Commercial Access Control Systems

A system that replaces keys with credentials the building can track and revoke. Readers at controlled doors check a card, fob, phone or PIN against a controller, the controller releases the lock if the permissions and schedule allow it, and every attempt is logged. The practical difference from a lock is not security at the door, it is administration: you can turn off one person's access in seconds without rekeying, and you can answer who opened which door and when. Access control systems for commercial buildings also have to satisfy fire-egress code, which is where most of the design judgement actually goes.

A standard opening with a card or mobile credential generally runs $1,500 to $3,500 per door installed, and $3,000 to $5,000 per door is common once hardware, labor, and first-year software or licensing are all included. Readers themselves are a small share: a proximity reader is roughly $80 to $400, while biometric readers run $300 to $2,500. Installation labor is $500 to $2,500 per door and is where the variance lives, because door type drives it.

A site walk first, opening by opening, because the door decides the work. Then controllers and power supplies get mounted and wired, cable is pulled to each reader and lock, electrified hardware is fitted to the door, request-to-exit and door position devices go in, and the system is programmed with users, schedules, and permissions. Expect the physical installation on a straightforward door to take a few hours and a difficult one to take most of a day. Budget time for the part nobody schedules: getting your user list and access groups right before go-live.

Because the door, not the reader, sets the labor. Hollow metal frames in ordinary commercial space are straightforward to wire and land at the low end. Glass storefront doors, historic buildings, and pre-poured concrete structures raise labor time substantially, since there is no easy path to run cable and the hardware often has to be custom fitted. When you compare quotes, compare them door by door, not as an average.

They are the languages a reader uses to talk to the controller. Wiegand is the legacy standard: one-way, unencrypted, and sent in plain text, which makes credential data interceptable and replayable by anyone with basic tools. OSDP adds AES-128 encryption, bidirectional communication, and supervision, so the panel can detect a tampered or disconnected reader and support modern credentials including biometrics and multi-factor. For a new commercial install, OSDP should be the default and you should ask explicitly.

It describes what the lock does when power is lost. Fail-secure hardware stays locked without power, so you need power to let someone in. Fail-safe hardware, including magnetic locks, needs constant power to stay locked and releases when power drops. Both describe the secure side of the door. In almost every configuration the egress side still allows free exit either way, because the lever or panic hardware works independently of the strike. On fire door assemblies, NFPA 80 requires fail-secure strikes listed for that use.

Yes, and lockdown is one of the strongest reasons schools and clinics buy access control at all. The important constraint is that lockdown secures a building from the outside without preventing people inside from leaving. Any design that would trap occupants is a life safety problem, not a security feature. Get lockdown behavior demonstrated on real doors and reviewed against your local egress requirements before it goes live.

Often partially. Existing door frames, closers, and panic hardware can frequently stay, with the electrified components added to them. What usually cannot carry over is the credential technology, since old proximity formats are the part with known cloning weaknesses. A good site walk prices this opening by opening and tells you which doors are cheap to convert and which ones are not, which is exactly the detail a phone quote cannot give you.