Access control systems for Savannah offices, clinics and storefronts come down to three choices: what people carry to open the door, who holds the admin login, and how well the door itself is wired. Get those right and you can remove a departed employee in a minute, know who opened the records room, and never rekey again.
Most of what is written about access control is written for warehouses: dock doors, gates, cargo. If you run a four-door office on Abercorn, a dental practice in Pooler or a shop on Broughton Street, that advice is the wrong size. Your problem is not a truck yard. It is the front door, the back door, the room with the files or the medication, and the twenty people who come and go with keys nobody has counted in years.
Lowcountry Technologies, an IT and security company in Rincon near Savannah, installs access control under its alarm and security service, and most of the systems we are asked to look at were sold on the software and installed on the cheap. This post is the conversation we have with a first-time buyer: cards, fobs or phones, what happens the day someone quits, whether the doors should talk to the cameras and the alarm panel, cloud or closet, and why the wiring decides how long the system lasts. The warehouse version, with docks and cargo, is in our guide to commercial cameras and access control for Savannah warehouses.
Key Cards, Fobs or Phones: What Should Your Staff Carry?
For most small offices and clinics the honest answer is phone credentials for staff and a small stock of cards for visitors, cleaners and the one person who refuses to put a work app on a personal phone. Fobs are the right call where phones are not allowed on the floor or where staff do not carry them. The credential matters less than the policy around it: what gets issued, what gets logged, and how fast it gets turned off.
Key cards
Cheapest per credential and easy to print a photo on. Also the easiest to leave in a car, lend to a coworker, or copy: the older low-frequency cards can be cloned in seconds with a handheld reader. Insist on encrypted smart cards and treat a lost card like a lost key.
Fobs
Tougher than a card and they live on a keyring, so they are lost less often. Same cloning problem on older systems, no photo, and nobody can tell whose fob is whose when one turns up in the parking lot. Good for contractors and for buildings where phones stay in a locker.
Phone credentials
Nothing to print, nothing to hand back, and the credential can be killed from anywhere in under a minute. The trade: it depends on a charged phone, an app the person agreed to install, and a cloud account somebody at your business actually controls. Keep a few cards for the exceptions.
What Happens the Day an Employee Leaves?
With access control, the office manager opens the admin console, finds the name, and disables it. The door stops opening for that credential within a minute, and the log shows the last time it was used. With keys, you either trust that every copy came back or you pay a locksmith to rekey every door that key fit, and you do it again the next time.
This is not a rare event. Federal labor data put quits at 3.1 million people in a single month this past summer, a rate that has barely moved in a year. Scale that to a twelve-person practice and someone is handing back a key every few months, usually on a day when nobody is thinking about doors. The systems that work are the ones where disabling access is part of the same checklist as collecting the laptop, and the person doing it does not need to call anyone.
The log matters as much as the lock. A clinic that keeps patient records or medication behind a controlled door can answer “who went in there on Tuesday night” in thirty seconds, which is what the federal health privacy rules mean when they ask for procedures that control and validate a person’s access to the facility based on their role. We would rather you buy access control because it answers that question than because a form asks about it, but the form does ask.
Should the Doors Talk to the Cameras and the Alarm Panel?
Yes, and this is the part most small-business installs skip. On its own, an access control system records that a door opened. Tied to the cameras, it records who was standing there. Tied to the alarm panel, a badge-in at 2 AM while the building is armed becomes an event somebody looks at instead of a line in a log nobody reads.
Three events earn the integration. A forced door, where the lock did not release but the door opened anyway. A door held open, which is how the back door of a storefront ends up propped with a brick during a delivery. And an after-hours badge-in by a credential that should not be in the building at that hour. Each of those should bookmark the camera clip and, after hours, reach a person. That is what professional monitoring adds over a system that only emails the owner. If you already have cameras, the camera placement advice we give restaurants applies to any storefront: one camera facing each controlled door, at face height, not the ceiling.
Where Should a Savannah Access Control System Live: Cloud, or a Controller in the Closet?
Both keep the doors working when the internet drops, because the decisions are made by a controller on your wall either way. The difference is where the admin console lives, who pays for it every year, and what happens when the company that sold it to you stops answering the phone.
Cloud-managed systems win for most offices under a few dozen doors. The office manager can disable a credential from a phone in the car, software updates are the vendor’s problem, and a second location in Pooler or Bluffton shows up in the same console. The costs are real: a yearly fee per door, and a console login that is now the most important password in the building. Make sure that account belongs to the business, with two named owners, not to the installer and not to whoever set it up. We have taken over more than one system where the only admin was a former employee.
