Cloud based access control is a door security system whose management software runs on a hosted platform instead of a server in your building: administrators add users, change schedules, and read door events from a browser or phone, while the readers, controllers, and locks stay on site. The hardware at the door works much like any other access control system. What changes is where the brain lives and who maintains it. If you are weighing it against a traditional setup, start with the access control fundamentals, then use this guide to judge the cloud part.
Key takeaways
- A cloud access control system has 4 layers: credentials, readers, door controllers, and the hosted management platform. Only the 4th moves to the cloud.
- Most sites can reuse existing readers if they speak a common protocol such as Wiegand 26-bit or OSDP v2, which cuts the cost of a migration.
- The biggest practical question is offline behavior: a good controller keeps a local copy of the credential list so doors still work when the internet drops.
- A badge proves a credential was presented. It does not prove how many people walked through, which is why many teams add camera-based tailgating detection on top.
How Does Cloud Based Access Control Work?
Cloud based access control works by connecting each door controller to a hosted platform over the internet, so every permission change is pushed down to the doors and every door event is sent up to the platform. A person presents a card, a phone, or a PIN at a reader. The reader passes the credential to the controller. The controller checks its locally stored rules, unlocks the door or refuses, and reports the result to the cloud.
The four layers
- Credentials: 125 kHz proximity cards, 13.56 MHz smart cards such as MIFARE DESFire EV3, mobile credentials on a phone, or PINs.
- Readers: the devices on the wall that read the credential and pass it on.
- Controllers: the boxes, usually above the ceiling or in a telecom room, that decide whether a door opens and drive the lock relay.
- Management platform: the software where users, schedules, and reports live. In a cloud system this is hosted by the vendor.
How the reader talks to the controller
The link between reader and controller is where many migrations succeed or fail. Older installations use the Wiegand interface, most often the 26-bit format, which is simple and widely supported but sends data one way and unencrypted. OSDP v2, the Open Supervised Device Protocol maintained by the Security Industry Association, is bidirectional, supports encryption, and lets the controller notice if a reader has been disconnected. If you are replacing readers anyway, OSDP is the safer default.
Cloud vs On-Premise Access Control
| Factor | Cloud based | On-premise |
|---|---|---|
| Where the software runs | Vendor-hosted platform | Server in your building or data center |
| Software updates | Pushed by the vendor | Scheduled and applied by your IT team |
| Remote management | Browser or phone, built in | Needs VPN or remote access setup |
| Multi-site view | 1 dashboard for all sites | Often 1 server per site, or a separate enterprise tier |
| Cost model | Recurring subscription, usually per door | Larger upfront license plus maintenance |
| Internet outage | Doors run on cached rules; changes wait | Unaffected inside the local network |
Neither column is better in the abstract. A company with 12 small offices and no local IT staff gains a lot from a single hosted dashboard. A facility with strict network isolation requirements may prefer to keep everything on site.
What Are the Benefits of a Cloud Access Control System?
The main benefit of a cloud access control system is that one team can manage every door at every site from one place, without maintaining servers. The practical wins show up in daily work.
Faster changes
Revoking a departing employee’s access across 5 buildings becomes one action instead of five server logins. Temporary access for a contractor can be scheduled to expire on its own.
Less infrastructure to maintain
There is no access control server to patch, back up, or replace at end of life. Security updates to the platform arrive without a maintenance window on your side.
Better reporting
Door events from all sites land in one log, so an auditor’s question about who entered a server room last quarter can be answered in minutes.
What Are the Risks of Cloud Based Access Control?
The risks of cloud based access control are internet dependency, vendor lock-in, and the security of the hosted platform itself. Each one can be reduced with the right questions before you sign.
Internet dependency
Ask what happens to each door when the connection drops for 1 hour, and for 1 day. The answer you want is that controllers keep enforcing the last synced rules and store events locally until the link returns.
Vendor lock-in
Some cloud platforms only work with the vendor’s own controllers. Others support open hardware. Ask whether you can export your user list and event history in a standard format, and whether existing readers can stay.
Platform security
Ask for the vendor’s independent security audit reports, how administrator accounts are protected, and whether multi-factor login is required for anyone who can unlock doors remotely.
Where Cameras Fit in a Cloud Access Control Setup
Access control confirms that a valid credential was presented at a door. It does not confirm that only the credential holder walked through. That gap, usually called tailgating or piggybacking, exists whether the platform is in the cloud or on site, and whether the reader speaks Wiegand 26-bit or OSDP v2.
Argu adds a layer on top of the readers a site already owns. Using the cameras covering each entrance, an agent counts how many people pass after each badge scan and flags a mismatch in real time. Where enabled, 1:1 and 1:many facial matching confirms that the person at the door is the person the badge belongs to, reading standard 1080p to 4K feeds at 15 to 30 frames per second. Our guides to the door access control system and biometric access control cover how those pieces work together at the door.
A Short Buying Checklist
- Which reader protocols are supported: Wiegand 26-bit, OSDP v2, or both?
- Which credential formats: 125 kHz proximity, 13.56 MHz smart cards, mobile?
- What does each door do during an internet outage, and how many events can a controller buffer?
- Can we export users and event logs if we leave?
- Is multi-factor login required for administrators?
- How is the subscription priced: per door, per user, or per site?
- Who installs it? Our access control system installation guide walks through the steps.
If your current setup still runs on plastic badges, the key card entry system guide explains what can be reused when you move to the cloud. Phones as credentials are covered in our mobile access control guide. To weigh cloud against on-premise alongside 5 other criteria, see how to pick the best access control system.
Frequently Asked Questions
What is cloud based access control?
It is an access control system whose management software is hosted by the vendor. Readers, controllers, and locks stay on site, and administrators manage users and doors through a browser or phone.
Do doors stop working if the internet goes down?
In a well-designed system, no. Controllers keep a local copy of the rules and continue to grant or deny access, then upload stored events when the connection returns. Confirm this behavior with the vendor before buying.
Can I keep my existing card readers?
Often, yes. Readers that use a common protocol such as Wiegand 26-bit or OSDP v2 can usually connect to a new controller, although older 125 kHz cards are easier to clone and are worth replacing over time.
Is cloud access control secure?
It can be, provided the vendor encrypts traffic, requires multi-factor login for administrators, and can show independent security audit results. Reader-to-controller security also matters, which is why OSDP v2 is preferred over plain Wiegand.
How is cloud based access control priced?
Most vendors charge a recurring subscription, commonly per door, on top of the hardware. Exact prices vary by vendor and are usually quoted after a site survey.
Does cloud access control stop tailgating?
Not on its own. It records that a credential was used, not how many people passed. Camera-based tailgating detection is the usual way to close that gap.
Moving door management to the cloud fixes who can open a door. It does not show you who walked through behind them. Argu watches that moment on the cameras you already have, on top of whichever readers and platform you choose. Talk to Argu about the entrances where tailgating worries you most.
Last updated: September 2026
