Service 03 — Access Control

Who enters, where,
when, and how.

Master **flows**, **permissions**, and **traceability** across all your facilities — from Mifare smart badges and mobile NFC to advanced biometrics. Enjoy native integration with your Active Directory or HRIS directories.

Why Choose Us

Access control is more than just a lock.

01

Multi-Technology Ecosystem

From Mifare DESFire badges to **vascular vein biometrics**, mobile NFC credentials, and temporary QR codes. Select the ideal authentication method for each zone instead of a generic, one-size-fits-all approach.

02

Automated HR Synchronization

Credentials are provisioned automatically when a new team member joins and instantly deactivated upon their departure via your **Active Directory** or HRIS database. No more forgotten or unmanaged ghost badges left active.

03

GDPR-Compliant Traceability

Every entry and exit log is **tracked and anonymized** after a customizable retention period. Clear, accessible audit logs are always available for your authorized users and your DPO. Compliance by design.

Our Access Control Solutions

Six technologies, one unified cockpit.

Mifare DESFire Badges

The industry benchmark in 2026. AES encryption, clone-proof security, and a 10-year runtime. Seamlessly compatible with wall readers, turnstiles, cafeteria payment points, and secure follow-me printing.

Biometrics

Fingerprint scan, palm/vascular vein pattern recognition, and facial recognition. Biometric templates are stored safely on the individual's local badge (not a central server) for strict GDPR compliance.

Mobile NFC & BLE

Turn your team's smartphones into secure digital keys. Instantly grant entry via close-range NFC or hands-free Bluetooth Low Energy (BLE) — ideal for opening parking gates without rolling down a window.

Video & Audio Intercoms

IP-connected intercom arrays tightly paired with your video surveillance network. Features live visual verification, remote door release from front desks or mobile apps, and native SIP telephone integration.

Centralized Multi-Site Management

A unified web interface to manage all user profiles, access zones, and automated schedules across multiple distinct properties nationwide. Supports granular delegation to local branch managers.

Anti-Passback & Audit Trails

Stops tailgating or dual entry using a single badge. Full cryptographic audit trail captures who, where, and when with granted or denied statuses. Logs are securely anonymized over time.

Our Guiding Principle: The appropriate level of physical security must match the **criticality of each specific zone**. An open-plan office space rarely warrants biometrics, while a core server room absolutely demands it. **We adapt the technology to your operational risks**, never the other way around.

Target Applications

Seven sectors, seven tailored configurations.

Corporate Offices

Main entrances controlled via smart badges, floor-restricted elevator integration, meeting rooms unlocked upon booking validation, and automated parking access for personnel.

Industrial Facilities

ATEX zones, locker rooms, R&D labs, and assembly floors. Leverages dual-factor authentication (badge + biometrics) for critical areas with time-restricted shifts.

Data Centers

Triple-factor authentication (badge + biometrics + PIN), mantrap interlocking portals, and rigorous anti-passback rules. Comprehensive logging built for ISO 27001 and SOC 2 audits.

Healthcare Sites

Restricted access control across operating blocks, emergency rooms, pharmacies, and patient record storage. Fully integrated with hospital HR systems.

Hospitality

Guest keys encoded instantly at check-in to unlock specific rooms, shared amenities (fitness center, pool), and integrated minibar or point-of-sale systems.

Residential Buildings

Secure lobbies, multi-story parkings, common waste storage, and bicycle rooms. IP-based video entry routing visitor calls directly to residents' mobile phones.

Logistics Hubs

Loading docks, high-value sorting cages, and driver welcome booths utilizing temporary QR codes pre-generated by your operations desk.

Field Operations

From hardware readers to the central cockpit.

Frequently Asked Questions — Access Control

Technical insights on modern building security.

Which badge technology should I choose?
For new installations, the standard is Mifare DESFire EV2 or EV3 — featuring AES encryption, anti-clonage security, and a 10-year lifespan. Avoid legacy technologies like HID Prox 125 kHz and Mifare Classic, which are highly vulnerable to simple smartphone cloning apps.
Is biometrics GDPR compliant?
Yes, under specific conditions. Regulatory frameworks require storing biometric templates on the user's personal badge rather than a centralized database, a well-defined purpose, a prior Data Protection Impact Assessment (DPIA), and clear user documentation. We manage this complete compliance lifecycle.
Can access control be integrated with Active Directory?
Yes. User tokens and access parameters are automatically provisioned directly from Active Directory or your HRIS suite (SAP, Workday, Oracle) and immediately revoked upon offboarding. This stops active "ghost" badges, which represent a primary source of physical security breaches.
What is anti-passback?
Anti-passback rules prevent an individual card or token from registering two sequential entry scans without an intervening exit record. This stops users from passing their badge back to a second unverified person and is critical for data centers and sensitive manufacturing hubs.
Does the entire building need to be rewired?
Not necessarily. Modern IP-PoE readers communicate over network RJ45 cables, running power and data down one wire. For existing retrofits, wireless handle sets (Wi-Fi, BLE, long-range RFID) avoid invasive masonry cuts and keep structural adjustments down. Our assessment determines the best layout for your structure.
How much does an access control system cost?
Costs vary depending on scale and infrastructure. As a general guide, systems average between €800 and €2,500 excl. VAT per door using standard IP-PoE Mifare DESFire readers, excluding custom structural cabling or heavy ironmongery. Long-term ROI stems from removing physical re-keying costs due to lost physical keys (~€150 per cylinder) and neutralizing unrevoked ghost badges.
More at MCO Facilities

Three other pillars of dedicated expertise.

Secure Your Site

Free security & accessfacility audit.

On-site walkthrough inspection, mapping existing vulnerabilities and access hardware, followed by a detailed cost breakdown delivered within 7 business days. Completely obligation-free.