Decide who may open which door, and when they may open it.
An access control system that works with all of your operational data inside Calisto Pro. Issue the credential that carries the permission, on smart locks, card readers or enterprise panels. Every door reports what actually happened at it.
The Access Control App for Doors
Credentials, smart locks, card readers, and enterprise panels. Every door reports what actually happened at it.
Hardware
Smart locks, card readers, keypads, and enterprise panels.
Credentials
Five credential types in one registry.
Code Scheduling
Codes that activate and expire on the booking.
Zones & Policy
Decide who goes where, and how many may be inside.
Layouts
A room, a floor, a lot, a house. Drawn once.
Security Ops
A live dashboard and every door event logged.
Visitors
Pre-register, verify identity, check against the denied list.
Emergency
Lockdown with a muster roll-call.
Passes
A day, a season, or the length of one visit.
Every door, its battery, and when it last opened.
Smart locks, card readers, keypads and padlocks on one list. A lock at eight percent is visible before it is a locksmith call.
0
credential types in one registry
Three
visitor types: guest, vendor, contractor
Four
checks in every door decision
Five
lock types on one board
One
spatial layout across everything
Zero
integrations between the lock and the booking
Whatever is on the door, Access drives it.
Smart locks, keypads, readers and enterprise panels, registered and watched in one place.
Low battery, an offline unit, a jam and a forced open all raise in the same place.
Issue whichever credential the door in front of them accepts.
Nobody issues the code, and nobody revokes it.
The stay is the thing that exists, and the code follows it.
Decide who goes where, and how many may be inside.
Zone rules with live capacity, and a floor plan the rest of the platform reads.
Decide who goes where, and how many may be inside.
Locks group into zones, and each zone carries its rules, its hours and a live head count.
Lobby
Pool Deck
Gym
Spa
Conference A
Rooftop Bar
Draw it once, and enforce the zones you drew.
Draw a floor plan, a seating chart, a coworking floor or a lot map, and the zone you place is the zone the door enforces: its capacity is the one checked at entry. Trace a plan you already have by dropping the image underneath and calibrating one known length. Bookings, Tickets and Catalog read the same layouts back.
%22%20fill%3D%22%23cbd5e1%22%20stroke%3D%22%2394a3b8%22%20stroke-width%3D%221.69%22%2F%3E%3Crect%20x%3D%22320%22%20y%3D%22350%22%20width%3D%2218%22%20height%3D%2218%22%20rx%3D%221%22%20transform%3D%22rotate(180%20329%20359)%22%20fill%3D%22%23cbd5e1%22%20stroke%3D%22%2394a3b8%22%20stroke-width%3D%221.69%22%2F%3E%3Crect%20x%3D%22360%22%20y%3D%22350%22%20width%3D%2218%22%20height%3D%2218%22%20rx%3D%221%22%20transform%3D%22rotate(180%20369%20359)%22%20fill%3D%22%23cbd5e1%22%20stroke%3D%22%2394a3b8%22%20stroke-width%3D%221.69%22%2F%3E%3Crect%20x%3D%22400%22%20y%3D%22350%22%20width%3D%2218%22%20height%3D%2218%22%20rx%3D%221%22%20transform%3D%22rotate(180%20409%20359)%22%20fill%3D%22%23cbd5e1%22%20stroke%3D%22%2394a3b8%22%20stroke-width%3D%221.69%22%2F%3E%3Crect%20x%3D%22440%22%20y%3D%22350%22%20width%3D%2218%22%20height%3D%2218%22%20rx%3D%221%22%20transform%3D%22rotate(180%20449%20359)%22%20fill%3D%22%23cbd5e1%22%20stroke%3D%22%2394a3b8%22%20stroke-width%3D%221.69%22%2F%3E%3Crect%20x%3D%22480%22%20y%3D%22350%22%20width%3D%2218%22%20height%3D%2218%22%20rx%3D%221%22%20transform%3D%22rotate(180%20489%20359)%22%20fill%3D%22%23cbd5e1%22%20stroke%3D%22%2394a3b8%22%20stroke-width%3D%221.69%22%2F%3E%3Crect%20x%3D%22520%22%20y%3D%22350%22%20width%3D%2218%22%20height%3D%2218%22%20rx%3D%221%22%20transform%3D%22rotate(180%20529%20359)%22%20fill%3D%22%23cbd5e1%22%20stroke%3D%22%2394a3b8%22%20stroke-width%3D%221.69%22%2F%3E%3C%2Fsvg%3E)
See it happening, and read back what already did.
