Access control looks simple until you run it for hundreds of independent communities at once. The hard part is not opening a gate — it is guaranteeing that one tenant can never touch another's residents, visitors or logs.
Isolation enforced at the data layer
Every query is scoped by tenant at the lowest level, not just in the UI. A bug in a screen can never leak across organizations because the data access itself refuses cross-tenant reads.
Authorizations are auditable, always
Who authorized which visitor, when, and through which gate — every event is recorded immutably. When a security incident happens, the history is the answer, and it is tamper-evident.
Built for the field, not the demo
Residents, visitors and guards use it on real phones with patchy connectivity. The mobile app (CoolAccess on Google Play) degrades gracefully and syncs when it can, because a gate that only works online is a gate that fails at 2am.
One platform, strict per-tenant isolation, full traceability — that is what lets a single deployment serve a whole city's worth of communities.