Factory access control zones extend control beyond the main gate: instead of only recording who enters the site, you decide who may enter which part of it, and at what times. The plant is divided into zones, one rule set defines which roles may enter each zone and when, and every crossing is logged.
Typical zones are the gate, production, warehouse, quality lab and energy room. The result is fewer unauthorised entries, lower safety risk and, in an emergency, a clear picture of who is in which zone.
This article covers how to divide a factory into zones, the role-zone-time matrix, how permissions decay over time, and a step-by-step setup. For the basics and related topics, see our access control and attendance hub.
Why one gate is not enough
In many factories access control starts and ends at the gate. Once through, a person can in practice go anywhere on site. That creates three problems:
- Untrained people in hazardous areas. Chemical stores, high-voltage panels, compressor and boiler rooms, shipping areas with heavy forklift traffic: only people with the right training should be in them. A rule that exists only on a sign cannot be enforced.
- Product and information security. A tool room, R&D workshop, sample room or a line built for one customer's project may involve trade secrets. In food and pharmaceutical production, uncontrolled entry into a hygiene zone is a direct product risk, which is why hygiene-zone entry logs can form part of food traceability and digital HACCP records.
- Nobody knows who is where. The gate record only tells you who is on site. In a fire or gas leak, the real question is who is in the affected zone.
Manufacturing is among the sectors where work accidents are most concentrated in Türkiye:
According to Türkiye's Social Security Institution (SGK), manufacturing (NACE 10–33) accounted for roughly 314,000 work accidents in 2025, about 41% of the total, and 420 work-accident deaths. (SGK Statistical Yearbook 2025)
The problem is large worldwide too: the ILO estimates that 395 million workers worldwide sustained non-fatal work injuries (ILO, "A Call for Safer and Healthier Working Environments", 2023). Zone-based access does not prevent accidents on its own, but by ensuring only authorised, trained people enter hazardous areas it brings a significant source of risk under control. Behaviour inside the zone can be checked with AI-based PPE detection on cameras.
Dividing the factory into access control zones
A good zone structure comes from a map of risk and process, not from the floor plan alone. In a typical production site, zones can be thought of as nested layers:
- Perimeter and gate. Staff turnstiles, vehicle barriers, visitor and supplier reception; for the vehicle side, see our vehicle access control system guide.
- Shared areas. Offices, changing rooms, canteen, training room.
- Production areas. Lines or halls, with hygiene or clean-room areas as a separate layer where needed. We explain the door set-up for this layer in cleanroom access control and food factory hygiene access control.
- Logistics areas. Raw material store, finished goods store, shipping dock.
- Critical and hazardous areas. Chemical store, energy and compressor room, electrical panels, server room, quality lab, R&D.
When zones are defined as a hierarchy, rules become simpler: a permission for "Warehouse" covers the raw material and finished goods stores beneath it, and only a special sub-zone such as the chemical store needs its own restriction. For zones specific to logistics, such as loading docks, drivers' rest areas and high-value cages, see warehouse and logistics centre access control.
The role, zone and time matrix
Permissions should be defined by role, not person by person. The example below shows how to keep rules readable:
| Role | Gate / shared areas | Production | Warehouse | Critical areas | Hours |
|---|---|---|---|---|---|
| Production operator | Yes | Own line | No | No | Shift hours |
| Warehouse staff | Yes | No | Yes | Chemical store: trained staff only | Shift hours |
| Maintenance technician | Yes | Yes | Yes | Energy room, panels | 24/7 (for breakdowns) |
| Quality specialist | Yes | Yes | Sample area | Laboratory | Office hours |
| Office staff | Yes | Escorted | No | No | Office hours |
| Contractor / visitor | After reception | Only the area on the work order | Per work order | Escorted | For the visit only |
The matrix also exposes conflicts. If "The maintenance team may always enter the energy room" and "The energy room is closed at weekends" are both written, the system must make it clear which one applies.
Four principles make the matrix easier to write:
- Closed by default. Any cell that does not say "Yes" is a no; access is granted as an explicit row, not as an exception.
- Time is a column, not a footnote. "Shift hours" and "office hours" are different; on a three-shift site, night access for warehouse staff needs its own row.
- Escorted access is its own permission type. Where a cell says "escorted", the door should not open until an authorised person's card is read as well.
- Every critical area has an owner. Health and safety approves requests for the chemical store, IT for the server room, the quality manager for the laboratory.
The same logic carries over to other sectors: in a hospital, theatres, the pharmacy and medical records play the role of a factory's chemical store and energy room. We adapt it in hospital access control.
