AccreditPass replaces paper sign-in sheets, expired lanyards, and unanswered compliance questions with a secure, audited, real-time visitor management system. Built for venues where accountability matters.
Clipboards get lost. Handwriting is illegible. DBS certificates expire without anyone noticing. When something goes wrong, there’s no reliable record of who was on site, when they arrived, or who authorised their visit. You’re left piecing together scraps of paper and hoping for the best.
AccreditPass gives you a digital chain of custody for every visitor, from registration to departure, with a complete audit trail you can search in seconds.
Every venue has different kinds of visitors with different requirements. AccreditPass handles them all through dedicated registration flows, each with its own approval process, credential checks, and access rules.
Invited visitors for a specific fixture or event. Each guest uploads photo ID, names their host, and agrees to your policies before they arrive. Admins review and approve individually or in bulk. Approved guests receive a signed QR credential bound to that specific event. Capacity limits are enforced automatically.
Visitors who require verified background checks (DBS, safeguarding clearances, or equivalent). The system tracks certificate expiry dates and runs automated reminders at 60, 30, 14, and 7 days before expiry. If a credential expires, access is suspended automatically at the point of scan.
Parents, guardians, or regular attendees who need ongoing access across a full season or term. Registration is verified against a master roster (linking each pass holder to a specific player, student, or member). Pass limits are enforced per individual, and QR credentials expire automatically at season end.
Whole squads, delegations, or teams arriving together. A lead contact registers the group, lists all staff members by role, and provides a headcount. One QR credential covers the entire group. On scan, the system logs every member’s entry and tracks the full headcount.
Every approved visitor receives a QR code signed with HMAC-SHA256 cryptography. Each code is bound to a specific event, carries an expiry timestamp, and includes replay protection. Codes can’t be forged, reused, or transferred. If a visitor’s approval is revoked, their QR is invalidated instantly through version binding.
Background check expiry dates are tracked automatically. The system sends escalating reminders at 60, 30, 14, and 7 days before expiry, then flags expired credentials on the day. At scan time, expiry is recomputed live. An expired credential means access denied, no exceptions, no human error.
A browser-based scanner that works on any device with a camera. Entry and exit modes, haptic and audio feedback on scan, colour-coded results, and full photo ID display so gate staff can verify the person matches the pass. Works offline with a persistent connection banner. Also exposes a hardware API for turnstile and barrier integration.
Real-time visibility of who is currently on site, broken down by visitor type. A one-click CSV export generates a fire register showing every person checked in but not yet checked out, ready to hand to emergency services. Capacity limits are enforced per event.
Every action is logged: approvals, declines, scans, logins, bulk operations, and security events. Each entry records the user, timestamp, IP address, and the before-and-after state of any data that changed. The audit log is searchable, filterable, and exportable.
Import fixtures and rosters from Excel spreadsheets with flexible column detection (the system adapts to your format, not the other way round). Approve or decline visitors individually or in bulk. Date formats, duplicates, and validation are handled automatically.
AccreditPass has been through six independent security assessments. Every finding has been resolved. The system meets enterprise-grade security standards without requiring an enterprise-grade budget.
HMAC-SHA256 signed credentials with timing-safe comparison. Event-bound, time-limited, version-controlled for instant revocation. Replay detection flags and logs reuse attempts.
Every response carries a unique CSP nonce. No unsafe-eval, no unsafe-inline workarounds. Frame-ancestors blocked. Object sources blocked. Permissions policy restricts camera access to the scanner only.
Upstash Redis-backed rate limiting on every public endpoint. Registration: 20 requests per hour. Scanning: 120 per minute. Exports: 10 per minute. Fails closed in production.
Zod schema validation on every form submission. File uploads verified by magic byte inspection. CSV exports are formula-injection safe. Photo IDs stored in authenticated private blob storage.
Monthly cleanup removes guest and visitor records older than 30 days, scan logs older than one year, and their associated files from blob storage. Approved season passes are exempt until season end.
Every administrative action, every scan, every login, every security event is recorded with full context: user identity, IP address, user agent, request path, and the exact data that changed.
Visitors complete a branded online form with their details, photo ID, and any required credentials. They agree to your privacy and safeguarding policies before submitting.
Admins receive an instant notification. They review each application (or batch of applications) and approve, decline, or request changes. Capacity limits and compliance checks are enforced automatically.
Approved visitors receive a cryptographically signed QR code by email. The credential is bound to a specific event (or season), carries an expiry date, and can be revoked at any time.
Gate staff scan the QR code on any device with a camera, or visitors tap through a turnstile connected via the hardware API. The system verifies the signature, checks the credential is valid for today’s event, confirms compliance status, and logs the entry in real time.
AccreditPass is designed for any venue where you need to know who’s on site, verify their credentials, and prove it afterwards.
Manage scouts with DBS checks, issue season passes to parents and guardians verified against your player roster, process visiting teams with full squad and staff registration, and track match day guests against capacity limits.
Control visitor access to safeguarding-sensitive environments. Track background check expiry automatically. Maintain a real-time fire register for emergency procedures.
Accredit media, medical staff, agents, and other professional visitors. Enforce role-based access. Log every entry and exit for post-event review.
Register guests in advance, issue unique credentials per event, enforce capacity limits, and export attendance data. Replace generic wristbands and printed badges with verifiable digital passes.
AccreditPass was built in a live operational environment, tested across real match days, and hardened against real-world edge cases. It currently manages visitor accreditation for a Premier League football academy, handling match day guests, scout credentialing with DBS compliance, season passes for academy parents, and visiting team registration.
Legacy visitor management systems cost upwards of £5,000 per year and still rely on manual processes. AccreditPass delivers a fully audited, independently verified system at a fraction of the cost. Custom pricing based on your venue size and requirements.
Replace the clipboard. Tell us about your venue and we’ll arrange a walk-through tailored to how you operate. We typically respond within 24 hours.