Modern Visitor Management

The visitor and
access platform for
Malaysian buildings.

AccessOS runs your visitor lifecycle, lobby kiosk, and audit trail on one browser-first stack. Built for corporate HQs, multi-tenant office towers, and multi-building operators. Integrates with your ACMS at Enterprise for full building access.

Sign up on the live tenant. No payment required. Free tier stays free.

  • 7 core features
  • Multi-tenant by design
  • No app to install
AccessOS Security Operations dashboard — waiting-for-approval queue with named visitors, Scan QR + Register Walk-in actions, real-time occupancy stats
What's Included

Every feature on by default.

Every feature ships with the platform. Standard enforces access at the lobby kiosk on visitor arrival. Enterprise extends enforcement to interior doors via your ACMS integration.

Visitor Management

Pre-registered invites, walk-ins, kiosk self-register, host approval, QR check-in. Pass auto-disables on expiry.

Access Control

Define zones, access groups, and role-based grants. Enforced at the lobby kiosk on arrival. Enterprise adds enforcement at interior doors via your ACMS.

People Records

Visitors, occupants, and contractors. Records with photos + face embeddings. Powers host lookup, unit-admin scoping, kiosk face verification, and audit reporting. Enterprise syncs records into your ACMS for automatic physical building access.

Operations Dashboard

Tailored per role. Live occupancy, approval queue, recent activity, alerts. Built for tablets.

Announcements

Target by role, building, or unit. Priority levels. In-app bell plus email for urgent items.

Audit & Compliance

Every login, scan, approval recorded. Filter, search, export CSV for compliance reviews.

Facilities

Browse and book building facilities. Booking calendar per facility. Gym, meeting rooms, common areas.

See it in action

A working product with real workflows.

Screenshots from our live tenant. Not mockups. Demo data. Fictional personas.

Visitor Management

Invite in seconds. Every field maps to the security gate.

Reception or the host fills a compact form. Name, contact, purpose, visit window, host, access group. AccessOS sends the invitation link on any channel (WhatsApp, email). The guest completes their own details and gets a QR pass; security sees them on the approval queue before they arrive.

  • Fill a single dialog to invite; visitor completes the rest on their phone
  • Walk-in registration uses the same form at the reception kiosk
  • Every field is captured in the audit log with performer and timestamp
AccessOS Add Invitation dialog filled with visitor details — name, email, phone, purpose, visit dates, host, and access group
Add Invitation dialog · Building Admin view
Access Control

Four security tiers. Every zone in the building mapped.

Entry, common, restricted, and high-security zones. Enforced at the lobby kiosk on visitor arrival. Enterprise extends enforcement to interior doors via your ACMS integration.

  • Security-tier badges make review at-a-glance
  • Access groups link persons to zones by template
  • Vendor-agnostic. Integrates with any ACMS via API at Enterprise
AccessOS Access Zones page showing Lobby (Entry), Common Areas, Executive Floor (Restricted), and Server Room (High Security)
Access Zones · Building Admin view
Audit & Compliance

Every action logged. Every change traceable.

Announcements, visitor invitations, config changes, access grants. Captured with performer, timestamp, and full payload. Export any period in one click.

  • Append-only event stream. No edits via the platform
  • Filter by actor, event type, target, or window
  • Export CSV for auditors, building owners, and regulators
AccessOS System Audit Log showing entity CREATE events with performer names (Sarah Lim, Ryan Chong), timestamps, and entity types (Visitor, Device, Announcement)
Audit Log · Building Admin view

Explore all seven features on the demo tenant. Sign up free →

The Guest Experience

What your visitors see on their phone.

Three steps on any smartphone. No app to install.

AccessOS visitor QR pass with a scannable QR code, host name, building name, valid window, and access group details

"You're all set. Show this at the security gate."

Guests receive an invitation link, add their details, take a security photo, and get a QR pass. On arrival, they scan at the kiosk and walk right in. Photos are stored securely and removed after the visit ends.

