Visitor Management

A contractor arrives to repair equipment in a factory, and reception needs to know whom they are visiting, where they may go and what safety information they need, which a badge alone does not cover. A public workplace visitor-policy guide from Envoy describes invitation, check-in and access practices, and a New Zealand workplace safety guide also discusses visitor sign-in, but these are practical references, not a universal legal rule.

Define visitor types, because a client, courier, contractor and regulator may need different routes, and avoid requiring a long form from someone who only drops a parcel at reception. Identify the host, since each visitor should have a contact accountable for the visit and there should be a clear fallback if the host is unavailable.

Set access zones, because office meeting rooms, production areas and server rooms carry different risks and access should be issued only for the visit purpose. Check identity proportionately, since some sites need photo identification while others only need a name and host, and applicable law and risk should be verified before copying an ID document.

Use a clear sign-in process that records arrival and expected destination in a way staff can use, because a tablet is not useful if it is offline and no manual fallback exists. Offer a safety briefing explaining evacuation routes, restricted areas and required protective equipment, noting that contractors may also need task-specific induction.

Consider accessibility, since a check-in kiosk must not be the only route if a visitor cannot use it and staff should be able to assist discreetly. Issue badges where helpful to identify a visitor and show access level, but do not expose sensitive personal information to everyone nearby.

Explain escorts, since some visitors can navigate public meeting areas while others need a trained escort, and state who stays with the visitor during interruptions. Handle deliveries by letting a courier use a handoff area without entering the site, which avoids unnecessary access and waiting.

Keep emergency counts usable, because sign-out supports an occupancy record but a register may be inaccurate if people forget to leave, so pair it with real muster procedures. Set data retention and protect records, since visitor logs can reveal business relationships and movement, so keep only what is necessary for a defined purpose and period, avoid exposing an open list of previous guests to the next person checking in, and limit staff access and secure exports.

Prepare for walk-ins with a policy that says who can approve an unplanned visitor and how to handle someone who cannot be verified, and check contractors separately because work permits, insurance, training and equipment checks may be needed before hazardous work and a visitor badge is not authorisation for the task. Use pre-registration selectively, since it can reduce queue time and give instructions in advance but a last-minute change should not break access control, and train the front desk to challenge access politely and escalate concerns because an app cannot make a judgment about a suspicious situation.

Plan for system failure by keeping a manual register, contact list and badge control process, handle departures by collecting reusable badges and revoking temporary digital access, and review incidents by examining the workflow rather than assuming the receptionist alone caused it when a guest reached a restricted room. A multi-site business may share principles while varying controls by local risks and legal requirements, signs should direct visitors without revealing security details, and for owners visitor management balances a welcoming first impression with clear boundaries and works when hosts, reception and security know their parts.