What Comsys access-control systems do
Access control replaces keys with credentials you can issue, restrict, and revoke. Instead of changing locks every time someone leaves, you click a button and the credential is dead. Instead of guessing who opened the server room at 11pm last Tuesday, you read it off the audit log. Instead of giving the cleaner a master key, you give them a credential that works between 6am and 8am only and expires when their contract ends.
Every Comsys access-control install starts with a free site visit. We walk the building, ask which doors need to be controlled, who needs access to what (and when), and how the credentials should be managed day-to-day. From there we recommend a specific platform — not “an access control system” — and a specific reader type per door.
Platforms we install
- Paxton Net2 — the workhorse for small-to-medium NZ offices and body-corporate buildings. PC-based or cloud, mobile credentials, audit logs, and easy day-to-day management. Ideal up to a few hundred doors.
- HID Signo / iCLASS — reader-grade hardware that’s a default in larger commercial fit-outs. Works with most management platforms; mobile credentials via HID Mobile Access.
- Inner Range Integriti — integrated CCTV / alarm / access on a single platform. Default for sites with 50+ doors, audited compliance needs, or where alarm and access events need to interlock.
- ZKTeco — cost-effective biometric (fingerprint and face) for sites where physical credentials are inconvenient (workshops, gyms, medical) or where time-and-attendance integration matters.
- Salto / Aperio — wireless and battery-powered locks for retrofit jobs where running cable to every door is expensive (heritage buildings, hotels, schools).
Credential types — what suits your site
- Proximity card or fob — the default. Cheap to issue, easy to revoke, comfortable for staff. Use 13.56 MHz MIFARE DESFire or HID iCLASS Seos for cryptographic security; older 125 kHz cards (HID Prox, EM4100) can be cloned and shouldn’t be specified for new installs.
- Mobile credential — the credential is issued to a phone via Bluetooth or NFC. No card to lose, instant issue and revoke, works for short-term contractors. Paxton Net2 Entry, HID Mobile Access, and Salto JustIN are the common choices in NZ.
- PIN keypad — useful as a backup or shared-credential method. Codes can be unique per user and time-limited; we don’t recommend PIN as the only credential because PINs leak.
- Biometric (fingerprint or face) — solves the “forgot my card” problem and the lend-the-card problem. Privacy considerations apply under the Privacy Act 2020 (biometric data is sensitive); we’ll document the purpose and access-controls in the commissioning pack.
Lock hardware
The reader is half the system; the lock is the other half. We size and specify lock hardware for each door:
- Electric strike — the standard for timber and aluminium framed doors with a regular latch lock. Fail-secure (door stays locked on power loss) for most uses; fail-safe for emergency egress where required.
- Magnetic lock (mag-lock) — for glass and frameless doors. Must be specified to the right holding force (300 lb / 600 lb / 1200 lb) and paired with a Request-to-Exit sensor and break-glass for fire-egress compliance under the Building Code.
- Drop bolt / shear lock — for sliding glass doors and high-security single-leaf doors.
- Wireless / battery-powered locks — Salto, Aperio, dormakaba. For retrofit jobs where cable to every door is impractical (heritage, hotels, schools).
Building Code & emergency-egress compliance
Every controlled door has to allow free egress in an emergency. Under the NZ Building Code (clause D1), doors on escape routes must be openable from inside without a key, special tool, or specialised knowledge. For mag-locked doors that means a Request-to-Exit sensor (or push-to-exit button) plus a manual break-glass that physically cuts power to the lock. We design every install to meet D1 and document the egress arrangement in the commissioning pack.
What does access control cost in Auckland?
- Single-door Paxton retrofit (existing strike, new reader): $900–$1,600 supplied and installed.
- Single-door new install (new reader, mag-lock, REX, break-glass): $1,800–$3,200.
- 3–5 door office tenancy (Paxton Net2 with mobile credentials): $5,500–$11,000.
- Body-corporate apartment (lobby, lift, basement carpark, bin room): $7,000–$15,000 depending on door count and existing infrastructure.
- Larger commercial site (Inner Range Integriti, 20+ doors): from around $35,000 supplied and installed; quoted by site visit.
Access control FAQ
Can a single credential open multiple doors?
Yes. The credential (card, mobile, PIN) is associated with a user; the user has rules about which doors they can open, when. A staff member might have access to the main entry, the office, and the kitchen during business hours; the IT manager additionally has the server room 24/7. Cleaners get a credential that works for two hours after their start time and expires at contract end.
Do mobile credentials still work if the phone is offline?
Yes for Paxton Net2 Entry and HID Mobile Access. The credential is cached on the phone; the reader exchanges it via Bluetooth or NFC even without internet. The management platform syncs revocations when connectivity is restored. For sites where instant revocation matters (high-security data centres), we configure offline-tolerance windows accordingly.
Can the system integrate with our HR / payroll software?
Yes — most modern access platforms support HR integration via webhooks or scheduled imports. When an employee is marked “terminated” in HR, their credentials are automatically revoked across all doors. This eliminates the lag between someone leaving and IT remembering to update access. We’ll scope the integration as part of the design.
What happens if power goes out?
Lock hardware is sized for power loss: fail-secure locks stay locked, fail-safe locks unlock. Emergency-egress doors are always fail-safe so people can leave. Battery-backed mag-locks hold the door for 4–8 hours on UPS; for longer outages the doors release and people can leave but external doors cannot be entered without a key. We document the power-loss behaviour for each door in the commissioning pack.
How long does an install take?
Most single-door retrofits are half a day to a day. A 3–5 door office fit-out is typically 2–3 days including cabling, reader installation, lock fitting, and commissioning. Larger Inner Range or multi-floor sites are scheduled across a week or more. We confirm the timeline in writing before booking and work outside business hours where required.