Who Actually Entered Your Office This Morning? Chances Are You Don't Fully Know.
Watch the lobby of almost any commercial building in Dubai between 8:30 and 9:15 on a weekday morning. The main door opens for an employee scanning their card. Behind them — close behind, close enough that the door doesn’t register a second event — two other people walk in. One is a colleague. One is someone nobody recognises. By the time the tailgate is detected by a security guard watching twelve monitors simultaneously, the unknown person is already on the lift.
This isn’t a security incident that made the news. It’s a Tuesday.
The fundamental problem with most corporate access systems isn’t that they’re old — it’s that they only know what they’re told to know. A metal key tells you nothing. A shared PIN tells you someone knew the code, not who typed it. A basic card reader tells you the right credential was presented, not who was holding it.
Avigilon Access Control thinks differently. It pairs physical access hardware with AI-driven cameras, cloud intelligence, and mobile credentials that are tied to a specific individual’s phone hardware — not a piece of plastic that could be in anyone’s pocket. The result is a system that doesn’t just control who enters doors — it understands the difference between a valid credential and a valid credential being used by the right person, in the right way, at the right time.
This guide covers everything you need to know about deploying Avigilon Access Control in Dubai: the two platform paths, the 2026 innovations that are making even recent systems look dated, the hardware that goes on the wall, and what professional deployment actually looks like when it’s done properly.
Why Traditional Access Systems Keep Failing Businesses
The failure modes of traditional access control don’t announce themselves — they accumulate quietly. A copied key here, a shared PIN there, an off-boarded employee whose card nobody collected. Each one is a small gap. Enough of them, and the access control system becomes more of a gesture than a safeguard. Select each failure type below to understand exactly what the gap looks like in practice.
The key knows nothing. Neither do you.
A metal key performs one function: it turns a lock. Beyond that, it provides your security team with nothing — no timestamp, no identity, no location trail. You can’t tell whether the person who unlocked the server room at 11pm on a Saturday was your senior network engineer doing legitimate maintenance or someone who found the spare key in the desk drawer.
Keys get duplicated without permission. They get lent between colleagues as a convenience. They get left in jacket pockets that go to the dry cleaner, or slip down the side of a taxi seat. When an employee leaves the company, you ask for the key back. Most return it. Some don’t. A few have already had copies made. You have no reliable way to know.
Rekeying a commercial floor costs money and time every single time. And every week between the departure and the rekey is a window of exposure. For a business that employs dozens of people, the cumulative security gap from physical key management is substantial — and essentially unauditable.
Someone knows the code. You don’t know who.
A step up from metal keys — but in one important respect, worse. A PIN code can be shared instantly, verbally, with anyone. The person who types it in doesn’t need to have any employment relationship with your organisation whatsoever. A delivery driver who was told the lobby code to save someone a trip downstairs now effectively has permanent access. A visitor who glanced at a colleague’s fingers on the keypad has it too.
PIN codes also don’t change themselves. Once a code is in circulation among a group of people — current staff, former staff, contractors, visitors — it tends to stay in circulation. People forget what the old code was changed to, so it doesn’t get changed. The credential gradually becomes common knowledge in a social network that extends well beyond your employees.
For spaces that genuinely require restricted access — cash handling rooms, document archives, server rooms, medicine storage — a code on a keypad is closer to a polite suggestion than a security control.
Every departure is a security event. Most don’t get treated like one.
Dubai’s corporate landscape moves quickly. People change roles, companies, and industries at pace — and every single departure creates an offboarding security obligation that traditional access systems make slow, manual, and easy to miss.
The HR team has to physically collect every badge, every key, and every fob. This requires the person to show up and hand them over willingly. It requires someone in HR to check they have everything. It requires someone to ensure the card is actually deactivated, not just collected and left in an admin drawer. Any break in that chain — a remote worker, an employee on gardening leave, a resignation that turned acrimonious — and a former team member retains physical building access indefinitely.
With an intelligent access system, the answer to “what happens when someone leaves” is: you remove their account. That’s it. One action, one second. Every credential associated with that person — phone-based, card-based, or biometric — stops working simultaneously. No physical chase, no locksmith, no gap.