Door states, occupancy and open incidents live, over a log that keeps every event.
Severity, the lock it happened at, and whether it is still open.
Ordered response steps bound to a trigger, so the first move is not a phone call.
One queue for pending requests. Approving grants at once; denying records the reason.
A registry for every person who walks through the door.
Guests, vendors and contractors, each on a record that says who they came to see.
Call it once, and find out who is still inside.
A protocol names the door action, the zones it covers and how it is triggered. Lock everything, unlock every exit, or one wing.
The muster report runs live at the points you configure, so you find out who is still inside while it is still useful to know. Override codes carry an expiry and land in the audit log.
Let someone in for a day or a season.
Four pass types, each carrying a validity window and the access rules that go with it.
Check-in is a QR scan at a kiosk or the front desk, and the pass lands in Apple Wallet or Google Wallet so nobody arrives hunting for an email.
Where Access touches everything else.
6 of these 7 connections are in your plan today. The rest stay visible so you know the instrument is there before you need it.
Signal
Card readers and enterprise panels are configured in Access while Signal keeps their device health telemetry.
WiFi
A person sees their WiFi access beside their keys and door events in the self-service portal.
Bookings
A confirmed reservation sets the activation and deactivation window on the guest code.
Tickets
Tickets reads the seating charts drawn in the Access layout designer instead of storing its own.
Catalog
Catalog reads the space layouts drawn in Access through the shared layouts endpoint.
Purview
Lists, counts and new records scope to the purview selected in the switcher, and invite records honor its redaction rules.
Depot
Floor plans and visitor identity documents uploaded here count against the shared Depot storage quota.
No setup cost. Pay when you start using.
Doors, zones, and locks for secure venues.
Priced per ten locks. Included with Calisto Ops.
Recommended for you
Works well together.
Calisto Signal
Calisto WiFi
Calisto Bookings
Included with Commerce or Ops
Reservations, inventory, contacts, tickets, and scheduling
Learn more →Calisto Tickets
Calisto Tickets
Ticketed events with seat assignment, QR check-in, wallet passes, waivers, livestream access, and pricing seasons.
Learn more →Calisto Catalog
Calisto Commerce
Catalog, pricing, payments, proposals, contracts, and CRM
Learn more →Calisto Purview
Included with every Calisto account
Account configuration and data rules.
Learn more →Calisto Depot
Everything included in Calisto Access.
- Smart locks, keypads, NFC card readers, biometric readers, enterprise OSDP panels
- Real-time status: online, offline, low battery, lock jam
- Key registry: holder, type, issue date, expiration, usage count, status
- Key manager with auto-issue rules
- Bulk select, revoke, and export
- Health monitoring with low-battery warnings and forced entry alerts
- Occupancy sensors per zone
- Mobile key, delivered through Navigator or by SMS
- Wallet pass for Apple Wallet or Google Wallet, auto-generated
- PIN code for a keypad, delivered by SMS or email
- Physical card and badge card, issued at the front desk
- Temporary link, and a biometric where the hardware reads one
- Mixed, which picks whichever credential the door in front of someone accepts
- Each credential carries holder, device, lock, issue date, expiration, and status
- Commands run over Calisto’s own IoT controller: no lock-vendor cloud account, no vendor API key
- An unreachable controller reports not connected or failed, never a fabricated success, so the audit trail stays truthful
- Access codes bound to booking lifecycle
- Activation at check-in, deactivation at checkout
- Auto-extend on late departure
- PINs unique within a lock, deletion logged in activity
- Activation failure alerts before guest arrives
- Notification rules per event type and per channel
- Booking integration status per connected property
- Locks group into zones with real-time capacity monitoring
- Zone map view with per-zone occupancy status
- Rules by time window, day, credential type, and holder attributes
- Named time-window schedules per zone with overlap warning
- Holiday and exception overrides (outrank weekly schedule)
- Access profiles: reusable bundles of zones, doors, and schedule
