Use case

Reviews and audit evidence

Owners confirm who still needs each key and card. The record from request to removal is there when the auditor asks.

An owner reviews who still needs each key and card. One key is still needed, a card that is not needed is blocked, a master key that is not needed is followed up, and the record runs from request to removal.

The problem

Access reviews run on spreadsheets and email.

An audit means rebuilding history from several systems and a key register.

The result is a snapshot that is out of date the day after.

What portierX does

Owners see who holds keys and cards for the rooms and sites they answer for.
They confirm who still needs each one. Cards no longer needed are blocked, and keys are followed up until they are back.
Every request, approval, issue, return and removal is on record.
portierX: one key's history from issue to return (invented demo data)
Anyone with the right permission can filter the history and export it to CSV or Excel.
portierX: a history of keys issued and returned, ready to export (invented demo data)

For IT and compliance teams, this is the review a PIAM is bought for, with the mechanical keys included.

Industries

Where the use case comes up most

Government and public sector

Access decisions that can be explained years later, key by key.

Utilities and critical infrastructure

Remote sites, long-lived assets, and a record of who held which key and when it came back.

Healthcare and hospitals

Access stays correct through shift changes and contractor rotations.

Common questions about access reviews and audit evidence

What does an auditor get?

The history of each key and card from request to removal, filtered to the period and the rooms the audit covers, and exported to CSV or Excel.

Is portierX a PIAM?

Yes, and more. portierX manages people’s access across electronic access control systems, which is what PIAM means, and puts mechanical keys under the same decision. We call that access authority.