Two Platforms, One Ecosystem — Alta Cloud vs Unity On-Premise
Avigilon provides two distinct architecture paths. Which one is right depends on your organisation’s size, data sovereignty requirements, and IT infrastructure. Neither is universally better — they’re designed for different operational realities. The comparison below maps the key differences across the dimensions that matter most for a Dubai-based deployment.
| Consideration | Avigilon Alta — Cloud-Native | Avigilon Unity — On-Premise |
|---|---|---|
| Infrastructure Required | None — fully serverless, runs in the cloud | Physical appliance in your server room |
| Remote Management | Full mobile app control from anywhere in the world | Managed via internal network or secure VPN |
| Data Location | Hosted in Avigilon’s secure cloud infrastructure | All data stays within your own physical walls |
| Compliance | Standard commercial and enterprise compliance | Federal FIPS 201-2, government and defence certifications |
| Software Updates | Automatic over the internet — no manual update cycles | Managed update schedule by IT team |
| HR Integration | Via API to Azure AD, Google Workspace, Okta | Deep integration with internal HR directories — role changes update door access automatically |
| Ideal For | Commercial offices, retail, hospitality, healthcare, growing businesses | Government facilities, financial regulators, defence contractors, banks |
2026 Innovations — What Changed and Why It Matters
Security technology from three years ago already looks dated against what Avigilon released in 2026. These four innovations aren’t incremental improvements — they fundamentally change the daily experience of physical security for both the employees using the system and the managers running it.
👋 Wave to Unlock
The card tap is already being replaced — and it’s not being replaced by facial recognition or fingerprints. It’s being replaced by a gesture.
The door reader detects the Bluetooth signal from an employee’s authorised phone in their bag or pocket. When the employee approaches and waves their hand in front of the reader — no card, no phone out, no touching the screen — the system confirms the phone is there, verifies the authorisation, and unlocks the door. Hands full with a laptop bag and a coffee? Doesn’t matter. The interaction takes under a second and requires nothing from the employee except walking up to the door.
📡 Patented Triple Unlock
Mobile-based access has one well-known vulnerability: if the network goes down, people get stuck. Avigilon’s Triple Unlock technology addresses this directly by communicating across three simultaneous channels — Bluetooth, Wi-Fi, and cellular data — at the moment of authentication.
If the office Wi-Fi fails, the reader and phone negotiate via Bluetooth. If cellular signal is weak, Wi-Fi handles it. All three paths are open simultaneously, and the system uses whichever responds first. Independent field testing records 99.9% unlock reliability. In practical terms: your staff don’t get locked out because the internet had a moment.
📹 AI Video Intercom
The intercom button is no longer just a call button. The flagship Avigilon reader integrates a 5-megapixel camera with AI behavioural analysis. When a visitor presses the call button, it routes a live video call directly to the receptionist’s screen or the manager’s mobile — wherever they happen to be.
The AI layer runs continuously regardless of button presses. A courier who presses the button, is told the recipient isn’t available, and waits patiently gets no flag. Someone who walks up, presses the button, receives no answer, walks away, comes back twenty minutes later, and starts trying the handle — the AI identifies that behavioural pattern as loitering and raises a security event automatically.
📲 Frictionless Digital Guest Passes
Visitor management used to mean a paper book at reception, a printed sticker badge, and a security guard escorting people to meeting rooms. In 2026 it looks different.
You generate a guest pass from the Avigilon app, set an access window — 10am to noon, lobby and floor 12 only — and text the link to the visitor. They click it on their phone browser when they arrive. No app download, no registration. The lobby door opens. The lift allows floor 12. At 12:01pm, the link stops working. The visitor’s access window has no physical artefact to retrieve, no badge to collect, and no manual deactivation required.
The Hardware That Goes on Your Walls
An Avigilon deployment is built from three hardware layers: what the employee interacts with at the door, what makes the decision to lock or unlock behind the scenes, and what credential the employee presents. Each layer has specific products designed for specific environments. Select each layer below.
