By abedi · August 9, 2026
Commercial Access Control Systems: A Canadian Buyer’s Guide
Search for commercial access control and you’ll find a dozen guides comparing cloud platforms to on-premise ones. That’s a real decision, but it’s rarely the reason a system disappoints. Most of the access control we get called in to fix wasn’t specified wrong — it was installed on doors that couldn’t support it, or wired in a way that quietly breaks the building’s fire separation.
This guide is written from the install side, for Canadian businesses. It covers the things that actually determine whether a system works in year three: your doors, the Ontario Fire Code, who administers it, and what a retrofit really involves.
Start With the Doors, Not the System
Here’s the part vendors don’t lead with, because they sell systems rather than hang doors. A card reader is only as good as the door it’s mounted on. If the door doesn’t close square and latch cleanly every single time, no amount of software fixes it.
Frames and Closers
Older commercial doors shift. Frames move with the building, hinges wear, and closers lose their adjustment. A door that almost shuts is the single most common cause of access control complaints — the system reports a door held open, staff get alarm fatigue, and within a month someone props it permanently. The electronics are working perfectly. The door isn’t.
Door Material and Construction
Hollow metal, solid core, aluminium storefront and glass all take different hardware. Aluminium storefront doors in particular have a narrow stile that limits what can physically be fitted. This is worth establishing before anyone quotes, because it changes both the hardware and the labour.
What Usually Has to Change
Expect that some doors need work before they can be automated: a closer adjusted or replaced, a strike prepped, occasionally a frame reinforced. A quote that doesn’t mention door condition at all is a quote written from a floor plan rather than a site visit.
What Ontario’s Fire Code Requires
Most access control guides are written for a US audience and skip this entirely. In Ontario it isn’t optional, and it shapes the design of every controlled door that’s also an exit.
Exits Must Open in One Motion
A door used as an exit has to open from the inside with a single releasing operation — no key, no code, no specialised knowledge. Access control can restrict who gets in. It can’t add a step to getting out.
Locks Release on Alarm
Electrified locking on those doors must fail safe: when the fire alarm activates, or power to the panel drops, the doors unlock. This is the requirement most often wired incorrectly, and it’s not something you discover until an inspection or an actual alarm.
No Key-Both-Sides Hardware on Exits
Double-cylinder deadbolts aren’t permitted on exit doors. If a previous contractor left one on a stairwell, it has to come off — and it’s worth walking your building specifically looking for them.
Changes Get Inspected
Adding access control counts as modifying the door assembly, so it has to preserve both egress and the fire separation the door sits in. Any installer working in Ontario should be raising this before they quote, not after.
Choosing How People Get In
There’s no universally correct answer here. It depends on who uses the building and who administers the system day to day.
Fobs and Cards
Still the default for most multi-tenant and industrial buildings. Everyone understands them immediately, replacements are simple, and a lost credential is deactivated in seconds rather than triggering a lock change. The tradeoff is that people share them and they end up on the same ring as car keys.
Mobile Credentials
Entry from a phone. Much easier to administer — nothing physical to hand over when someone starts, nothing to chase when they leave. Strong fit for offices and newer buildings. Worth thinking twice about where a significant part of your user base would simply find a fob less hassle.
PIN Entry
Useful as a backup method or for spaces with rotating access, like a shared meeting room. Rarely the right primary method on a main entrance, because codes get passed around and almost never get changed.
Biometric
Fingerprint or face at the door. Makes sense for genuinely restricted rooms — a records room, a server room, a pharmacy or cash area. It’s overkill on a lobby door, it slows throughput at busy entrances, and it raises privacy questions you’d rather not take on for general access.
Cloud or On-Premise
This is the comparison every other guide leads with, so here’s the short version that actually matters in practice.
Cloud lets you add or revoke access from anywhere and pull reports without visiting the building. If you manage more than one property, this is usually the deciding factor on its own. It’s a subscription, and administration is genuinely easier.
On-premise keeps everything on a local server with no recurring fee. Some organisations require this for data-residency or policy reasons, and when they do it’s a perfectly good answer.
