AccessControlforBuildingsWhereTimeMatters
Biometric Door Access | Visitor Management | DPA-2019 Aware
A biometric door installation from 912 arrives with everything itemised before you sign — reader, maglock, power, cabling, emergency egress — and a delivered reference installed in a single day. Layer visitor management on top and every entry to your premises has a name, a time, and an audit trail.
Request Consultation
Technologies in use
Evidence, not promises.
See how clients improved resilience, visibility, and operational control with 912.
Biometric door access — professional services group
ZK Teco fingerprint unit, 500kg maglock, door closer, and emergency egress installed and commissioned in one day — with all nine BOM lines itemised on the quote.
Read the case studyMulti-system AMC — residential property
Biometric access, CCTV, and telephony maintained for the same property under one contract — credential audits included in the cadence.
Read the case studyVisitor Pass commercial terms
Visitor management runs on documented subscription terms — device responsibilities and liability framing stated up front, not discovered at renewal.
Read the case study
Fail-Safe Egress
Inside door release and an emergency key switch on every maglock installation — security never blocks a safe exit.
Entry Hardware, Specified Honestly
Biometric First, Fallback Always
Fingerprint as the primary credential, with PIN and card fallback so a cut finger doesn't lock anyone out of their own office.
Holding Force That's Specified
The maglock on our delivered installation is rated at 500kg and quoted with its bracket — not "a lock" on an unitemised invoice.
Visitor Workflows on Top
Visitor Pass subscriptions add gate check-in, host notification, and an entry audit trail to the same access estate.
When this service becomes urgent
912 implements access control with the governance layer included: credentials, biometric consent, visitor workflows, audit logs, controller security, and offboarding rules. The goal is controlled entry plus evidence that stands up after a security or compliance review.
Discovery call agenda
Access-control design, controller hardening, biometric/privacy workflow, visitor notification setup, admin audit logs, and offboarding process.
- 1Confirm users, zones, visitor process, and data-protection requirements.
- 2Review existing controllers and credential ownership.
- 3Define rollout, training, and handover evidence.
What the numbers say about leaving this alone
Access control quietly turns you into a processor of biometric data. That obligation starts the day the reader goes live, whether or not anyone has written a process for it.
The draft ODPC Guidance Note says a private-security company should respond to an objection request within 14 days.
Office of the Data Protection Commissioner(opens in a new tab) — draft guidance, applied directly to a building-entry facial-recognition example
The draft ODPC Guidance Note says private-security companies should respond to personal-data access requests within seven days.
Office of the Data Protection Commissioner(opens in a new tab) — draft Guidance Note for Private Security
HID reported that 39% of more than 1,200 surveyed industry professionals were actively using mobile identities.
HID — in HID's own survey of over 1,200 industry professionals
What We Install and Run
Biometric Door Access
- Fingerprint biometric unit (ZK Teco class) with PIN/card fallback
- 500kg maglock with bracket, door closer, and power supply
- Inside door release and emergency key switch — egress is part of the design
Visitor Management
- Visitor pass workflows on a subscription model
- Check-in at the gate or reception with host notification
- Entry records your audit and compliance posture can point to
Credential & Offboarding Workflow
- Enrolment and credential issue procedures documented at handover
- Offboarding SOP so leavers lose access the day they leave
- Periodic access-list audits available under maintenance contracts
Is your property facing security gaps?
Manual key management that is prone to loss and unauthorized duplication.
No record of who entered which door, when — nothing to hand an investigator.
Former staff and former vendors whose access nobody ever revoked.
Biometric systems deployed with no DPA 2019 compliance thought at all — sensitive personal data with no DPIA behind it.
Honest Risk Framing
What this protects against — and what it doesn't.
PIN and QR-code integrity is the user's responsibility
Access controls only work if users don't share PINs or screenshot QR codes. 912 enforces policy at the device level (rotation, expiry, single-use) but cannot prevent a user voluntarily handing access to someone else. Awareness training is part of the broader Cybersecurity Training engagement.
Gate smart devices and tablets are client-procured
For Visitor Pass deployments, the smart device or tablet at the gate is the customer's responsibility — we specify minimum hardware specs and recommended models, but procurement and ongoing maintenance of those devices sit on your side.
Liability cap on Visitor Pass subscriptions
Where established, liability on Visitor Pass subscription contracts is capped at the fees paid in the preceding six months. Standard SaaS commercial framing — flagged here so procurement can validate against your terms.
Our Implementation Process
From the delivered engagement: assess, itemise, install in a day, support for three months.
Part of the 912 six-phase engagement model — this is how it runs for this service.
Entry-Point Assessment
Walk the doors and gates, identify the risk profile of each entry, and decide where biometric, card, or visitor workflows fit.