Readers mount on the wall beside the door and handle every interaction the employee has with the access system.
| Reader Model | Best For | Key Feature |
|---|---|---|
| Mullion Reader | Glass door frames, narrow wall surrounds | Slim profile — supports mobile credentials, smart cards, and fobs in one unit |
| Keypad Reader | High-security rooms requiring two-factor entry | Requires both a mobile/card scan and a PIN — a stolen phone alone isn’t enough |
| Video Intercom Reader | Main lobby entrances, reception points, external gates | 5MP camera, two-way audio, AI loitering detection, live mobile video routing — all in one device |
The reader asks “who are you?” The hub answers “should they be here?” Controllers live inside the IT cabinet or electrical room, away from public access, and handle all processing and electrical switching.
| Controller Type | Doors Managed | Typical Application |
|---|---|---|
| Single Door Controller | 1–2 doors | Small retail outlets, single-entry offices, server room entry points |
| 4-Door Hub | Up to 4 doors | Mid-sized offices, a single floor in a commercial tower |
| 8-Door Hub | Up to 8 doors + alarms + exit sensors | Full commercial floor or multi-space enterprise deployment |
| Elevator Hub | Per elevator car | Floor-by-floor lift access control — restricts which floor buttons a given credential can press |
Avigilon supports every credential format — and lets you mix them across your organisation
- Mobile Credentials (primary in 2026): A digital credential stored in the secure element of the employee’s iOS or Android device. Tied to the phone’s unique hardware ID — it cannot be copied, forwarded, or transferred to another device. Wave to Unlock and Triple Unlock both operate through this credential type.
- Encrypted Smart Cards: High-frequency plastic cards using encrypted protocols that cannot be cloned with standard RFID copying equipment — unlike older proximity cards that are trivially duplicated with hardware available for under AED 200.
- Physical Fobs: Key-ring format for staff who prefer a physical item. Same encrypted credential as the smart card, smaller form factor.
- Biometric Integration: For environments requiring the highest assurance level — cash counting rooms, vaults, pharmaceutical storage — Avigilon connects to third-party fingerprint readers and facial recognition cameras as a second or third authentication factor alongside a card or mobile credential.
Legacy card compatibility: Most existing proximity card formats can be read by Avigilon readers. During a site survey, your installation partner tests your current cards — often the existing card stock works during a transition period while staff migrate to mobile credentials over time.
Access Control + Video — Why the Combination Changes Everything
Access control data and video footage answer two different questions. Access control tells you a door opened and which credential opened it. Video shows you what actually happened at that door. Run them as separate systems — as most organisations historically have — and every investigation requires cross-referencing two separate databases, two separate interfaces, and two separate timelines. In practice, this means a ten-minute delay between receiving an alert and understanding what happened.
⚡ Unified Alert With Instant Video Context
Avigilon Alta Access and Alta Video are built to operate as a single platform. Every door reader is mapped to the camera that covers that doorway. When a security event occurs — a door forced open, an invalid credential used repeatedly, a door held open too long — the platform doesn’t just send an alert. It sends an alert with a live video clip from the camera at that door, already cued to the moment of the event.
The security team’s response time drops from ten minutes to under ten seconds. They see the situation, assess it, and decide whether to call security or the police without ever needing to open a second application or navigate a different interface.
👥 AI Tailgate Detection
The scenario in this page’s opening — one badge, two bodies through the door — is called tailgating. It’s the most common physical security breach in commercial buildings because it requires no technical skill and looks entirely normal to a casual observer.
Avigilon’s AI camera layer counts the number of people who pass through a door frame on each credential scan. One valid scan, one person through: normal event, no flag. One valid scan, two people through: the system raises a tailgating alert with a video clip of the event and timestamps both the credential scan and the door-crossing event.
This closes the gap that every card reader alone leaves open — the gap where the credential is valid but the use of it wasn’t.
How Dubai's Industries Are Using Avigilon Right Now
Dubai’s business sectors have very different security requirements. The solution that works in a financial tower in DIFC needs to look and function differently from the one managing a logistics warehouse in JAFZA. Expand each application below.
