCR, or a live video demo pointed at your gate anywhere in India.
Pulling Gate Evidence in Three Steps
Pick the Date Range
Reports run for any date range, filtered by site and gate, so the sample period the auditor names is one search.
Export the Register
As a CSV or a printable PDF. The export itself is logged, so you can show who pulled the data and when.
Review the Exceptions
Passes with no exit scan and overstay alerts — so you can explain them before the auditor asks.
Auditor Question → Paper Register → VizPass Record
| What matters | Paper register | AVizPass record |
|---|---|---|
| Who was on site on a given day? | Find the right book and read the handwriting | A visitor report for that date, as CSV or PDF |
| Who authorised this visitor? | A host's name, if someone wrote it down | Approved by and approved at, stamped on the pass |
| Was their identity checked? | A signature | Photo and ID captured; phone verified by OTP where enabled |
| Which guard let them in? | Rarely written down | The guard's login and the check-in time, stamped on the pass |
| When did they leave? | The out-time is often blank | The exit scan closes the pass; open passes stay visible |
| Are barred people kept out? | Depends on who is on shift | A blocked visitor cannot be issued a pass until an admin unblocks them |
| Who can see visitor data, and for how long? | Open on the desk and kept indefinitely | Access by permission, exports logged, a retention period you set |
A paper register can be produced at an audit, but it rarely survives the follow-up questions. VizPass makes the gate record complete and searchable. It does not replace your ISMS, your risk assessment or the auditor's judgement.
Visitor Management Compliance Across Several Sites
Several sites run on one account, each with its own gates, hosts and approval rules, while the privacy notice and the retention period stay the same everywhere. Reports can be pulled per site or across all of them for the same date range.
Contractors, Material and Staff Leaving the Premises
Contractor passes carry an end time and an expired pass is refused at entry — see contractor and labour entry. Equipment leaving the site goes on a material gate pass — returnable, with item lines and a due date, or non-returnable — and staff stepping out carry an out-pass with a planned return time.
Evacuation and the Live On-Site List
Because entry and exit are logged live, raising an evacuation gives you the real list of visitors and contractors inside, and each person can be marked safe during the roll call.
Four Habits That Weaken Gate Evidence
Skipping the Exit Scan
Passes stay open, and the log says people are still inside who left hours ago. Auditors notice.
Guards Sharing One Login
Every entry then names the same user. Give each guard their own login so the record shows who let each person in.
No Retention Period Set
Until you set one, nothing is deleted. Decide the period with whoever owns privacy in your organisation, and write it down.
Automatic Approval Everywhere
If every visit is auto-approved, "who authorised this visitor" has no real answer. Use host approval at the entrances in scope.
What VizPass Does Not Claim
- VizPass is not ISO 27001 or SOC 2 certified, and using it does not make your organisation compliant or certified. Certification is of your ISMS, by an independent certification body.
- It does not write your risk assessment, Statement of Applicability or security policies.
- It does not track escorts or follow where a visitor goes once inside.
- It is software: no turnstiles, boom barriers, RFID readers, door controllers, biometrics or face recognition.
Getting Started
Plans start at ₹1,499/month for Single Gate, ₹4,999/month for Basic, ₹9,999/month for Front Desk and ₹14,999/month for Gate Control, each with a 7-day free trial — see pricing. In-person demos cover Noida, Greater Noida, Ghaziabad, Delhi, Gurugram and Faridabad; elsewhere the demo runs on a video call. BeyondBoxAI Technologies Pvt. Ltd., Sector 62, Noida (+91 81304 68801, sales@beyondboxai.com, Monday to Saturday, 9:30 to 18:30 IST).
Live at Your Gate in a Week
Start the 7-Day Trial
On the entrance your auditor will look at first — usually reception or the main gate — using any Android tablet already there.
Walk Through It with Your Team
On-site across Delhi NCR, or a video call against your live gate anywhere in India. Book on the contact page.
Add the Other Sites in Scope
Same account, each site with its own gates, hosts and rules, and one register to report from.
Four Things to Review Before Each Audit
Open Passes
Visits with no exit scan — close or explain each one.
Overstay Alerts
Who stayed past their pass, at which site, and what the host did about it.
The Blocked List
Who is blocked and the recorded reason — and whether each block still applies.
Who Exported the Register
The activity log shows every report export, so unexpected downloads stand out.
Published pricing
One Flat Price a Month — No Per-User Charges
Every plan starts with a free 7-day trial. See what each plan includes →
ISO 27001 Visitor Management FAQs
Does Using a Visitor Management System Make Us ISO 27001 Compliant?
No. ISO 27001 certification is of your information security management system as a whole, assessed by an independent certification body. A Visitor Management System can supply the gate records that support your physical-entry controls, but no software makes an organisation compliant or certified on its own.
Is VizPass ISO 27001 Certified?
No. VizPass is not ISO 27001 or SOC 2 certified. It keeps visitor records — photo and ID, host approval, check-in and exit times, consent — that you can show an auditor as evidence for your own controls.
What Visitor Records Do ISO 27001 Auditors Usually Ask For?
Typically a visitor log for a sample period showing who entered, when, who authorised them, whether identity was checked and when they left, plus how barred people are kept out and how the visitor data itself is protected and retained. Exactly what is checked depends on your scope and Statement of Applicability.
Which ISO 27001 Controls Cover Visitor Management?
The 2022 edition groups its 93 Annex A controls into organisational, people, physical and technological themes, and visitor entry falls mainly under the physical theme. Which controls apply to you, and how, is set by your own risk assessment and Statement of Applicability — your consultant or certification body can map them precisely.
How Long Should Visitor Records Be Kept for an ISO 27001 Audit?
Set the period in your own retention policy, long enough to cover the audit cycle and any legal requirement. In VizPass you choose between 12 and 120 months; after that, old visits and their photos and ID images are deleted automatically, and nothing is deleted while the person is still inside.
Can a Visitor Management Platform Produce Compliance Reports?
VizPass produces visitor reports for any date range, filtered by site and gate, as CSV or a printable PDF. Only users with report permission can run them, and every export is written to the activity log.
Does VizPass Track Visitor Escorts Inside the Premises?
No. VizPass records who approved the visit, who checked the visitor in and out, and when. It does not track escorts or follow a visitor's movement once inside, so escorting stays with your own procedure.
What Does VizPass Cost, and Is There a Free Trial?
Plans are a flat monthly price with no per-user charges: ₹1,499 Single Gate, ₹4,999 Basic, ₹9,999 Front Desk and ₹14,999 Gate Control, each with a 7-day free trial. No hardware purchase is needed — any Android tablet or the guard's phone works.
Further reading
- ISO/IEC 27001 — Wikipedia
- Physical security — Wikipedia
- Data protection framework (DPDP Act and Rules) — MeitY, Government of India
- Access control — Wikipedia
Your Gate on One Register — Set Up This Week
An on-site demo across Delhi NCR, or a live video demo pointed at your gate anywhere in India.