Access control for warehouses & distribution centers

We have been installing commercial security in Orange County since 1984, and warehouse work is its own discipline. The industrial corridors here, Anaheim Canyon, Santa Ana's Dyer Road district, the flex parks in Lake Forest and Huntington Beach, are full of buildings where somebody bought an office-grade access system and watched it die on the floor. Readers that fog up, motion sensors that fire every time a forklift passes, controllers mounted where a pallet eventually finds them.

So instead of a product pitch, here is how we actually walk a warehouse when an operations manager calls us. Door by door, front gate to the cage. If you follow along with your own building in mind, you will finish with most of a scope of work.

Walk the building: which doors get what

Every warehouse has the same cast of doors, and they do not all deserve the same treatment. A reader on every opening is how quotes get bloated. Here is the shorthand version, then we will take each one properly.

Man doors and the propped-door problem

Perimeter man doors are where warehouse security actually leaks. Not the docks, not the gate. The steel door on the north wall that someone props with a wood block in August because the building is hot and the smoking area is out there. Every facility has one, and everyone on the floor knows which one it is.

The fix is not a lecture, it is hardware: a reader where the door genuinely needs to be an entrance, a door contact everywhere, and a door-held-open alarm with a delay long enough for legitimate use. When the door sits open past two minutes, a supervisor's phone buzzes. That one alert changes behavior faster than any policy memo, because it removes the anonymity that propping depends on.

Dock doors: monitor, don't badge

People assume dock positions need readers, and they almost never do. An overhead door that cycles forty times a shift is not a candidate for credentialed entry; you would just be training everyone to ignore the system. What a dock position needs is a contact that tells the system it is open, schedules that flag it opening outside working hours, and a camera that ties every open event to footage. Control the man doors near the dock so people cannot wander in through the freight path, and let the dock doors do their job.

One hardware note that bites retrofits: request-to-exit sensors on or near overhead doors need to be chosen and aimed carefully. A standard PIR request-to-exit sensor pointed into a dock area will trigger on forklift traffic and heat plumes all day, masking real events. On doors like these we would rather use a push-to-exit button or a tightly aimed sensor than a wide-angle motion detector that cries wolf.

The office-to-floor door

Inside most warehouses there is a door between the front office and the floor, and it is quietly one of the most important doors in the building. On one side: payroll records, the server rack, blank checks, personnel files. On the other: the highest-turnover workforce in your company plus a rotating cast of drivers and vendors. Put a reader on it. In facilities with real separation needs we control it in both directions, so office access is a permission rather than a hallway.

Cages and high-value areas

If you store electronics, pharma, tools, alcohol, or anything else that walks away, you likely already have a cage. The cage door deserves the tightest treatment in the building: reader, short access list, camera aimed at the door, and an access schedule that matches when work actually happens in there. This is also where the audit trail earns its keep. When inventory goes missing from a cage, the question is who was in there, and a key-locked cage answers it with a shrug.

Yard gates and gate operators

If you have a fenced yard, the yard is the first layer, and a gate that stands open all day makes everything behind it advisory. Motorized gates take readers well: a pedestal at car height, sometimes a second at truck height, or long-range credentials for your own fleet so drivers do not have to lean out of the cab. Most operators accept the same dry-contact trigger a keypad uses, so we can often put a reader on the gate you already own.

Two honest caveats. Older operators without modern entrapment protection should be brought up to current safety standards before anyone automates them further, and gates need a plan for visitors and carriers, usually an intercom to the office, or the gate just becomes the most expensive doorbell in the county.

The employee entrance at shift change

Here is the throughput math nobody runs before buying: if 80 people badge through one door at 6 a.m. and each entry takes four seconds, the last person waits over five minutes, in the dark, in a line. That line is where tailgating is born. Nobody holds 80 people to policy at a bottleneck.

The fixes are ordered by cost. First, fast credentials: modern readers with cards or phone credentials clear people in about a second, and shaving three seconds per person shrinks the line dramatically. Second, a wider unlock-on-schedule window with a supervisor present and a camera running, which some operations prefer at shift start, then the door locks down for the rest of the shift. Third, a second badged entrance. Turnstiles are the last resort, appropriate for very large headcounts, and we will tell you if you are actually there.

Driver check-in

Outside drivers are the largest group of strangers who touch your building every day, and the answer is routing, not badging. One designated check-in door or window, signed from the yard, with an intercom or a doorbell to the office. Drivers wait in a defined area, use a designated restroom if you offer one, and do not cross onto the floor. Every other exterior door stays locked to them. This is also exactly the shape supply-chain security programs expect, which brings us to C-TPAT.

Credentials when your workforce turns over

Warehouses run on turnover and temp labor, and this is where office-style credential management falls apart. The old pattern, a coffee can of prox cards at the front desk and a spreadsheet nobody reconciles, means that within a year you have no idea how many live credentials exist or who holds them.

The pattern that works has three parts. Everyone gets an individual credential, including temps. Shared badges destroy the audit trail on the exact people it matters most for. Temp credentials expire automatically. Cloud platforms let you set an end date at issuance, so a two-week assignment ends itself without anyone remembering to collect a card. When the staffing agency extends someone, extending the credential is a ten-second edit. Offboarding is same-day, not end-of-week. When someone is walked out at 10 a.m., their access dies at 10:05 from a phone. If they also held physical keys to anything, our commercial locksmith side can rekey those cylinders on the same visit, because a revoked badge does not help if the old brass still works.