Financial firms in the Dubai International Financial Centre handle client asset data, trading systems, and confidential corporate transaction records. Regulatory requirements around data access are specific and auditable — firms need to demonstrate not just that they had access controls in place, but exactly who accessed which areas and when.
Avigilon in a DIFC tower typically runs in concentric security zones. The lobby and main office floors are accessible to all credentialled staff. The trading floor or senior boardrooms require a higher access tier — the reader glows red for anyone whose profile doesn’t include explicit permission for that zone, regardless of their seniority. Every denied attempt is logged, timestamped, and — depending on the firm’s policy — can trigger an automatic email to the Chief Security Officer.
The audit trail this generates satisfies the “prove your access controls” question that financial regulators ask with a downloadable report rather than a manual reconstruction.
Hospitals and specialist clinics in Dubai Healthcare City operate around the clock with enormous volumes of people moving through the building at all hours — clinical staff, non-clinical staff, patients, families, vendors, and maintenance crews. Managing physical access for that complexity through traditional credentials quickly becomes unmanageable.
The specific applications Avigilon addresses in healthcare include pharmaceutical storage and controlled medicine rooms — areas where access needs to be fast for authorised clinical staff but completely blocked to everyone else. Doctors with mobile credentials can open surgical prep doors and medication rooms quickly without touching surfaces with hands that are either gloved or clean for sterile procedure. The touchless interaction reduces cross-contamination risk that keypad use during active clinical work would otherwise introduce.
Visitor management for patient care floors is handled through time-limited digital passes — visitors can access the ward their family member is on, during permitted visiting hours, without needing a staff credential.
Logistics operations in the Jebel Ali Free Zone deal with a specific access control challenge that doesn’t exist at the same scale in office environments: very large numbers of temporary and seasonal workers whose access needs are time-bounded and role-specific.
Managing physical key sets for a workforce of this size and turnover rate is effectively impossible at the speed operations require. Avigilon solves this by allowing warehouse managers to create mobile credentials with built-in expiry times and operating windows. A seasonal picker hired for a four-week contract gets a mobile credential that works between 7am and 6pm on weekdays and expires automatically on the last day of the contract.
The dock doors, which need to open for large vehicles and forklift access, connect to Avigilon controllers via the elevator hub integration — the same credential that opens the personnel door can also, if the manager sets it, be assigned to activate the roller shutter motor. Different zones, same platform.
The Six-Stage Professional Deployment Process
The hardware is the visible part of the system. The deployment process is what makes it work correctly. A reader mounted at the wrong height, a controller wired through a circuit with inadequate capacity, or software configured without understanding the building’s actual usage patterns will underperform from the first week. Hutaib Infotech Solutions (www.securitysolutionsdubai.com) follows this six-stage process on every Avigilon deployment.
01
Physical Site Survey
Engineers visit the building before any hardware is ordered. They walk every door, measure wall surfaces, test internet capacity, inspect existing cabling routes, and identify the specific blind spots in the current access setup that the design needs to address.
02
Custom System Design
The survey data drives a custom architecture — Alta or Unity based on the organisation’s data requirements, reader models matched to each door type, camera placement mapped to entry points, access zone structure designed around how the business actually operates.
03
Low-Voltage Cabling
Certified technicians run Cat6 cabling through ceiling voids and conduits — clean, organised routes that provide reliable power and data to every reader and controller. Cable routes are documented for future maintenance reference.
04
Hardware Mounting & Wiring
Readers are mounted at the correct height and angle for the specific door frame. Controllers are installed in the IT cabinet and connected to existing electromagnetic locks and door strikes. Every connection is tested before software configuration begins.
05
Software Configuration
The cloud dashboard or on-premise server is configured: employee directory synced, security zones established, access group permissions set, camera-to-door mappings linked, schedules built, alert routing configured. The system is tested end-to-end with real credentials before handover.
06
Handover & Training
Reception staff are shown how to issue and revoke guest passes. IT managers are walked through audit report generation and user account management. Security directors learn the global lockdown and alert configuration options. No handover happens until every role-based user group is confident.
