Every capability, with the business value each one unlocks.
One product across three tiers, organized by the outcomes each capability delivers. The lobby experience and audit trail ship at every plan, because the controls only work when people actually follow them. Watchlist screening, advanced badges, and incident-response tooling at Business. Regulated compliance, PACS and CCTV integrations, and the full ecosystem at Enterprise.
The Lobby Experience
Ergonomic security gets followed; painful security gets bypassed. Under 30 seconds for visitors. One tap for hosts. The desk handles exceptions, not the routine.
12 features
iPad kiosk + web check-in
Self-service in <30s including badge print
Walk-in QR sign-in
Visitor scans QR on the kiosk, signs in on phone
Multi-lingual kiosk
Multi-lingual visitor flow at every tier
Per-location language defaults
Different default language per site or region
Live Auto-Refresh Visitor Log
Visitor log updates live, no refresh needed
Visitor Directory
Search everyone on-site by name, host, company, or visit type
Visit Templates & Quick Invites
Save recurring visit setups; launch an invite in seconds
Co-Host Invitations & Shared Visit Ownership
Multiple hosts per visit, all notified and on the badge
Bulk CSV pre-registration
Bulk invite for events + multi-visitor scheduling
Custom workflows per visitor type
Per-flow configuration (visitor / contractor / vendor / candidate)
All chat channels simultaneously
Slack + Teams + Webex + Google Chat concurrently
Automated workflows + calendar-driven invites
Auto-create visitor records from calendar invites
Visitor Identity & Badges
Know who's at your perimeter and make it visible to everyone on site. Photo, ID, and a branded badge with zone color.
11 features
Basic branding (logo · background · color)
Customer logo, background image, primary color on kiosk + badge
SmartPass — One-Tap Check-In from Your Wallet
Apple/Google Wallet pass; one tap checks visitors in
Photo capture at check-in
Required or optional per site; encrypted with configurable retention
Unlimited visitor types
Beyond the default visitor type
Custom fields per visitor type
Field-level configuration per visitor flow
Visitor approvals + escort workflow
Host or admin approves before visitor enters
Facial recognition
Returning-visitor recognition for faster sign-in
Advanced Badge Designer
Custom badge layouts · watermark · per-template configuration
Recurring visitor profiles + scheduling
Faster check-in for known vendors, contractors, escorts
Per-visitor-type + zone-color badges
Color-coded badges per regulated area or access zone
Smart ID Validation (advanced)
Liveness check · document forgery detection · expiry validation
Security at the Perimeter
Catch threats before they walk through the door. Banned visitors, foreign nationals at ITAR sites, and off-hours anomalies surface at the kiosk and escalate to the GSOC.
7 features
Real-time presence dashboard
Who is where, right now, across every site
Off-hours access controls
Per-site after-hours rules + auto-notifications on anomalies
Advanced watchlist variants
FaceID match · Past Visit · Visit Field · partner-list sync
Offender registry screening
US-state + national registry screening at kiosk
ITAR-aware citizenship gating
Verify and block per area based on visitor nationality
Configurable match handlers
Block · escalate · log silent per match category
Per-site threat-level configuration
Raise/lower screening intensity by site or schedule
Safety & Emergency Response
One button. Lockdown, mass alert, evacuation roll call. PPE attestation for regulated zones. After-action evidence ready for OSHA.
6 features
Evacuation alert (email · in-kiosk · SMS add-on)
Basic notification on emergency activation
Mass broadcast via MyVisitly app
Push notification to employee app for lockdown / drill / emergency
Per-zone PPE attestation
Hard hat · safety glasses · steel-toe · per regulated area
Hazard acknowledgment
Site-specific hazard cards with checkbox attestation
Drill mode + evacuation rolls
Generate per-site evacuation roll calls during drills
OSHA evidence export
One-click export of PPE + hazard + sign-in records per audit window
Documents & Agreements
Every NDA, consent, training video, and COI signed, stored, and defensible. Legal protection for HR, counsel, and insurance.
12 features
NDA / legal document signing at check-in
Up to 10 templates at Starter · unlimited at Business · e-signature at Enterprise
Privacy policy / consent acknowledgment
GDPR + CCPA-grade consent capture before any data collection
Visitor terms of visit / waiver
Acceptance recorded in the immutable audit log per visitor
Site safety briefing acknowledgment
Visitor confirms reading site-specific safety guidance before badge issuance
Orientation video (play + completion tracked)
Required-watch video per visitor type; completion logged with timestamp
Custom legal documents per visitor type
Different NDAs/waivers per flow (visitor · contractor · candidate · auditor)
Document expiry + re-acknowledgment policies
Auto-prompt re-sign after configurable window (90/180/365 days)
GMP acknowledgment (pharma · food · regulated production)
Good Manufacturing Practices attestation captured per visit
Health screening questionnaire
Custom symptom/exposure questions with conditional block-list rules
Insurance certificate (COI) tracking
Upload, validate, expiry-track per contractor or vendor
E-signature with audit trail
Cryptographic signature + signed PDF stored against the visit record
Document library + version control
Templates versioned per location with rollback + audit history
Compliance Program Support
Visitor records, retention controls, and evidence tooling that support your compliance program across HIPAA, ITAR, CMMC, NISPOM, FERPA, OSHA, and GDPR. Visitly provides the visitor-side inputs; your team owns the program.
8 features
Immutable audit log (basic)
Every check-in, document acknowledgment, and badge issuance time-stamped to an append-only log
Configurable audit-log retention
Per-tenant retention windows; basic configuration
Audit log search + export
Field-level search with CSV, JSON, or Parquet export in formats your auditor typically reviews
SIEM event streaming
Splunk · Datadog · Sumo Logic · Microsoft Sentinel · HTTP listener
NIST 800-171 Rev 2 control-mapping reference
Reference document to support your CMMC Level 2 evidence package. Available under NDA.
