The Problem
A large residential community with 3,000+ units across 8 towers had no digital access control. Visitor management was handled through paper registers at each gate. guards manually recorded visitor names, vehicle numbers, and times. Residents received no notification when guests arrived. Management had no visibility into entry/exit patterns, couldn't generate security reports, and had a recurring problem with unauthorised vehicle parking.
The client needed a system that digitised the entire flow: pre-register expected visitors, get notified on arrival, allow or deny entry remotely, and give management a full audit trail.
Approach
The system was designed around three user roles. residents, security guards, and administrators. each with a purpose-built interface.
Visitor pre-registration allows residents to generate a digital pass (QR code) for expected guests before they arrive. The guard scans the QR at entry, confirms the vehicle number, and the entry is logged automatically. For unannounced visitors, the guard sends a live notification to the resident who approves or denies within 30 seconds.
Guard interface is a React Native app designed for use on Android tablets mounted at each gate. It features large tap targets, offline queue support (entries sync when connectivity returns), and a vehicle number lookup tied to the resident database.
Resident portal is a Next.js web app and PWA. residents manage their household members, add domestic staff with recurring passes, pre-register visitors, and see a live entry log for their unit.
Admin dashboard gives management heat maps of peak entry times, vehicle frequency analysis, incident reports with photo evidence, and exportable audit logs for any date range.
Key Features
- QR-coded visitor pre-registration with 1-tap confirmation flow for residents
- Real-time push notifications via Firebase Cloud Messaging on guard scan
- Vehicle number plate recognition (camera-captured, stored against entries)
- Recurring staff passes (for domestic workers, delivery personnel) with time windows
- Offline-first guard app. entries buffer locally and sync on reconnect
- Admin heat maps and exportable audit CSV for security compliance
Technical Notes
The backend is a Node.js REST API backed by PostgreSQL. Redis handles session state and the notification queue. Entry events are stored in a time-partitioned table (monthly partitions) to keep query performance consistent as the audit log grows.
FCM push notifications were handled via a worker process. the guard's scan triggers an event, the worker resolves the resident's device tokens, and sends the notification within 2 seconds of scan. If the resident doesn't respond within 30 seconds, the guard is prompted to call or deny entry.
Outcome
The system went live for all 8 towers across a phased 6-week rollout. Paper registers were fully retired within 3 months. Average visitor entry time dropped from 4-6 minutes (manual log + phone call to resident) to under 90 seconds. Management now runs weekly security reports from the dashboard rather than manually compiling paper logs.
The client reported a 40% reduction in unauthorised vehicle incidents in the first quarter after go-live.