How permissions drift over time
Even a zone structure that is right on day one drifts. An operator who moves lines keeps access to the old one, an energy-room permission granted once for an urgent job is never removed, a departed contractor's record stays active. The cure is to tie permissions to roles rather than people and to have department heads re-approve the permission list at regular intervals, for example every quarter. Temporary permissions should be issued with an end date from the start.
Seven steps to set it up
- Map the risks. With your health and safety specialist and your production, quality and IT leads, write down which areas need restricting and why.
- Define zones and their hierarchy. Mark every entry and exit point of each zone on the floor plan.
- Define roles and assign people to them. Grant permissions to roles, not individuals, so that when someone changes department their access changes with their role.
- Write rules in plain language. For example, "Warehouse staff may enter the Warehouse zone during shift hours". Technical codes cannot be explained in an audit.
- Put contractors and visitors under the same rules. Use a time-limited QR code restricted to the work order instead of a permanent card. We go into detail in our article on contractor access and health and safety compliance.
- Plan entry and exit reads at zone boundaries. For reliable "who is where" data, critical zones should also record exits; consider an anti-passback rule to stop card sharing.
- Test the emergency scenario. Locking or releasing all doors and using the zone-by-zone "who is inside" list at the assembly point should be tried in a drill; see our emergency muster report guide.
How we deliver factory access control at Digital Bridge
We treat access control in a factory not as a standalone security product but as part of the plant's digital infrastructure. Because the same team runs our Industry 4.0 projects that collect production, energy and quality data, we can design from the start how access records will connect with production and safety processes. Site security is also where connected-device investment tends to begin: Eurostat reports that in 2021, 72% of EU enterprises using IoT used it to secure their premises (Eurostat, Use of Internet of Things in enterprises).
- Survey and permission map. We inspect zones, door and turnstile types, cabling and network on site, and write the role-zone-time matrix with you.
- Hardware. We install card access control for staff entrances, barriers for vehicles and, where needed, additional verification at critical points.
- Video verification. If events at critical doors need to be reviewed alongside camera footage, we bring IP camera monitoring into the same project.
- Integration. Our system integrations team links timesheets to payroll and shift plans to production planning. At this stage we also plan how line-level staffing data will be used in MES and ERP.
After the needs analysis you receive a written proposal setting out scope, phases and cost. We work across every province of Türkiye, remotely and on site, with technical support available around the clock.
SmartPass: zones, rules and one card read on the factory floor
Our own product, SmartPass, was designed to make zone-based access workable day to day. In a factory, a day looks like this:
A warehouse worker on the morning shift presents a card at the gate turnstile. In a single read the turnstile opens, an attendance record is created and the timesheet starts against the shift plan. At the warehouse door the same card is read again; the worker belongs to the "Warehouse staff" access group, which is linked to the Warehouse zone with a time profile covering shift hours, so entry is granted. At the chemical store door, only people in a group linked to that zone can pass. A lubrication contractor arriving in the afternoon is set up as a contractor, can reach only the zones linked to their access group and is refused outside the contract period. When the fire alarm sounds, access points switched to emergency mode free exits and close entries, and the shift supervisor sees on the dashboard how many staff, contractors and visitors are inside.
The SmartPass features at work in that scenario:
- Locations, access points and zones. Zones such as gate, production, warehouse and office are defined, and access points such as turnstiles, doors and barriers are attached to them.
- Access groups and time profiles. A person's permissions are the union of their groups, and each group is linked to one or more zones with an optional weekly time profile. Anti-passback is switched on per zone, and every refusal is logged with its reason.
- Dashboard and emergencies. The dashboard shows how many staff, contractors and visitors are inside right now; at an access point in emergency mode exits are free, entries are closed and notification recipients get an e-mail.
- Staff, contractors and visitors under the same rules. Staff carry 13.56 MHz cards; visitors receive a temporary card limited to the visit's time window and access group; contractor cards are refused once the company's agreement ends.
- Door, attendance and canteen in one system. No separate attendance device is needed, and reports can be exported to payroll.
- Multi-site structure. Each site can be opened as a separate SmartPass organisation with its own database, and authorised users switch between them from the "My organisations" list without re-entering a password (multi-site access control).
Next step
Mark the hazardous and restricted areas on your factory floor plan and list, by role, who needs to enter them. With that table, get in touch and we will settle the zone structure and rules with you and show how SmartPass would work on your site. For a refresher on the basics, see our card access control system guide.