Cleanroom access control is the system that ensures only trained staff with a current qualification enter contamination-sensitive production areas, in the right gowning sequence and without exceeding the permitted headcount. Card readers, airlock door interlocks, a live list of who is in each zone and an entry log in which every change is traceable work together.
This guide is for quality and facilities teams running cleanrooms in pharmaceutical, medical device, electronics and sensitive food manufacturing. We covered general factory zoning in our article on zone-based access in factories; here we focus only on what makes a cleanroom different. Hygiene locks and risk zones in food production are covered separately in food factory hygiene access control. For related reading, see the Access Control & Attendance hub.
Why a cleanroom door is not an ordinary door
Elsewhere in a plant, a door is a security device: authorised people get in, others do not. In a cleanroom it is also a contamination control device. Two doors opened out of sequence upset the pressure cascade, one extra person raises the particle load, and an operator whose gowning qualification has lapsed becomes a product risk.
A common picture on site: there are card readers on the doors, but they only ask one question: "is this person an employee?" Who may enter Grade B, where qualification dates are kept and how many people are inside right now live in a separate spreadsheet, a paper logbook or the shift supervisor's memory. When an inspector asks for a record, it has to be pieced together from three different places.
The problem is less a lack of technology than a lack of connection. Even with the basics of card access control in place, a cleanroom is not truly under control until the quality unit's qualification decisions drive the permissions at the door.
What weak cleanroom entry control really costs
For sterile manufacturing, the benchmark is Annex 1 of the EU GMP guidelines. The revised text came into operation on 25 August 2023 and sets out explicit expectations on personnel access:
Only the minimum number of personnel required should be present in cleanrooms. The maximum number of operators in cleanrooms should be determined, documented and considered during activities such as initial qualification and APS. (European Commission, EudraLex Volume 4, GMP Annex 1: Manufacture of Sterile Medicinal Products, paragraph 7.2)
The same document restricts unsupervised access to Grade A and B areas to staff who have passed the gowning assessment and taken part in a successful aseptic process simulation. Gowning qualification must be reassessed at least annually. Where unqualified people must enter in exceptional cases, an authorised person supervises them and their access is assessed and recorded (paragraphs 7.4–7.5). Airlock entry and exit doors should not open at the same time: interlocks for airlocks into Grade A and B, and at least a visual and/or audible warning for Grade C and D as a minimum; where area segregation requires it, a time delay is set between the closing and opening of interlocked doors (paragraph 4.13).
The record-keeping expectation is just as clear. The US FDA's December 2018 data integrity guidance requires data to be attributable, legible, contemporaneous, original and accurate (ALCOA). It also says audit trails should be reviewed as often as the underlying data, for example before batch release. A handwritten logbook line meets few of these tests: you cannot prove who wrote it or whether the time was corrected afterwards. How far door entry records count as GMP records, and how often they are reviewed, is a decision for your own contamination control strategy and quality system.
The cost of weak entry control therefore goes beyond security. Inspection findings, drawn-out deviation investigations and, at worst, rejected batches often grow out of being unable to answer "who was in there that day?" with evidence. We cover the data side in more depth in our guide to GMP data integrity and ALCOA+.
A grade–zone–permission framework for cleanroom access control
The most robust way to design cleanroom access control is to answer four questions for each cleanliness grade: who may enter, on what condition, how the doors behave and what gets recorded. The table below is a starting template for a typical sterile facility; adapt it to your own contamination control strategy.
| Area | Who may enter? | Door behaviour | Headcount limit | Record and review |
|---|---|---|---|---|
| Grade D (preparation, equipment cleaning) | Staff with basic cleanroom training | Airlock with visual/audible warning | Recommended | Entry and exit log, periodic report |
| Grade C (solution preparation) | Staff with current Grade C training | Warning as a minimum; interlock optional | Documented maximum | Entry and exit log, linked to deviations |
| Grade B (aseptic filling surroundings) | Staff with current gowning qualification and APS participation | Interlocked airlock, time delay where needed | Documented maximum number of operators | Audit trail review before batch release |
| Interventions into Grade A | Grade B permission plus intervention training | Per isolator/RABS procedure | Limited by procedure | Recorded with the intervention |
| Unqualified visitors, maintenance, auditors | Only under written procedure and supervision | Paired with an escort's card | Counted | Separate record naming the supervisor |
In practice the "door behaviour" column is usually handled by the door control hardware, while "who may enter" and "record" sit in the access control software. If that boundary is not agreed during discovery, interlocks end up on one side and permissions on the other, and the inspector never sees a single picture.
