Access control is the electronic management of who can open which door, and when, backed by an audit trail of every use and every denied attempt. A metal key is anonymous, permanent, and copyable; a credential is individual, schedulable, and revocable from a keyboard, and that difference is the entire argument in one sentence. This guide covers what the systems are made of, what they honestly cost per door, the life-safety rules that outrank every security preference, and the camera integration that turns a log entry into evidence.
A commercial access control system pairs credentials (cards, fobs, PINs, mobile) with readers, controllers, electrified locks, and management software. Published industry ranges put typical installed cost at roughly $1,500–$4,000 per door, and door condition is what moves you inside that range. Egress must always be free, the local fire authority has final say on lock behavior, and the biggest payoff is integration: a badge event and the camera clip of it, in one timeline.
What is an access control system made of?
Five layers, and every quote you receive should name all five:
- Credentials. Cards, fobs, PIN codes, or mobile credentials on a phone. This is what you issue, schedule, and revoke the day someone leaves.
- Readers. The device at the door that reads the credential.
- Controllers. The panel that decides whether this credential opens this door right now, and logs the answer either way.
- Electrified locks. The hardware that physically holds the door, usually an electric strike or a magnetic lock. This choice carries more code implications than any other line item (more below).
- Management software. Where you add people, set schedules, pull audit reports, and receive alerts.
What does access control cost per door?
Published industry ranges put a typical commercial installation at roughly $1,500–$4,000 per installed door, depending on hardware tier and, above all, door condition. Here is the honest part: retrofitting old doors is where budgets die. A modern hollow-metal door with a prepped frame accepts an electric strike gracefully. A worn aluminum storefront, a warped wood door, or a nonstandard frame can need carpentry, new closers, or different lock hardware entirely before the access control work even starts, and none of that shows up in a per-door price quoted over the phone. Survey the doors before believing any number, ours included. That is what a free site assessment is for.
Can a locked door ever block someone from getting out?
No, and this is where security preferences lose to life safety every time. Egress must always be free: a person inside leaves by pushing the exit hardware, credential or not. The related decision is how each lock behaves when power fails:
| Lock behavior | On power loss | Common hardware |
|---|---|---|
| Fail-secure | Stays locked from outside; egress from inside stays free | Most electric strikes |
| Fail-safe | Lock releases completely | All maglocks, some strikes |
Which behavior belongs on which door depends on the door's role and the fire code, maglocks in particular demand dedicated push-to-exit devices to stay legal, and the local AHJ (authority having jurisdiction, usually your fire marshal) has final say. A design that skips the AHJ conversation gets redone at your expense.
Why integrate access control with cameras?
Because a badge event tells you whose credential opened the door, and only the camera tells you who was holding it. Integrated systems pair every door event with its footage in one timeline: a badge used at 2 AM stops being a mystery row in a log and becomes a ten-second clip. Propped doors, denied attempts, and tailgating become reviewable moments instead of arguments. If cameras are on your roadmap too, design both at once, because the cabling, network, and head-end decisions overlap; the Missouri camera buyer's guide covers that half of the project.
Cloud-managed or on-prem panels?
The same tradeoff as cloud versus on-site recording for cameras, with the same answer: it depends on your IT reality, not on fashion. Cloud-managed access control brings administration from anywhere, automatic updates, and a subscription bill. On-prem panels bring one-time licensing, full local control, and the obligation to maintain a server and its backups. Multi-site operations and lean IT departments tend cloud; organizations with standing IT staff and strict data policies tend on-prem. We design and install both and will tell you which your situation actually favors. The full argument is in our cloud versus on-site recording guide; swap "footage" for "door events" and it maps one for one.
Frequently Asked Questions
Almost never. Most buildings control the perimeter doors plus a few sensitive interiors (server room, records, inventory cages) and leave the rest keyed. Starting with a handful of doors and expanding later is a normal path, provided the controller you buy has spare capacity.
Often the doors, sometimes the locks. Door condition decides the budget: a solid door with a standard prep takes hardware easily, while worn or nonstandard doors need carpentry first. This is why we survey every door before quoting instead of pricing per door over the phone.
Fail-secure locks stay locked from the outside while egress stays free from the inside; fail-safe locks, including all maglocks, release entirely. Controllers are typically installed with battery backup to ride through short outages. Which behavior each door gets is a fire-code decision your AHJ signs off on.
Most commercial access control installations run one to three working days on site. Timelines scale with door count and door condition, so a multi-door retrofit with frame work runs longer. A door survey turns that into a real schedule before you commit.