An on-premise controller with local software has no yearly fee and does not care if the vendor is acquired. In exchange you own a small server that has to be patched, backed up and replaced, and changes happen at that server. It still makes sense for a clinic that wants the access log to stay inside the building, or for an owner who has already been burned by a subscription. It is not the cheaper option once you count the person who has to look after it.
Why the Door Hardware and Cabling Matter More Than the Software
Every controlled door is four things: a reader outside, a lock in the frame, a way to get out without a credential, and a power supply that can carry all of it. The software gets the demo. The hardware decides whether the door still works in year five.
The reader should talk to the controller over a supervised, encrypted link, not the decades-old wiring scheme most cheap kits still use. The Security Industry Association’s open supervised device protocol, now an international standard, encrypts the wire and tells the controller the moment a reader is cut or tampered with. The lock is usually an electric strike or a magnetic lock, and that choice is governed by the building code, not by taste. Georgia’s adopted building code says that on a door people use to get out, losing power must unlock it, a push-to-exit release within five feet must unlock it for at least thirty seconds, and the fire alarm must unlock it. A system that traps people when the power fails is not a security system. It is a lawsuit with a card reader.
Then the power. A wall-wart plugged into the nearest outlet is how most of the systems we are called about were fed, and it is why they fail at the first summer storm. A proper installation runs the readers, strikes and exit sensors from a supervised power supply with a battery, on cable that was pulled for the job and labeled, so that the door keeps deciding during an outage and the next technician can read what the last one did. This is structured cabling work, the same trade as the network, and it is where the cheap quote and the right quote part ways.
A First-Time Buyer’s Checklist
Take this to any installer, including us. A good one will have answers before you finish asking.
1. Count the doors that actually need control. Usually it is the entrances and one or two rooms, not every door in the building.
2. Decide who the two admin owners are, in writing, before the first credential is issued.
3. Ask which credential the system uses and whether it is encrypted. “Prox” without another word means clonable.
4. Ask what the door does when power fails and when the fire alarm trips, and ask to see the exit sensor and the push-to-exit button on the drawing.
5. Ask where the power supply goes and whether it has a battery. If the answer is an outlet, keep shopping.
6. Ask how a forced door and an after-hours badge-in reach a human, and whether the camera clip comes with the alert.
7. Ask what you own if you stop paying: the hardware, the credentials, the log, or none of it.
Start With a Door Walk
We walk the building with you, count the doors that matter, check what is already in the walls, and give you a number. If your current keys are fine for now, we will say so.
Frequently Asked Questions
How much does a commercial access control system cost in Savannah?
For a single office with two to four doors, plan on a few thousand dollars per door installed, with the door hardware and cabling making up more of that than the reader. Cloud-managed systems add a yearly fee per door or per controller. The cheapest quote is usually the one that reuses an existing wall-wart power supply and skips the exit sensor, and those are the two parts that fail first.
Can a key card or fob be copied?
Older 125 kHz proximity cards and fobs can be cloned in seconds with a handheld reader sold online. Newer encrypted smart cards and phone credentials are far harder to copy. If your system came with thin grey fobs and no mention of encryption, assume anyone who borrowed one for a minute could have a copy.
What happens to the doors when the internet goes down?
With a properly installed system, nothing. The controller in the closet holds the list of who may open which door and keeps making those decisions on its own. You lose the ability to change permissions or watch events live until the connection is back, which is why the controller needs battery backup and the internet circuit needs a backup of its own.
Do we still need keys if we have access control?
Yes, for a short list of doors and people. Keep a mechanical key override on the main entrance and the server closet, held by two named people, so a dead controller or a dead battery never locks the owner out. Everyone else uses a card, fob or phone, which can be revoked in a minute instead of rekeying the building.
A good access control system is boring. Doors open for the right people, stay shut for everyone else, and the one time it matters you can say who was where. Pick the credential your staff will actually use, own the admin account, and pay for the wiring once. The software will change twice before the strikes wear out.
If you are not sure whether your building needs this yet, that is a fair place to be. A half-day walk-through usually answers it, and sometimes the answer is two doors and a better key policy.
Counting keys you cannot account for? Ask us. Straight answer, no pressure. Call (912) 335-0175.