  • Privacy-forward. Explicit consent, retention explained, deleted post-visit.
  • Any phone. Browser-first. No download. Works on iOS and Android.
  • Fast scan. Kiosk validates against the tenant server on arrival.
Built For Every Role

Same platform. Different UI per persona.

Four purpose-built dashboards, one for each role.

AccessOS Building Admin dashboard — VMS operations header, pending approvals with visitor names and hosts, currently-in-building count
Property Manager Visitor management, approvals, reception ops — the day-to-day of running visitor flow at a corporate HQ, a multi-tenant office tower, or an office park. Each tenant company sees only their own visitors; the property manager coordinates across all of them.
AccessOS kiosk home screen — dark tablet UI with QR viewfinder, 'Ready to scan', and 'First time here?' walk-in registration CTA
Reception Kiosk Tablet-first UI at the lobby. QR scan for pre-registered guests, walk-in registration for the rest. Runs on any tablet with a browser.
AccessOS Unit Admin Visitor Invitations page showing Grace Wong pre-registered and self-approved by Ryan Chong for a family birthday visit
Unit Owner / Tenant Company Each tenant scoped to their own space. Invite your own visitors, approve on your own, see only your own activity. Building management coordinates across all units; you handle yours.
Multi-Tenant by Design

Multi-tenant by design, with strict data separation.

Property groups, SI partners, and corporate operators run multiple companies and buildings under one platform. Every tenant's data is fully isolated.

Data isolation per company

Visitor records, members, and audit logs scoped to one company. No tenant ever sees another tenant's data.

Per-building configuration

Each building has its own ACMS adapter, modules, access zones, and operating hours. Settings never bleed across.

Per-tenant scoping

A tenant company on Level 8 approves visitors for their own space. They never see what's happening at Level 15. Building management coordinates across all tenants without leaking any tenant's data to another.

Four roles. Strict permission boundaries.

Role Visitor Access People Operations Announce Audit
Company AdminMulti-building owner
Building AdminProperty manager
Security OperatorLobby reception
Unit AdminUnit owner
Full Read-only Scoped to own unit No access
How It Works

Three ways a visitor enters.

One audit trail across every scenario.

01

Pre-registered invite

  1. 1 Host invites
  2. 2 Guest registers
  3. 3 QR delivered
  4. 4 Scan & enter

Planned visits · Unit Admin owns the invite.

02

Kiosk self-service

  1. 1 Visitor registers
  2. 2 Host notified
  3. 3 Host approves
  4. 4 Scan & enter

Walk-ups · Visitor self-registers, host approves.

03

Operator-assisted

  1. 1 Operator registers
  2. 2 Auto-checked-in
  3. 3 Pass issued
  4. 4 Scan & enter

VIPs & groups · Auto-checked-in on operator action.

No app to download. No hardware to buy. Everything runs in the browser.

Pricing

Start free. Scale when ready.

Free to try one building. Standard for production. Enterprise adds occupant sync via your ACMS + full building access.

Free

RM 0 forever

Try AccessOS on one building

Free tier includes:

  • 1 building
  • Up to 25 occupants
  • Up to 50 invitations / month
  • 30-day audit history
  • Community support
Start free

Enterprise

Custom Tailored to your portfolio

Full building access via ACMS integration

Everything in Standard, plus:

  • ACMS integration. Any vendor with an API
  • Full white-label
  • API access
  • On-prem option
  • Named point of contact for platform and integration
  • Onboarding & integration scoped per engagement
Contact sales

All prices exclusive of SST. SST charged at prevailing rates where applicable.