Five Management Tips for Daily Operations
The system is live. Your team is using it. These five operational habits make the difference between a system that maintains its security value over time and one that quietly develops the same gaps the traditional system had. Expand each tip below.
Generic accounts — “Reception Temp,” “Cleaning Staff,” “Meeting Room Admin” — look convenient and save five minutes of setup time. They cost that time back many times over when something goes wrong and the audit trail shows you a shared account name rather than an actual human being’s identity.
Every person who needs access to your building gets their own named profile, their own unique credential, and their own access log. If a security event occurs at 11:47pm on a Thursday, you need to know which specific person was responsible — not that someone logged in under a shared account used by twelve different contractors over the past three months.
This sounds like the opposite of the previous tip. It isn’t — it operates at a different level. Everyone gets their own unique identity profile. But which doors their profile can open is managed through group membership rather than individual door-by-door permission assignments.
Create access groups that reflect your organisational structure: the Finance Team group, the IT Team group, the Operations group. Assign the appropriate doors to each group, not each person. When a new finance analyst joins, you add them to the Finance Team group. They immediately get the correct set of door permissions — lobby, finance floor, document archive — without anyone manually assigning individual door rights.
The Avigilon scheduler allows you to define exactly when each access group can enter each zone, down to the minute, including overrides for specific dates. Spend 30 to 40 minutes at the start of each year programming all UAE public holidays and company-specific closed days into the system.
This eliminates the scenario where the building automatically unlocks its external doors on a public holiday because nobody changed the daily schedule before leaving the previous week. The server room, the trading floor, and the cash office remain locked because the system was told in January that this date is a non-access day — regardless of whether anyone is in the office to double-check.
People change roles, finish contracts, and leave companies — and the Avigilon user list doesn’t update itself from any of those events automatically unless you’ve configured an HR directory integration. Even with integration, edge cases appear: a contractor whose engagement was extended informally, a visitor account that was never deactivated, a former employee who moved to a sister company and still shows as active.
Every three months, export the user list, sit with your HR team, and compare it against the current staff register. Any account that doesn’t correspond to an active employee or contractor with a current need gets deactivated immediately. This 90-minute exercise is one of the highest-value security maintenance activities your team runs.
The Avigilon dashboard can push instant mobile notifications for every security event category — forced entry, door held open past its time limit, repeated invalid credential attempts, tailgating alerts, loitering flags from the intercom camera. Out of the box, none of these notifications are active.
Before staff start using the system, open the alert configuration and set every event type you care about to push a notification to the relevant person’s phone immediately. The warehouse back door being propped open for 15 minutes at 3am is something you want to know about at 3am, not when you review the weekly event log the following Monday. Alerts you receive are events you can act on. Events you only discover in retrospect are incidents.
Frequently Asked Questions (FAQs)
Alta readers store a local copy of the active permissions list in their own on-board memory. When internet connectivity drops, readers operate entirely from that local cache — employees scan their phone or card and the reader makes the access decision based on the downloaded permissions without needing to query the cloud. Once internet returns, the readers sync any events logged during the outage. Your staff notice nothing.
The behaviour depends on how your installer wired the electromagnetic locks. Building codes typically require that magnetic locks release during a total power failure — this ensures people can exit the building safely during a fire or emergency. To maintain door security during a power outage, Avigilon smart hubs connect to battery backup units (UPS), keeping the system powered and functional for a defined period while your main power is offline.
No. The mobile credential app uses Bluetooth Low Energy, which runs at a power draw that’s nearly unmeasurable in daily phone battery terms. It operates as a background process with no screen involvement and no continuous active scanning cycle — the app only activates the full credential handshake when the reader detects the phone approaching.
No. The digital credential binds itself to the unique hardware identifier of the specific device it’s enrolled on. Attempting to transfer it to another device is blocked by the system architecture — the credential is not a file that can be copied or forwarded. It only functions on the phone it was originally enrolled to.