The question that settles it isn’t technical — it’s who administers this day to day, and where are they? A property manager covering several sites and an office manager sitting in the building want different things. Either way, credentials are stored locally at the panel on any system worth installing, so an internet outage costs you remote administration, not entry.
Retrofit or New Construction
These are genuinely different projects.
Retrofits
Older buildings with an existing entry system usually have wiring in the walls, and often it’s reusable. It needs testing before anything is designed around it — but when it passes, a system can frequently go in without cutting drywall or running new conduit through finished corridors. In occupied buildings the work gets staged so no door is left unsecured overnight.
New Builds and Fit-Outs
Here the constraint is the construction schedule, not the building. In-wall rough-in — cabling, back-boxes, door hardware prep — has to be complete before drywall closes. Miss that date and the work gets torn out and redone, usually at the contractor’s cost. Ceiling cabling has its own deadline before the grid and tiles go in.
If you’re fitting out a space, the security contractor needs to be engaged early enough to hit those milestones, and needs to coordinate directly with the general contractor and the electrical trade. It’s worth asking any bidder how they’ve handled a compressed rough-in before, because the answer tells you whether they’ve actually done it.
Common Mistakes to Avoid
Quoting from a floor plan. Door condition, existing wiring and fire-separation status can’t be seen on a drawing. Any serious quote follows a site walk.
Securing the wrong doors. In multi-tenant buildings the shared entry usually has the worst key control and the least ownership. Your own suite door is the one you can act on unilaterally — but the common door is where the actual exposure sits.
Nobody owning the admin login. Whoever holds it effectively controls access to the building. That should be a named person with a documented backup, not “whoever set it up.”
Skipping camera integration. Tying entry events to video is far cheaper at install time than retrofitted later, and it’s the difference between knowing a credential was used and knowing who used it.
Ignoring the doors that need work. Deferring a closer replacement to save a few hundred dollars produces a system that fails intermittently — which is worse than no system, because people stop trusting it and start propping doors.
Frequently Asked Questions
Does access control still let people out during a fire?
Yes, and in Ontario it’s a legal requirement rather than a feature. Exit doors open from the inside with one motion, no key or code, and electrified locks release when the fire alarm activates or power to the panel is lost. Any proposal that keeps an exit locked during an alarm is wrong.
Can I keep my existing doors and hardware?
Often, but it depends on the door more than the lock. Frames that have shifted, worn closers and doors that don’t sit square cause more failures than electronics do. A site walk establishes which doors are ready and which need work first.
How fast can I revoke someone’s access?
Immediately, from anywhere, on a cloud-managed system. That’s the practical reason to move off keys — a departing employee or a lost fob is handled in seconds, where a lost key means living with the risk or re-keying the building.
What happens if the internet goes down?
The doors keep working. Credentials live locally at the controller, so an outage costs you remote administration and live reporting, not entry itself.
Can one system cover multiple buildings?
Yes, and for anyone managing several properties it’s usually the biggest practical win — one login, one place to add or revoke a credential, and consistent reporting instead of a separate system per site.
How many doors should we start with?
Start with the doors where uncontrolled access actually costs you something: the main entry, anywhere valuable is stored, and any door that’s been propped or re-keyed in the last two years. Systems expand easily — it’s the cabling pathways that are worth planning for up front.
Does it work in an unheated warehouse or industrial unit?
Yes, with the right specification. Readers and locking hardware need to be rated for the temperature range they’ll actually see, and the controller belongs somewhere conditioned. Worth confirming rather than assuming.
Getting a Quote That Means Something
A useful commercial access control quote names every door in scope, states the condition of each one, says what hardware goes on it, describes the cabling, and identifies which openings are fire exits. If it’s a single number with no door list, there’s no way to compare it to anything.
Acetec installs and supports commercial access control across the Greater Toronto Area and surrounding regions — offices, warehouses, industrial units, condos and multi-tenant buildings. We walk the site before quoting, and we’ll tell you which doors need work before they’re worth automating. Request a site survey or call (416) 890-3639.