Compare plans
Feature Free Standard Enterprise
Capacity
Buildings1Unlimited
Occupants25Unlimited
Invitations / month50Unlimited
Kiosk devices1Unlimited
Audit history30 daysUnlimited
Core features
Visitor invitations with QR passes
Delivery via email, WhatsApp
Lobby kiosk. Self-registration & QR check-in
Walk-in visitor registration
Security operator approval queue
Kiosk scan modesQR + Face + CardQR + Face + Card
Multi-tenant scoping (per-tenant, per-unit)
4 roles (Company, Building, Unit, Operator)
Append-only audit trail
CSV export
Multi-building
Portfolio dashboard
Cross-building audit & activity reports
Central role & policy management
Enterprise integration
ACMS integration (any vendor API)
Full white-label
API access
On-prem option
Compliance
KL data center hosting (MY sovereignty)
Face template deletion on checkout / cancel
Support & branding
SupportCommunityPriority + named contact
Kiosk brandingPowered by AccessOSCustom / white-label
OnboardingScoped per engagement
Security & Compliance

Enterprise defaults. Out of the box.

Every feature below ships enabled on day one.

Data residency Kuala Lumpur data center Hosted in Malaysia
Encryption At rest & in transit TLS 1.3 · AES-256
Isolation Per-tenant boundary DB · API · UI enforced

Tenant Isolation

Every client fully separated. No tenant ever sees another tenant's visitors, members, or audit trail. Enforced at every layer: DB, API, UI.

Full Audit Trail

Every login, scan, approval, configuration change captured with who, when, and from where. Append-only log. CSV export for compliance reviews.

PDPA Ready

Full data export at any time, data deletion on cancellation, append-only audit trail. Aligned with Malaysian PDPA. Hosted in a Kuala Lumpur data center.

Pass Control

Rejected, expired, or cancelled passes cannot be reused even with the original QR. System refuses reuse automatically.

Partner Network

Built on your stack. Open to building new ones.

AccessOS sits as the software layer on top of hardware you already deploy. New integrations happen through a joint engagement. Scoped and commercially agreed upfront.

  1. 1

    Discuss

    Surface the ACMS, the use case, the client.

  2. 2

    Scope

    Define adapter behaviour and effort.

  3. 3

    Commercial

    Agree commercial terms & SOW jointly.

  4. 4

    Build

    Codigenius builds, partner validates.

  5. 5

    Co-sell

    Joint go-to-market with the new integration.

Frequently asked

Answers to the questions we hear most.

01Getting started

How long does deployment take?

SaaS-only (browser + existing tablets): same-day signup, guided onboarding within 1–2 weeks. Data import, user training, kiosk setup on your existing tablets. Designed for same-week go-live on straightforward deployments. Single-building onboarding is included; multi-building rollouts scoped per engagement.

With ACMS integration (Enterprise): add 4–8 weeks depending on scope. Adapter development, API integration testing, and parallel-run testing are scoped and priced upfront in the deployment engagement.

Which tier fits my building?

Free, try AccessOS on one building. Capped at 25 occupants, 50 invitations/month, 1 kiosk device, 30-day audit history, community support. Best for evaluations, small offices, and freelancer studios.

Standard is pure visitor management in production. Invitations, QR passes, lobby kiosk self-registration, security approval queue, portfolio dashboard, cross-building reports, audit trail. Priced per building, whether you run one building or fifty. Priority email support.

Enterprise adds occupant sync via your ACMS (any vendor with an API), white-label, API access, and on-prem deployment. When AccessOS syncs to your Access Control Management System, occupant and visitor records flow into your existing hardware so access is granted automatically at doors.

You can upgrade tiers when your scope grows; data and configuration migrate automatically.

What does AccessOS do at the Standard tier?

Standard is pure visitor management. AccessOS handles the full visitor lifecycle:

  • Visitor invitations with QR passes sent via email or WhatsApp
  • Lobby kiosk for guest self-registration and QR check-in on arrival
  • Security operator approval queue at reception with real-time host notification
  • Walk-in visitor registration at the kiosk (no pre-invite needed)
  • Portfolio dashboard + cross-building audit & activity reports
  • Append-only audit trail of every visitor event, configuration change, and administrative action
  • Multi-tenant scoping so each tenant company (or unit) sees only their own visitors

Occupants (staff, residents, tenants) continue to use your existing access system at Standard. Physical cards, ACMS-issued credentials, whatever your building runs today. AccessOS doesn't touch how occupants enter the building.

