Drivers and operational staff
Shift-based, across depots and crew rooms
Across the network
A network with nobody standing by
Most of your sites have nobody in them. That is exactly where the critical equipment lives. Unstaffed sites, night possessions and contractor crews, access granted for the window.
Public Transport
Access control for rail and public transport networks
A network of sites held on mechanical keys
Who is on your sites
Maintenance and engineering
Own and contracted, mostly at night
Infrastructure contractors
Large crews, short possession windows
Emergency services and police
Needing access without prior notice
What you are held to
NIS2 · CER · national transport security
- Physical protection of control centres, signalling rooms and substations
- Access to depots, tunnels and technical sites restricted and demonstrable
- Resilience proven: who can reach a critical asset, and when it was last reviewed
Where it breaks today
- Hundreds of unstaffed technical sites open with mechanical keys nobody can audit
- Night possession works are arranged by phone, and access is whoever turns up with the key
- A depot pass issued in one region still opens doors in another 5 years later
Nobody can tell you who holds a copy of the substation key, and the only revocation you have is a lock change. That is not a security model, it is an expense.
Public Transport
Scenario
A night possession on the line
A contractor crew has 6 hours, a defined stretch of track and 2 technical rooms. The crew is different from last night's.
The work order creates the access
The possession, the assets it covers and the window come from planning. It does not wait for a phone call to the depot.
The crew qualifies in advance
Safety competence is checked against the task days before. A lapsed certificate turns up at a desk, long before the trackside.
Open for the window only
That substation, that signal room, from 23:00 to 05:00. Nothing else on the network opens for them.
Closed at handback
The window ends and the access ends with it. The record of who was on site that night stays.
What changes
- Technical sites move off mechanical keys. Revoking access stops meaning a lock change
- Contractors reach the assets in their possession and nothing else on the network
- 'Who can open this substation, and when was that last reviewed' becomes a report
Compliance
The regimes behind this
Questions
Frequently asked questions
Can access be granted only for a possession window?
Yes. The work order creates the access: the assets it covers and the hours of the possession define what opens. Access ends at handback, and the record of who was on site is retained.
How does this replace mechanical keys on unstaffed sites?
By moving those sites onto electronic credentials governed centrally, revoking access stops meaning a lock change. Which credential technology fits depends on the site, and both wired and offline solutions are in scope.
Can safety competence be checked before dispatch?
Yes. Competence for the task is verified days ahead. A lapsed certificate turns up at a desk, long before the night shift.
The first step
Start with 1 site and 1 population.
You judge something that runs on your own site. Your access systems and readers stay where they are. If it earns its place, we extend it site by site.
One siteOne populationYour readers stay