Who Is In The Building? The Question A Visitor Book Cannot Answer

A paper log is a list of people who arrived. An evacuation needs the list of people who are still inside, and those are not the same list. The difference between them is the sign-out column, and the sign-out column is the one nobody fills in — because leaving a building is the moment a visitor has the least reason to stop at a desk.

Everything else that is wrong with the paper book is a variation on that theme: it records intent at the front door and nothing afterwards.

Four questions, and whether paper can answer them

That last row is worth dwelling on, because it is the one nobody raises. An open logbook on a reception desk displays the previous visitors' names, employers, phone numbers and who they came to see, to every subsequent visitor who signs it. It is a disclosure of personal data to a queue of strangers, performed by design, all day.

What a record has to establish, not just store

The useful distinction is between logging and establishing. A visitor book logs a claim: this person wrote this name. It establishes nothing — not that the name is real, not that the host expected them, not that they left.

A record worth having establishes four things instead. That the visitor's contact detail is reachable, which is what verifying a phone number by one-time code actually achieves. That a named host acknowledged them, rather than being written down without their knowledge. That the visit has an end, recorded by something other than the visitor's goodwill on the way out. And that the record itself is not readable by the next person through the door.

None of that is about digitising the book. Photographing a logbook page produces a searchable log with all of the same gaps. The change is in what the process proves.

Contractors are the case that actually costs money

Visitors are mostly a courtesy problem. Contractors are a liability one. A contractor on site is doing work, sometimes hot work, sometimes at height, sometimes on live systems, and the questions asked afterwards are specific: who authorised this, was the induction completed, was the permit valid on the day, and who was accountable for them while they were here.

A visitor book answers none of those, and its silence is not neutral. In an incident, the absence of a record does not read as "no problem occurred"; it reads as no control existed. That is the reason organisations with real safety exposure move off paper first, and it has nothing to do with reception looking modern.

The sign-out problem does not solve itself

It is worth being honest that going digital does not automatically fix departure records. A visitor who walks out of a building will not open an app to say so, and a system that depends on them doing it has moved the same failure onto a screen.

What works is not relying on the visitor for the closing event: a host who confirms the visit ended, a pass that expires at a stated time, a badge surrendered at the gate, or a check-out prompt sent to the phone that already verified itself on arrival. Any of those beats a column in a book. The test to apply to a vendor is simple — ask how the system knows a visitor left when the visitor does nothing at all.