Upgrade to Enterprise to add ACMS integration. AccessOS then syncs occupant + visitor records into your Access Control Management System via API. Once synced, occupants use their existing cards at doors, and visitors receive temporary access on their QR pass. Your existing hardware handles the physical access; AccessOS handles the person layer.

Can we migrate from our existing visitor management or access control system?

Yes. Migration from an existing VMS or access control system is supported as part of onboarding. We map your current data schema to AccessOS entities (visitors, occupants, contractors, access zones, permissions), then run a parallel period so both systems produce the same output before cutover. Data mapping and parallel-run support are scoped and priced per engagement.

02Technical & security

Do you integrate with our existing Access Control Management System (ACMS)?

Yes. At the Enterprise tier. AccessOS syncs occupant and visitor records to your existing ACMS via its API. You keep your current access control hardware and vendor; we push person records into your ACMS so it knows who to grant access to. No vendor lock-in. As long as your ACMS exposes an API to create person records, we can integrate.

We don't touch door hardware directly. That stays with your existing access control platform. Standard is browser-first (any tablet with a browser becomes a kiosk, no ACMS or hardware integration needed). ACMS integration scope is defined and priced per engagement.

Do we need to buy new hardware?

No. AccessOS runs in the browser. Operators use existing tablets or PCs at reception. Kiosks can be tablets you already have. Face-scan mode uses the built-in camera; access-card mode uses any standard NFC/RFID reader. No proprietary hardware. New hardware is only needed if you're replacing legacy door controllers or ACMS integration hardware (optional, priced per engagement).

Can we self-host on our own infrastructure?

Yes. On-prem deployment is available at the Enterprise tier. Your data, your servers, your infrastructure. We provide Docker Compose manifests and deployment support. Ongoing updates delivered through your preferred change-management process.

Is AccessOS PDPA compliant?

Yes. AccessOS is built for Malaysian PDPA compliance. What we support today:

  • Full data export at any time (CSV + JSON)
  • Data deletion on cancellation, with written confirmation of removal
  • Append-only system audit log capturing every configuration change, access grant, and administrative action. With performer, timestamp, and full payload
  • Role-based access with granular per-scope permissions (company, building, unit)
  • On-prem deployment for customers requiring complete data residency control (Enterprise tier)

Biometric data handling (face recognition): when face-scan is enabled as a kiosk mode, visitor photos and face templates are stored alongside their invitation record on MY soil. Face templates are deleted when the visitor checks out or when the invitation is cancelled or rejected. Buildings can disable face-scan globally; QR-code and access-card modes carry no biometric data.

Hosting: your tenant data. Including face templates when face-scan is enabled. Is hosted in a Kuala Lumpur data center on Malaysia soil, under MY jurisdiction. For customers requiring on-premises hosting on their own infrastructure, our Enterprise on-prem option delivers full data residency and change-management control.

Who owns the data? What happens if we cancel?

You own your data. On cancellation, you get a full export of all tenant data (visitors, occupants, access history, audit log) in a machine-readable format (CSV plus JSON). Standard: export delivered within 5 business days of your cancellation request. Enterprise: export terms in your service agreement. After the export is delivered and confirmed, your data is deleted from our systems in line with the retention policy in your service agreement.

03Pricing & contracts

What's the contract length? Can we cancel?

Monthly billing with 30-day notice cancellation on all tiers. No lock-in. Enterprise deployments may include custom terms negotiated per engagement (e.g., multi-year commitments in exchange for further discount or bespoke on-prem provisioning).

What's included in support?

Free uses community support (forum + docs, best-effort). Standard adds priority email during business hours (Malaysia time). Enterprise adds priority queue plus a named point of contact for platform and integration. Every tier includes all software updates, security patches, and access to release notes.

Let's get your buildings on AccessOS.

Book a 15-minute demo. We'll show you how AccessOS fits your properties. Modules switch on or off per client, no rebuild required.

Book a demo

15-minute demo · No commitment · sales@codigenius.com