ITAR / CMMC / NISPOM evidence tooling
Visitor-side controls + per-tenant evidence export supporting your regulated-area program
HIPAA BAA available for execution
BAA executed at contract for covered-entity deployments. Supports your HIPAA program; the covered entity owns the program itself.
Legal hold + per-location retention policies
Retention controls and legal hold support to back your records-management program.
Identity & Access: the IT Bridge
One front door for visitor admins. Accounts created when employees join your IdP; removed when they leave. The IT integrations Security and InfoSec require for sign-off.
10 features
SAML 2.0 SSO
One sign-in across the IdPs you already operate; setup is in minutes, not weeks.
Generic OIDC SSO
Bring any OIDC IdP, including the one your security team rolled themselves.
Role-based access control
Different admins see different things; no one sees more than their role allows.
Multi-factor authentication
Admin logins respect the MFA policy your IdP enforces; no parallel MFA list.
Multi-IdP support
Two identity providers running side by side without two admin worlds.
Basic directory sync (hosts)
Hosts come from your IdP automatically, with no parallel list to keep in sync.
SCIM 2.0 auto-provisioning
Admin accounts come and go with your HRIS, including group sync, with no IT ticket.
On-prem Active Directory
Your on-prem AD stays the source of truth; ADFS handles federation.
JIT user provisioning
First sign-in provisions the account; no pre-staging required.
Custom identity claims
Map your IdP claims to Visitly roles and site assignments without contacting support.
Trust & Vendor Posture
Visitly's own attestations and legal artifacts. The documents procurement, InfoSec, and legal review during vendor risk assessment. Distinct from Compliance Program Support above: that section is about your program, this one is about us as a vendor.
6 features
SOC 2 Type II + ISO 27001 trust badges
Annual audit + ISMS certification. Badges published; full report + Statement of Applicability available under NDA via Trust Center request
DPA template + sub-processor list
DPA template published; sub-processor list published with change-notice cadence
GDPR + CCPA data handling
Standard Contractual Clauses and 72-hour breach notification. Visitly's data-handling commitments to support your privacy program.
CSA STAR CAIQ Lite v4
Self-attestation across 297 controls. Available under NDA via Trust Center request.
Full SOC 2 Type II report + SIG / CAIQ
Available under NDA via Trust Center request for InfoSec vendor risk review.
Annual third-party penetration test
Summary letter available under NDA via Trust Center request
Integrations & Ecosystem
Plug into the systems your Security, IT, HR, and Operations teams already run: PACS, CCTV, SIEM, HRIS, and emergency notification. Without giving any of them up.
16 features
SAML / OIDC SSO
Standard protocols · custom IdP welcome
Webhooks (basic)
Webhook per event type · API keys per tenant
SMS bundles
Standard SMS volume bundles for mass broadcast
Custom Fields in Slack Notifications
Visit purpose, NDA status, and custom fields in every Slack alert
Custom Fields in Microsoft Teams Notifications
Same custom-field context, surfaced in Teams notifications
API Access
Full CRUD across visitors · sites · hosts · events
SCIM 2.0
Standard provisioning protocol; tested with major IdPs
Access control bridges (PACS)
HID · Brivo · Verkada · Genetec · LenelS2 · Avigilon · Kisi · C·CURE
Guest Wi-Fi integrations
Cisco · Aruba · Meraki · Fortinet · Mist · Ruckus · Ubiquiti
Emergency-system integrations
AlertMedia · Everbridge · InformaCast · Omnilert · Rave
SIEM streams
Splunk · Datadog · Sumo · Microsoft Sentinel · custom listener
HRIS integrations
Workday · BambooHR · Rippling · ADP · UKG
Calendar (Google / Outlook basic)
Visitor-record creation from calendar invitations
CRM integrations
HubSpot · Salesforce · ServiceNow
File storage + Documents
Box · DocuSign · Dropbox · Egnyte · Google Drive · SharePoint
Customer-support integrations
Jira Service Management · Salesforce Service Cloud · Zendesk
Operations & Multi-Site
From one site to forty-seven, in one console. New sites live in days, not months. Reporting that fits the C-suite report and the audit pull.
7 features
Global admin console
One dashboard, role-based views per team
Reporting + analytics (basic)
Standard reports + on-demand exports
Visitor log search + filter
Find any visit across any site in seconds
Custom dashboards
Save filtered views per role
Admin-only fields
Internal fields not shown to visitors
Unlimited sites + employees + visits
Enterprise scale
Full Mailroom / Deliveries module
Delivery drop-off + recipient routing
Support & Partnership
Post-sale support that's a CSM, not a ticket queue. Free Switch Assist migration from Envoy or iLobby. Named contacts, QBRs, and a 99.9% SLA at Enterprise.
8 features
Email support · 1 business day
All tiers; documentation + help center self-serve
Self-serve setup + onboarding
Standard onboarding wizards + help articles
Switch Assist migration program
Free with Business + Enterprise; handles displacement from Envoy / iLobby
Named Customer Success Manager
Dedicated CSM for rollout + ongoing relationship
24/7 phone + chat support
Tier-1 + Tier-2 on call for critical incidents
Quarterly Business Reviews (QBR)
Roadmap visibility + escalation channel + strategic planning
Implementation specialist
Multi-region rollouts + custom integrations + change management
Custom MSA + custom DPA + 99.9% SLA
Negotiated commercial terms + uptime credits
Compare Visitly · Envoy · iLobby side-by-side on /pricing.
Skip the demo gauntlet. Pull our Trust Center and pricing yourself.
Or talk to sales. We'll route you to a human who knows multi-location enterprise deployments, not a BDR running a script.