On credential type: cards still make sense for temp-heavy floors, since asking agency workers to install a work app on personal phones is friction you do not need. Phone credentials shine for supervisors, drivers, and anyone who touches the gate. Platforms like PDK read both at the same door, so this is not a fork in the road. Our platform comparison goes deeper on which system fits which building.

Schedules that match how the building actually runs

A warehouse door should not behave the same at 2 p.m. and 2 a.m., and this is the cheapest security upgrade in the whole system because it is configuration, not hardware. Day-shift badges work 5:30 a.m. to 4 p.m., swing shift gets its own window, and a picker's card simply does not open anything at 3 a.m. Supervisors get wider windows, and the cage schedule matches cage work rather than building hours.

The other half is alerting on the exceptions. A dock door opening at midnight, a denied badge at the cage on a Sunday, a gate cycling outside operating hours: those events should reach someone's phone the moment they happen, not surface in a report nobody reads. When we commission a system, building these schedules with whoever runs the floor is a real part of the job, because a system left on 24/7 access is a very expensive key.

C-TPAT and the audit trail

If your freight touches international supply chains, or your customers' freight does, you will meet CTPAT, Customs and Border Protection's voluntary supply-chain security program. Even facilities that never join the program get handed security questionnaires by partners who did, so the expectations flow downhill to almost every DC eventually.

The physical-security expectations in CBP's minimum security criteria are not exotic. Cargo-handling and storage facilities should have physical barriers that guard against unauthorized access. Access controls should positively identify all employees, visitors, and vendors at points of entry. Visitors present photo ID, get logged, display temporary identification, and are escorted. And there must be written procedures for issuing, changing, and removing access devices. The criteria are risk-based, with items designated as musts or shoulds depending on your role in the supply chain.

Notice that nothing in that list names a product. What an electronic access system does is make the evidence automatic. When a validator or a customer's security auditor asks how you control access, the difference between "here is our key policy binder" and "here is the live list of every active credential, and here is the event log for the cage going back two years" is the difference between a long day and a short one. Facilities pursuing CTPAT should read CBP's current criteria for their business type directly, and your compliance people get the final say. What we can tell you is which doors and records the paperwork keeps pointing at, because we have wired buildings for exactly these audits.

Hardware that survives a warehouse

This is where warehouse jobs diverge hardest from office jobs, and where cheap installs go to die. The environment is dust, vibration, heat, washdowns near some docks, and vehicles that weigh four tons and do not look up.

• Exterior-rated readers everywhere it matters. Anything on the yard, the gate, or an unshaded wall needs a reader with a real IP rating for dust and water. An indoor reader in a gasketed aftermarket housing is a callback waiting for its first hot, wet week.
• Protect everything at forklift height. Bollards in front of gate pedestals, steel guards over conduit runs along the floor path, controllers mounted high or inside a room rather than on an open warehouse wall. We have replaced too much hardware that lost an argument with a pallet.
• Choose exit devices for the environment. As covered above, wide-angle motion sensors near dock activity false-alarm constantly. Push-to-exit buttons and carefully aimed sensors keep the event log meaningful.
• Seal and route the wiring like it is industrial, because it is. Conduit rather than exposed cable, drip loops on exterior penetrations, and labeling, so the person troubleshooting in five years is not doing archaeology.

Cameras and doors, working together at the docks

Access control tells you a door opened and whose credential opened it. It cannot tell you what came through. At the docks, where the whole point is freight moving in both directions, pairing door events with video surveillance is what turns a log entry into an answer. Dock position 6 opened at 11:41 p.m.: the event is interesting, the forty seconds of footage around it is the actual answer.

Modern platforms link these so a door event pulls up its clip without exporting anything or matching timestamps by hand. If you are buying cameras and access together, that integration should shape the platform choice; if you already own cameras you like, pick an access platform that does not force the issue. Either way, cover every dock position, the employee entrance, the gate, and the cage door, and keep enough retention to cover a claim cycle, since freight disputes surface weeks after the trailer left.

Mustering and getting out

Two life-safety points, because they change designs. First, egress always wins. Every door on an exit path must open from the inside without a credential, without special knowledge, and without power, no matter what the access system thinks. California fire code does not negotiate on this, and in most Orange County cities electrified openings mean permits and a fire marshal sign-off. A bidder who does not bring up permits is telling you something.

Second, the same badge data that runs your doors can help you count heads. In an evacuation, an access platform can produce a list of everyone who badged in and has not badged out, which gives the muster-point supervisor a starting roster instead of guesswork. It is not perfect, tailgaters and visitors blur it, but a warehouse running individual credentials for everyone, temps included, gets a far more useful muster report than one running shared badges. One more reason the coffee can of prox cards has to go.

Phasing a 5 to 20 door facility

Almost nobody should do all of this at once, and the good news is that cloud platforms are built to grow, so phasing is not a compromise. The shape we recommend most often:

On budget: warehouse doors span a wide range because the openings do. An interior office door, an exterior man door in conduit, and a gate operator with pedestals and trenching are three different jobs that happen to all be called a door. Rather than invent a number here, use our Orange County cost guide for real per-door installed ranges and licensing costs, then expect the exterior and gate work to sit at the top of those ranges and the interior doors near the bottom. A phased quote should price each opening on its own line so you can see exactly that. Our access control page covers what a full install includes if you want the component-level view.

The honest summary: warehouses reward planning and punish generic installs. Walk your own building with this guide, mark the doors that worry you, and you will already know more than the average bidder assumes you do. If you want a second set of eyes, that is what the free survey is for. Tell us about the facility and we will walk it with you.