A contractor arrives to repair a garage door, service a fire panel or inspect a water leak. The work may take an hour, but the access decision can create risk long after they leave. Knowing how to control contractor site access means more than deciding who gets a key. It means giving the right person access to the right area, for the right period, with a clear record of what happened.
For strata managers, accommodation operators and building teams, contractor access is a daily operational task. When it relies on physical keys, phone calls and handwritten sign-out sheets, small gaps quickly become security issues. A key is not returned. A contractor attends outside approved hours. No one can confirm who entered a plant room. The practical answer is to replace informal access with a clear, repeatable process.
Start with access rules, not keys
Before issuing any access method, define the conditions under which a contractor can enter. This is particularly important for shared buildings, aged care facilities, student accommodation and sites with sensitive areas such as comms rooms, master key cupboards, storerooms or resident-only spaces.
A good contractor access process answers four questions: who is attending, why are they attending, where do they need to go, and when should access end? If the request cannot answer these questions, it should not be approved yet.
The work order should identify the contractor’s company, individual attendee where possible, contact number, expected arrival window and the areas required for the job. This avoids the common problem of granting broad access because the request was vague. An electrician repairing lighting in a common corridor does not automatically need access to every floor, garage, office or utility room.
There will be exceptions. An emergency plumber may need wider access than a scheduled maintenance contractor. Even then, access should be reviewed after the incident and removed as soon as the work is complete.
Give access only for the approved time
Permanent keys and ongoing remote controls are convenient until they are not. Once handed over, they can be copied, misplaced or retained by people who no longer work for the contractor. The building team is then left trying to recover an unknown number of keys or considering a costly rekey.
Time-based access changes this model. Instead of giving a contractor a key they must remember to return, give access that starts before the booked appointment and expires shortly after the expected finish time. If work is delayed, an authorised manager can extend access remotely rather than issuing another key or asking staff to attend site.
The right time window depends on the job. Routine servicing may require access from 8:00 am to 12:00 pm. A cleaner working in a vacant short-stay apartment may need a shorter period. A contractor completing a multi-day project may need scheduled access across several days, rather than unrestricted entry in between.
This approach protects the site without slowing down legitimate work. Contractors can arrive prepared, while managers retain control over when entry is possible.
Limit access to the areas required
Contractors should not receive a master key by default. Broad access is often used as a shortcut when a building has too many locks, too few keys or no easy way to manage permissions. It may save a few minutes at handover, but it increases exposure across the entire property.
Set access by zone. A lift technician may need the lift motor room and relevant common areas. A gardener may need a gate, a shed and outdoor amenities. A contractor repairing an apartment appliance may need access to one unit only. This principle is simple: provide enough access to complete the job, and no more.
For multi-site operators, consistent access zones also reduce confusion. Rather than relying on each manager’s memory, establish standard categories such as common property, plant rooms, office areas, accommodation units and restricted services. This makes approvals quicker and helps new staff follow the same process.
Replace key handovers with accountable access
A key register can show that a key was signed out. It rarely proves who used it, whether it was copied, or precisely when it was returned. If several people share the same contractor key, accountability becomes weaker again.
Digital access management creates a clearer record. Each authorised person can be issued their own access permission, while managers can see when that permission was granted, used, changed or revoked. With a smart KeySafe, a contractor can retrieve the relevant key only during their approved access period, without requiring an on-site handover.
This is especially useful for after-hours work. A building manager does not need to drive across town to meet a contractor at a gate or leave a key in an unsecured location. The contractor receives authorised access, the event is recorded and the permission expires when it is no longer needed.
Call2Access allows building teams to manage these permissions from one platform, including access to gates, common areas, garages and secure key storage. The operational benefit is straightforward: fewer key movements, less chasing, and a better record when questions arise.
Make verification part of the process
Access control is only as reliable as the approval behind it. A message saying “the contractor is on site” is not enough, particularly when work affects resident areas, building services or high-security spaces.
For planned jobs, verify the company and confirm the attendee before access is issued. Ensure the person arriving is associated with the approved contractor, not an unknown subcontractor who has been sent without notice. For larger jobs, require a site induction, relevant licences or insurance evidence in line with your building’s policies.
For urgent work, use a shorter verification path rather than removing verification altogether. Confirm the supplier through an established contact number, record who approved the call-out and restrict access to the affected area where practical. Speed matters during an emergency, but so does preserving an accurate record of the decision.
Know who entered, and investigate exceptions quickly
An audit trail is not just useful after a serious incident. It helps resolve ordinary operational questions: Did the contractor attend? Did they arrive before the resident reported the issue? Was access used after the work order was closed? Was a key retrieved but not returned to the KeySafe?
Review access activity when something does not look right. Examples include repeated attempts outside the approved window, access used at an unexpected time, or a contractor requesting entry to an area not included in their work order. These do not always indicate misconduct. They may reveal a booking error, a delayed job or a contractor who needs an extension. The important point is that the building team can see the exception and respond.
For high-traffic sites, nominate who monitors these events. It may be the building manager, strata manager, facilities team or after-hours contact. Without clear ownership, even a detailed record can go unused.
Set clear responsibilities for staff and contractors
Technology supports good access control, but it does not replace basic expectations. Staff should know who can approve contractor access, when a request needs escalation and how to respond if a contractor cannot gain entry. Contractors should know that access is personal, time-limited and not to be shared.
Put these expectations in work orders and supplier onboarding material. State that contractors must not lend access credentials, retrieve keys for unapproved colleagues or enter areas outside the scope of work. Require them to report a lost key or failed access attempt immediately.
It is also worth reviewing access after a contractor relationship ends. Remove standing permissions, collect any remaining physical keys and update supplier records. This is often missed when a business changes technicians or a maintenance contract moves to a new provider.
Build a process that works on busy days
The best access process is one staff will use when phones are ringing and several contractors are due on site. Keep approvals simple, use standard access zones and avoid steps that require a manager to be physically present for every routine visit.
Start with your most frequent contractor types: cleaners, trades, maintenance providers, emergency services contractors and inspectors. Map what they need to access, when they normally attend and who approves them. Then move those rules into a digital system that can issue and remove access without manual key handovers.
Control should not mean creating delays for good contractors. It should mean removing uncertainty for everyone. When access is specific, temporary and recorded, contractors can get on with the job and your building remains protected.