Itemised Design & Quote
Every component on the quote by name — reader, maglock, bracket, door closer, power supply, alarm cable, door release, emergency key switch, labour. No 'miscellaneous accessories' line.
Installation & Commissioning
The delivered reference: a complete biometric door installed and commissioned in one day, alongside the telephony system in the same engagement.
Workflow & Support
Enrolment and offboarding procedures handed over, with three months of support on every configuration 912 deploys.
The 912 Advantage
The Whole BOM on the Quote
Our delivered biometric door quote itemised all nine lines down to the 6-core alarm cable and the emergency key switch. You see exactly what you're buying before you sign.
Egress Is Part of the Design
Every maglock we install ships with an inside door release and an emergency key switch — because a locked door must never be a trap during a fire or power event.
One Team Across Physical Security
Access control, CCTV, and telephony delivered and maintained by the same accountable team — we hold multi-system maintenance contracts doing exactly that today.
DPA-2019 Biometric Compliance
Fingerprints are sensitive personal data under the Kenya Data Protection Act. We deploy with template-only storage and support the DPIA documentation the Act expects.
From the Delivered Engagement
Real reference figures from a commissioned installation.
ZK Teco
Technology in scope
Suprema
Technology in scope
Hikvision
Technology in scope
Common Questions
Everything you need to know about Access Control for Buildings Where Time Matters.
What types of access control does 912 deploy?
Biometric fingerprint access as the primary credential — the delivered reference uses a ZK Teco fingerprint unit — with PIN and card fallback, electromagnetic locking (a 500kg maglock with bracket on the reference installation), and visitor management workflows layered on top via Visitor Pass subscriptions. Every installation includes inside door release and an emergency key switch, because egress is part of the design, not an afterthought.
How much does access control cost in Kenya?
A real reference: a complete single-door biometric installation — fingerprint unit, 500kg maglock with bracket, door closer, power supply, alarm cabling, inside door release, emergency key switch, accessories, and labour — was quoted at KES 71,500 excluding taxes, with every one of those lines itemised. Multi-door and visitor-management scope is priced per entry point after an assessment, with the same line-by-line transparency.
Does access control integrate with our CCTV and alarm systems?
Yes — under the One Contract model, the same 912 team designs and maintains access control, CCTV, and alarm systems together. We hold multi-system maintenance contracts today covering biometric access, CCTV, and telephony for the same property, which means one assessment, one maintenance cadence, and one accountable engineer when something fails — not finger-pointing between vendors.
How long does deployment take?
The delivered reference: a complete biometric door access installation in one day, commissioned alongside a hosted telephony system in the same engagement. Multi-door and visitor-management deployments are sequenced per entry point after the assessment — and we commit to dates only once the entry-point survey is done.
Are biometric systems compliant with the Kenya Data Protection Act?
Biometric data is "sensitive personal data" under the DPA 2019 and requires a documented DPIA, explicit consent, and stricter storage controls. 912 deploys biometric access with template-only storage (no raw fingerprints), encrypted at rest, retention policies tied to employment status, and helps clients file the DPIA. Most Kenyan businesses running biometrics today have not done this — we close that gap.
What happens when an employee leaves?
We hand over a documented offboarding SOP with the installation: who removes the credential, how, and how it's verified — so a leaver loses door access the day they leave, not whenever someone remembers. Periodic access-list audits are available under maintenance contracts, which is also when forgotten vendor and contractor credentials get caught.
Do you serve sites outside Nairobi?
Yes — 912 delivers physical-security engagements across Kenya, with delivery led from Nairobi. Multi-site rollouts are scoped with travel and logistics itemised in the proposal, the same way our seven-depot CCTV engagement was sequenced across depots from Mombasa to Eldoret.
Related Technical Protocol
Biometric Access Control & the Kenya Data Protection Act: Your 2026 Compliance Playbook
Most Kenyan businesses that have installed biometric access control are processing sensitive personal data without ODPC registration, a DPIA, or explicit consent. Here is exactly what the Kenya Data Protection Act 2019 requires, what the ODPC can do, and what a genuinely compliant deployment looks like.
What CCTV Installation Really Costs a Kenyan Business in 2026
Most CCTV price lists quote single cameras. A business needs a system. Here is an honest breakdown of what commercial CCTV installation costs in Kenya, what drives the number, and how to avoid the hidden hardware markup.
Why Your CCTV Network is Your Biggest Cyber Threat: Architecting Converged Security in 2026
Facilities teams buy cameras, IT teams ignore them—creating an unpatched IoT backdoor into your core ERP. Learn the Zero Trust micro-segmentation protocol for physical security.