Seven steps to set up cleanroom access control
- Map the areas and flows. Show changing rooms, airlocks, pass-through hatches and clean areas with their grades on one drawing. Mark personnel and material routes in different colours.
- Turn qualifications into permission groups. Convert each qualification, such as "Grade B gowning current", into a group. Grant door permissions to the group rather than the person, so that when the qualification lapses, so does access.
- Connect expiry dates to their source. If training and gowning records live in quality management system software, feeding group membership from there removes manual updates.
- Document the interlock logic. Write down which airlocks are interlocked, which only warn, where a time delay applies, and how locks release during a fire alarm or evacuation.
- Badge out as well as in. An occupancy limit and a "who is inside" list are only accurate if exits are recorded too. Badging in alone quickly corrupts the count.
- Put exceptions under procedure. Define a supervised, time-limited and separately reported route for maintenance technicians, contractors and auditors.
- Pilot, then set the review routine. Start with one airlock and one Grade C room, and test with the quality unit how entry records will feed into pre-release review.
Reader choice depends on cleanroom conditions. Fingerprint and face recognition are impractical where gloves and masks are worn; contactless cards are usually the lowest-friction option. We compare the options in fingerprint vs card vs face recognition.
How we deliver cleanroom access control at Digital Bridge
We do not sell off-the-shelf packages; every cleanroom project starts with discovery and a needs analysis. We review your layout, grade map and existing door hardware on site with your quality and facilities teams. We fill in the table above for your own areas and decide which rules belong in software and which in door hardware. You then receive a written proposal setting out scope, phases and cost.
Because software and hardware sit within the same team, the airlock scenario is handled end to end. On the card access control hardware side we cover reader, lock and controller placement; where building signals such as door status or room pressure need monitoring, we assess the smart building and BMS layer in the same project. Technical feasibility for hardware is free of charge.
A pilot usually covers one airlock and one clean area. Rules, headcount limits and the entry report are tested on a real shift, the quality unit reviews the findings, and the rollout then extends to the remaining areas. For the general process, see our access control installation steps.
On integration, we feed training and qualification data either through our quality management system work or from your existing system via API integration. The aim is for door permissions to be withdrawn as soon as a qualification lapses, without waiting for someone to update them by hand. Integration scope and validation expectations are agreed together during discovery.
A cleanroom scenario with SmartPass
SmartPass is our platform that brings card access control, time and attendance and canteen meal counting into one system. In a cleanroom, what matters most is its plain-language rules and zone hierarchy. A rule such as "Filling team members with current Grade B qualification may enter Filling Line 2 during shift hours" is defined exactly as written; if two rules conflict, the system states which one applies, and a rule simulator lets you test changes before they go live.
Picture a morning shift. An operator's gowning qualification expired yesterday and the quality unit has removed them from the group; when they present their card at the Grade B airlock, the door stays shut. The supervisor, meanwhile, sees who is inside each zone right now on the live monitoring screen. In a security incident every door can be locked in a single action; when an evacuation is needed, the emergency muster list comes from the same "who is inside" data.
On records, SmartPass keeps every change in the audit log with its previous and new values, and the audit log report needs its own permission. Card numbers are not stored: each is turned into a one-way digest when read, so only the digest and the last four digits are kept, and fields that identify a person are deleted automatically once the retention period ends, which helps with Turkey's personal data protection law (KVKK, broadly comparable to the GDPR). Visitors receive a temporary card at entry whose rights are limited to the visit's access group and duration, and outside maintenance crews can be registered with a validity period, after which their cards are refused at every point; in multi-site groups, each site can be opened as a separate SmartPass organisation with its own database, and authorised users switch between sites from the "Kurumlarım" (My organisations) list without entering a password again.
Your next step
Start by filling in the table above for your own areas and noting the empty cells. In most facilities, the missing piece is not hardware but the link between qualification records and door permissions.
Send us your grade map and current door layout, and in a discovery call we will work out together which interlocks, rules and integrations you need. You can book a call through our contact page or ring us on +90 552 380 25 25.