10 yearsin cybersecurity
150+companies passed Aramco CCC
Gold PartnerSophos & Fortinet

What is cloud access control?

A traditional access control system runs on a server or PC at each building. Adding a user, changing a schedule or checking who opened a door means being on site or connecting in remotely to that machine. Software updates are often skipped, and every branch ends up with its own rules.

Cloud access control moves the management to a secure cloud platform. Door controllers at each site connect over encrypted links, and you manage all doors, users and sites from a browser or app. Doors keep working on stored rules if the internet drops, and the platform updates itself automatically.

New staff can get access before their first day, and leavers lose it the moment HR or IT removes them, at every site at once.

Cloud access control is different from our on-premise access control and ANPR service, which suits large single sites, compounds and vehicle gates with number plate recognition. Many customers use both: on-premise control and ANPR at the main gate, and cloud-managed doors across their offices and branches. We help you decide which parts belong where.

  • Manage doors, users and sites from one dashboard
  • Remote unlock for deliveries and late arrivals
  • Instant revoke when a phone or card is lost
  • Schedules per door, group and holiday
  • No on-site server and automatic updates
Secure office door with an access control reader

Mobile access control in Saudi: the phone becomes the key

With mobile access control, staff open doors with their smartphone instead of a plastic card. The credential is sent to the phone in seconds, is much harder to copy than many older proximity cards, and can be removed remotely. Cards and PIN codes can still be used side by side for staff or visitors who prefer them.

Visitors and contractors can receive a time-limited pass that only works on the doors and hours you choose. Every unlock, denied attempt and admin change is written to an audit log, so you can answer quickly when someone asks who entered a room and when.

When the doors are linked to cloud CCTV, each door event can be matched with the video from the nearest camera. You see who actually walked through, not only which credential was used.

Security turnstiles at a building entrance

How Waves sets up cloud access control

Site review

We list every door and entrance at each site, who needs access, and what you have installed today.

Design and quote

You get a plan of readers, controllers and locks per site, reuse of existing hardware where possible, and an itemised quote.

Install

Our team installs controllers, readers and locks with neat, labelled cabling and connects each site to the cloud platform.

Configure

We set up sites, doors, user groups, schedules, visitor passes, admin roles and multi-factor sign-in for admins.

Train and hand over

HR, IT and reception staff learn to add users, issue mobile keys, create visitor passes and pull reports.

Support

Optional support for new doors, new branches, faults and changes to your access rules.

Who cloud access control is for

Multi-branch offices

One set of users and rules across head office and every branch, managed from one place.

Residential compounds

Resident mobile keys, visitor passes and remote unlock from the guard house or management office.

Co-working spaces

Give members access to the right floors and rooms for their plan, and remove it the day they leave.

Clinics

Restrict pharmacy, records and staff areas by role and shift, with a clear log of every entry.

Retail stores

Control stock rooms and back offices, and see when each store was opened and closed.

Warehouses

Limit high-value areas to approved staff and give drivers and contractors time-limited access.

Access logs and admin security for SACS-210 and NCA requirements

Cybersecurity rules in Saudi Arabia expect companies to control who can access their sites and systems. Aramco's SACS-210 Third Party Cybersecurity Standard requires multi-factor authentication on cloud and privileged accounts and logs kept for at least one year. The NCA Essential Cybersecurity Controls include identity and access management for government bodies, critical sectors and their suppliers.

A cloud access control system will not make you compliant on its own, but it gives you records and controls that auditors ask about. Because Waves also helps companies with Aramco CCC and cybersecurity, we set it up with these requirements in mind.

  • Audit logs of every door event and admin change
  • Multi-factor authentication for admin accounts
  • Role-based admin rights per site
  • Encrypted connections between doors and the cloud
Office reception area with a secure entrance

Frequently asked questions

How is cloud access control different from your on-premise access control?

Our on-premise systems run on a local server and suit single large sites, compounds and vehicle gates with ANPR. Cloud access control is managed online, needs no server on site and suits businesses with many branches or remote admins. We can advise which fits your sites.

What happens if the internet goes down?

Door controllers store the access rules locally, so authorised users can still enter and events are saved. When the connection returns, logs sync to the cloud and any changes made online are applied.

Can staff use their phones as keys?

Yes. Staff receive a mobile credential in an app and open doors with their phone. Cards and PIN codes can be used alongside phones for people who prefer them or for visitors.

Can we reuse our existing readers and locks?

Sometimes. Some existing locks, door contacts and readers can be reused with new cloud controllers. We check your hardware during the site review and tell you what can stay.

Is cloud access control secure?

Connections between doors, the cloud and the apps are encrypted, admin accounts can use multi-factor authentication, and every change is logged. The platform updates automatically, so security fixes are applied without site visits.

Does it work with CCTV?

Yes. Door events can be linked to cloud CCTV video, so you can watch the clip for any entry or alarm directly from the event log.

Do you cover sites outside the Eastern Province?

Yes. We are based in Al Khobar and work in Dammam, Dhahran, Jubail, Riyadh and other cities across the Kingdom.

Manage every door from one app

Book a free demo and site review. We will show you how cloud access control works and send a plan and quote for your sites.

WhatsApp us

Book a free demo

    Verified by MonsterInsights