Not necessarily, and often not at all initially. Most Avigilon readers support a range of legacy card formats alongside modern encrypted credentials. During the site survey, your installation partner tests your existing cards against the reader hardware. A phased migration — where existing cards continue working while staff progressively adopt mobile credentials — is the most common deployment approach and avoids the operational disruption of a hard cutover.
Yes, on Alta cloud systems. Open the app on your phone, select the specific door from the building map, and tap remote unlock. The command reaches the reader within seconds regardless of where you are. You can watch the outcome on the intercom camera feed in the same app interface if the reader has video capability.
Standard Alta cloud plans retain access event logs for a minimum of 12 months. Extended retention options are available for organisations with longer audit trail requirements — financial regulators and healthcare compliance programmes often mandate specific retention periods. Your installation partner configures the retention policy to match your operational and compliance requirements.
For daily use, most staff never interact with the app at all after initial setup. They walk up to the door, wave their hand, and walk through. Employees who strongly prefer a physical credential can use an encrypted fob on their keyring — the interaction for them is identical to swiping an old keycard, except the fob uses encryption that can’t be cloned.
Yes. Both Alta and Unity support integration with Microsoft Entra ID (formerly Azure Active Directory), Google Workspace, and Okta through standard API connectors. When your IT team deactivates a user account in the company directory — following a resignation, for example — the Avigilon integration removes their door access automatically as part of the same action.
The global lockdown function activates from a single button in the mobile app or web dashboard. When triggered, every connected door in the system locks simultaneously — regardless of any individual schedules or permissions that would normally allow access. Response time is measured in seconds, not minutes. The lockdown state remains active until manually released by an authorised administrator.
No. The intercom reader follows privacy guidelines that restrict continuous audio capture. Recording activates when a visitor presses the call button, or when the AI layer detects a specific security event — forced entry attempt, loitering, unusual approach patterns. Ambient audio recording outside these trigger conditions does not occur.
The Alta cloud platform is explicitly designed to scale from one door upward. A small business can start with a single reader on the main entrance and a single cloud subscription, then add doors as the business grows without replacing any infrastructure. The cloud model removes the upfront cost of on-premise servers, making the entry point affordable for businesses of any size.
Annual maintenance agreements aren’t mandatory, but they’re worth considering. Firmware updates, battery health checks on door controllers and backup power units, camera lens cleaning in dusty environments, and credential database audits are all tasks that a maintenance schedule handles proactively. Addressing these on a schedule prevents the performance drift that accumulates in unsupported systems over months.
Three things primarily: encryption standard, build quality, and platform cohesion. Budget brands often use legacy RFID protocols that are trivially cloned, use hardware that degrades faster under UAE heat conditions, and run fragmented ecosystems where the access control app doesn’t talk natively to the video platform. Avigilon uses military-grade encryption, builds hardware to commercial grade tolerances for hot climates, and runs access and video as a single unified platform where both systems share context — an event in one triggers a response in the other.
The starting point is a professional site assessment — a physical walkthrough of your building by an engineer who understands both the Avigilon product range and the specific security requirements common to Dubai commercial environments. This produces a design and hardware recommendation that’s based on your actual building, not a generic specification. Contact Hutaib Infotech Solutions (www.securitysolutionsdubai.com) to arrange your site visit.
Stop Wondering Who Entered Your Building Last Night
The tailgating scenario that opened this page is unremarkable precisely because it happens constantly, in buildings that consider themselves well-secured. One valid credential. Two people through the door. No record of the second. That’s the gap that Avigilon was designed to close — and closing it changes the fundamental question from “who do we think entered?” to “we know exactly who entered, when, and which doors they passed through.”
The technology is available today. Wave to Unlock, Triple Unlock reliability, AI tailgate detection, frictionless digital guest passes, instant mobile lockdown — these aren’t features on a roadmap. They’re running in buildings across Dubai right now. What separates organisations that have them from those that don’t is rarely the decision to invest. It’s usually having the right team to implement them correctly.
Hutaib Infotech Solutions (www.securitysolutionsdubai.com) are certified Avigilon integration specialists. They assess your building, design a system around your actual security requirements, handle every stage of the physical and software deployment, and train your team to run it confidently. Your doors are ready to get smarter.