It cannot be relied upon
A page can be rewritten, a cell corrected, a row deleted — and nothing shows it. In front of an auditor, an editable log does not prove what it claims.
Every entry and exit is sealed, then chained to the one before it. A visit can no longer be added, altered or removed after the fact without it showing.
Nothing to install — for you or for your visitors.
A paper register, a spreadsheet and a shared form all share one flaw: nothing stops a line being added, corrected or torn out afterwards.
A page can be rewritten, a cell corrected, a row deleted — and nothing shows it. In front of an auditor, an editable log does not prove what it claims.
On an open book at the desk, every visitor reads the name, company and time of everyone before them. That is a data disclosure at every signature.
Books pile up in a cupboard, files get duplicated. Nobody knows any more what is kept, where, or for how long.
Here are five visits from an ordinary day. Each fingerprint is a real SHA-256, computed in your own browser from the visit's contents and from the fingerprint of the one before it. Tamper with one, and watch what happens to the rest.
This demonstration computes real SHA-256 fingerprints and needs JavaScript. The principle is simple: each visit's fingerprint includes the previous one, so altering a single visit invalidates all those that follow.
The competitor to beat is not a piece of software: it is a book on a counter that only needs a pen. Every decision in this product is judged against that.
A QR code to print, provided for each building. That is the entire installation.
The page opens on their phone, in their language. Under a minute the first time, a single tap after that. No app, no account, no password.
Live presence, history, end-of-day closing, and the export to hand to your auditor. From a browser, with nothing to install either.
The page opens on their phone, in their language. Under a minute the first time, a single tap after that. No app, no account, no password.
Plenty of tools record visitors. This one is built so that the record can be PROVEN.
A visit's fingerprint includes the previous visit's. Removing, altering or inserting a line afterwards breaks the chain, and the break is visible. That is the demonstration above.
The PDF export carries its certificate on the first page: period covered, number of entries, fingerprint of the log. Not a spreadsheet that could have been tidied up before sending.
It is optional: a visitor can always type their name instead. If taken, it is transmitted for automatic reading, written to no disk, and gone within fifteen seconds. The number only serves to compute a fingerprint.
Isolation between client organisations is enforced by the database itself, not by a condition in the code. European hosting.
The PDF export carries its certificate on the first page: period covered, number of entries, fingerprint of the log. Not a spreadsheet that could have been tidied up before sending.
Per building, billed annually. Unlimited visitors: you will not be punished for being busy.
14-day free trial, cancel anytime during the trial.
Prices exclude VAT. No setup fee, no hardware to buy.
No. The visitor opens a web page by scanning the QR code on the notice; you administer everything from a browser. There is no app to download, no kiosk to buy and no software to deploy on your machines.
Nothing special happens: the visitor journey never asks for one. No address, no password, no account. That is deliberate — a cleaning team or a delivery driver should not have to create an account to enter a building.
The receptionist checks them in at the desk in a few seconds. The journey does not depend on what the visitor is carrying.
In Europe. Isolation between client organisations is enforced at database level, which means a programming mistake would not be enough to leak one client's data to another.
You set the period for your entire workspace. When it expires, personal data is erased and the log's integrity proof remains: you keep the ability to demonstrate that it was not altered, without keeping the names.
The NIS2 directive requires the entities it covers to control and document the physical security of their sites, including access. It does not apply by itself: the obligation comes from the national law that transposes it, and countries are not at the same stage. Where it applies, a tamper-evident visitor log is one of the things an auditor will ask for. We do not claim to cover the directive on our own.
The visitor journey exists in ten languages: English, French, Dutch, German, Spanish, Italian, Portuguese, Swedish, Danish and Finnish. The language is detected from the visitor's phone and can be changed with one tap. The printed notice carries three languages — French, Dutch and English — because beyond that it becomes unreadable: the phone takes over from there.
Tell us what you need to prove, and to whom. If ClearlyAccess is not the right answer, we will say so — that costs us less than losing you after three months.