- Zone grants: contact-to-zone credentials with time bounds
- Verification policy per entity and connection
- Layout designer for floor plans, seating charts, and zone maps
- Zone placed in the designer IS the zone enforced at the door
- Named layouts per space (theatre, banquet, general admission)
- Space register: type, floor, maximum capacity, occupancy, utilization
- Filter spaces by type or by availability
- Utilization recalculates when a maximum capacity changes
- Amenities and operating hours per space
- Capacity gates entry (space at maximum = denied at the door)
- Layouts read by Bookings, Tickets, and Catalog
- Four-step evaluation: holiday override, then schedule window, then rules, then allow or deny
- Same order every time, whether lock, kiosk, or remote unlock
- One answer goes back to the door with its reason in the audit log
- Live View dashboard: door states, zone occupancy, open incidents
- Activity log: every door event with timestamp, credential, and outcome
- Filterable by date range, event type, lock, and person
- Incident tracking with severity, resolution status, and required resolution note
- Playbooks: ordered response steps bound to access event triggers
- Approvals queue for pending access requests
- Exportable audit trail
- Three visitor types: guest, vendor, contractor
- ID verification requirable per access rule before a temporary key is issued
- Temporary key issued on approval
- Pre-registration invitations with public-facing form
- Denied-persons watchlist with alert on attempted check-in
- Check-in, check-out, purpose, host, and issued credentials tracked
- Search and filter the visitor register
- Named protocols with door action (lock/unlock), affected zones, and activation trigger
- One-tap activation from dashboard, physical trigger, or playbook
- Live muster reporting with configurable muster points
- Emergency override codes with expiration and audit logging
- Alarm sound and auto-clear settings per property
- Pass types: day pass, multi-day, membership, visitor
- Validity period and access rules per type
- Guest passes delivered by email, SMS, or QR
- QR check-in at kiosks or front desk
- Apple Wallet and Google Wallet delivery
- Pass to deactivated profile refused
- Charts: access events, peak hours, deny rates
- Windows: 7 day, 30 day, 90 day, 1 year
- Report templates: access summary, audit, visitor log
- Download as PDF or CSV
- Scheduled recurring delivery
- Bookings (reservation activates/deactivates the guest code)
- Registry (member number verified at the door)
- University (training certificate controls physical entry)
- Signal (hardware health telemetry for the same devices)
- WiFi (keys, door events, and WiFi on one self-service screen)
- Tickets (reads seating charts from the Access layout designer)
- Catalog (reads space layouts from the same endpoint)
- Contacts (zone grants and visitor records resolve to the person record)
- Purview (business unit scope and redaction rules)
- Depot (floor plans and visitor documents in the shared file store)
Questions about Calisto Access
It is built around credentials and zones rather than one manufacturer, so a door controller, a smart lock and a turnstile are all endpoints carrying the same rule. Signal registers the hardware and watches its battery and firmware; Access decides who may open what and when.
Entitlement comes from the record that already exists. A Registry membership, a Bookings reservation or a Workforce shift is what the credential reads, so a lapsed payment or a finished stay closes access on the terms you set rather than when somebody remembers to revoke a card.
Import them against the people who hold them. Credentials attach to a person on the shared member model rather than sitting in a separate list, so a badge arriving from a legacy export becomes another credential on a record the rest of the platform already reads.
Every grant, denial and forced-open event is recorded against the door and the person, and it stays queryable rather than rolling off a controller after thirty days. That log is what an incident review reads instead of a recollection.
The pricing section on this page is the authority, and it reads the live catalogue rather than a figure typed into a marketing page. There are no per-door or per-credential fees, and Access works on its own without the rest of Calisto Ops.
Full export in standard formats, including the event log. The door history is your compliance evidence, so it is not something that is held back.