Access Control and Door Entry Installer Insurance

Everything about access control liability starts with the fact that a locked escape route is a life safety failure, not a security feature.

Electronic locking on a final exit or an escape route must release in the circumstances that matter: on a fire alarm signal, on loss of power, and on operation of a green emergency release adjacent to the door. Getting that right is partly product selection, because a fail secure lock and a fail safe lock behave in opposite ways when power is removed, and partly configuration, because the interface to the fire alarm has to be wired and tested rather than assumed. The realistic failures are a lock specified fail secure on an escape door, a fire alarm relay never connected, a break glass that was fitted but not wired through, and a configuration change during later maintenance that quietly removed the release.

So the commissioning record is the defence, and it needs to be specific. Which doors are on escape routes, what lock type was fitted and why, that the fire alarm interface was tested by activating the alarm rather than by shorting a terminal, that each emergency release was operated and the door opened, and the date and who witnessed it. Repeat it on every maintenance visit, because a system that released correctly at handover and does not now is still a system somebody relies on.

Maintenance contracts in this trade carry a particular risk, because what you inherit is not just hardware but a set of decisions.

A system installed years ago by somebody else has lock types you did not choose, a fire alarm interface you did not wire, release arrangements you have never tested, credentials issued to people who left, and sometimes doors that were added later by a handyman. From the day you hold the contract, a failure is examined against what a competent maintainer should have found, and the fact that you did not create the problem is not much of an answer.

Which makes the takeover inspection worth more than the first year's contract fee. Walk every door, record the lock type and release arrangement, test the fire alarm interface and every emergency release, list what is wrong, and give the client a written report with recommendations and a priority. Where remedial work is declined, keep that refusal and restate it at every subsequent visit rather than carrying it silently. Also review the credential database, because a system full of active cards belonging to former staff is a security failure sitting in your contract.

An access control system is a record of individuals' movements, and installers frequently end up administering it without thinking of themselves as data handlers.

The system knows who entered which door at what time, often with a photograph, and sometimes with biometric data. Where you host the software, hold remote access, or administer users on the client's behalf, you are handling personal data about every occupant of the building, which includes employees, residents, visitors and contractors. A compromise of your remote access is both a security failure for the building and a personal data incident for everybody in it.

So treat the access side of your business with the controls that implies. Multi factor authentication on any remote access platform, unique credentials per engineer rather than a shared password, default passwords on controllers and intercom panels changed as part of commissioning rather than left, a record of which clients you hold remote access to, and clarity in the contract about whether you administer users or the client does. Then check the cyber wording, because a policy written around your own office data may not contemplate a breach of a system you administer for somebody else.

Where the access point is a vehicle gate or a barrier rather than a door, the exposure changes from electronics to machinery.

A powered sliding or swing gate moves with enough force to injure, and the hazards are recognised: crushing between a leaf and a post, trapping in a drive mechanism, shearing at a hinge, and a gate that fails and falls. The people affected are frequently residents and children at a block of flats rather than trained users, and they have no idea they are near a machine. Force limitation, safety edges, photocells, and a force test with measured results are the controls, and the commissioning record with those measurements is the document that matters.

The same applies to taking on maintenance of existing gates, which is where most of the serious incidents arise: gates installed years ago without safety devices, with devices that have failed, or with force settings that were never measured. If you are asked to maintain one, assess it and report in writing rather than servicing it as found, because a gate that injures somebody after your visit is examined against what you should have identified. Where domestic driveway gates are the work, our fencing page covers that end.

The escape route question is the one that matters most. We are an FCA regulated broker and will not tell you we are the best choice. These are the questions that decide it.