Short answer: Medical office building access control has to keep the lobby welcoming for patients while closing staff-only zones and after-hours floors to everyone else. Edge.AI by Proptech.AI handles both: tenant staff who opt in enter hands-free, while couriers, vendors and after-hours patients are invited as visitors. One platform for every tenant reduces lobby desk time and badge churn, making it the most cost-effective proptech upgrade an MOB owner can fund.
Key takeaways
- Patients and companions do not need to enroll their faces; facial recognition is for tenant staff, physicians and regular service teams who opt in.
- Couriers, vendors and patients arriving outside normal hours can be invited in advance and complete an appless pre-check-in on their phones.
- Edge.AI is not a clinical or patient-records system; building access data stays separate from patient records, but visitor logs still deserve careful handling.
- Edge.AI can integrate with the building’s card system via Wiegand, so each practice keeps working while the owner upgrades common areas.
How is a medical office building different from a standard office?
It is public and private at the same time. Patients, companions and drivers walk in all day, while each practice also has staff-only corridors, medication and supply storage, and rooms that should stay closed to visitors.
Tenants keep very different hours, too. A primary care group may close at five while an urgent care clinic stays open into the evening and an imaging center starts early. The landlord ends up paying for lobby coverage around the longest schedule, and every tenant’s staff turnover lands on the building’s badge desk.
Many concerns overlap with commercial real estate access control, but the mix of patients and sensitive zones gives MOBs their own chapter in our guides to access control by industry. For an MOB owner, the most cost-effective proptech spend is the one that serves every tenant at once.
Who should enroll, and who should be treated as a visitor?
Enroll the people who come every day and invite everyone else. That keeps biometrics limited to staff who agree to it and asks nothing extra of patients.
The enrolled group typically includes tenant employees, physicians who rotate between suites, the building’s engineering and cleaning teams, and regular service partners. Each enrolls by email with a selfie after seeing the biometric privacy consent, and anyone who declines uses a QR code on a phone or an RFID card. Patients, companions, couriers and vendors are visitors: invited in advance where that helps, or welcomed at the lobby as they are today.
Owners and physician groups with several buildings can manage access across all of them from one centralized system.
Which zones in a medical office building need tighter control?
The places where the wrong person can cause real harm: medication and supply storage, staff corridors, and mechanical and IT rooms. The table shows a typical approach by zone.
| Zone | Typical users | Suggested approach | Note for owners and practices |
|---|---|---|---|
| Main lobby during clinic hours | Patients, companions, staff | Open entry, with visitor management at the desk | No patient enrollment required |
| Lobby and elevators after hours | Evening practices, invited patients, cleaners | Staff enter hands-free; invited visitors pre-check in | Plan coverage from actual traffic data |
| Suite staff entrances and corridors | Tenant employees, physicians | Facial recognition, QR code or RFID card | Each tenant decides who belongs in its suite |
| Medication and supply storage | Authorized tenant staff | Restricted entry with spoofing alerts at the door | Keep your own controlled-access policies |
| Loading dock and courier drop | Couriers, suppliers, waste vendors | Pre-registered visitors, host notified on arrival | Fewer unescorted strangers in corridors |
| Mechanical, electrical and IT rooms | Engineers, approved contractors | Individual contractor access that can be revoked | A clear record of who went in |
Aggregated peak-hour and building-usage data can show when the lobby really needs coverage; our article on access control metrics for property managers explains which numbers to track.
How does visitor management work for couriers, vendors and after-hours patients?
Visitors are invited before they arrive and check in on their own phones. Edge.AI sends customized invitations through Outlook, Google Calendar and other calendars, the visitor completes an appless pre-check-in, and the host at the practice is notified on arrival.
That relieves three groups that strain an MOB lobby. Regular couriers, such as lab and supply runs, stop queuing at the desk. Contractors servicing equipment or a tenant build-out arrive expected, with a named host. And practices seeing patients after the lobby closes can register those appointments in advance. Keep invitation wording neutral so it does not reveal the reason for a visit. Our article on appless pre-check-in for commercial building visitors covers the broader workflow.
What is the building already paying for lobby coverage and badges?
More than the line items suggest, because the costs are split between the landlord and every tenant, and labor is where any MOB proptech business case should start. Here is one way to total them, with assumptions you should replace.
Illustrative example: Assume a four-story medical office building with 12 tenant practices and about 300 tenant staff. Every figure is an assumption.
- Extended lobby coverage: assume the owner pays for 3 extra officer hours each weekday evening so two practices can see late patients. 3 hours × 250 weekdays × $28 per hour = $21,000.
- Courier and vendor sign-in: assume 40 visits a day at 3 minutes each. 40 × 3 = 120 minutes, or 2 hours × 250 weekdays × $28 = $14,000.
- Badge churn: assume 30% annual turnover among tenant staff. 300 × 30% = 90 badges, each costing $8 plus 20 minutes of admin at $36 per hour ($12). 90 × $20 = $1,800.
Under these assumptions, the building carries about $36,800 a year in access-related labor and credentials, most of it repeating annually. Weekend clinic hours would push it higher. Set your own totals against a subscription quote from Proptech.AI.
How does Edge.AI fit an MOB’s existing card system?
It can layer on top of that system, run beside it or replace it, depending on how much you want to keep. Owners rarely need to remove readers to start.
- Integrated: tie Edge.AI into the building’s panels using Wiegand, so each practice’s badges remain in service.
- Parallel: operate Edge.AI beside the current system at the main entrance or on one floor as a pilot.
- Hybrid: integrate at the lobby and run standalone at a storage room or a newly built-out suite.
- Full replacement: make Edge.AI the building’s standalone access control system once the legacy panels are retired.
Owners can choose cloud or on-prem hosting, which matters to tenants with strict IT policies. The integrated model has a track record in a busy multi-tenant building: at 101 Greenwich in New York City, managed by JLL, a 25-floor, 480k RSF building with 1,500 tenants moved from manual counting and a limited access control system to six Edge.AI sensors on six turnstiles, integrated with the existing card-based system. The building team recognized Proptech.AI’s work during its BOMA Pinnacle Award speech. Details are on the Edge.AI facial recognition access control page.
How should owners think about healthcare privacy and biometric consent?
Keep building access and patient care in separate lanes. Edge.AI manages entry to the building and its zones; it is not a clinical or patient-records system, and building access data is kept apart from the records each practice holds.
A visitor log in a medical building can still reveal who visited which practice, so limit who can see it and ask counsel how healthcare privacy rules apply to your building and tenants. For staff biometrics:
- Staff review the biometric privacy consent before any selfie is uploaded, and the built-in form explains that their data is not sold to third parties or used without authorization.
- Declining is fine: a QR code or RFID card gives the same access.
- Data can be deleted on request, for example when an employee leaves a practice, so publish a retention policy that says so.
- PII stays separate from the device and the management console, and analytics are tokenized with PII stripped out.
Illinois’ Biometric Information Privacy Act requires written notice and a written release before collecting biometric data, and the FTC’s policy statement on biometric information describes practices it may treat as unfair or deceptive. Edge.AI’s design supports compliance with BIPA, GDPR and other privacy laws. This is general information, not legal advice. Consult counsel familiar with healthcare real estate.
Frequently asked questions
Patients do not have to use facial recognition in a medical office building that runs Edge.AI. Facial recognition is an opt-in choice for tenant staff, physicians and regular service teams. Patients and companions can enter the lobby during clinic hours as the building allows, or be registered as visitors with an appless pre-check-in on their phones. Anyone who declines biometrics can use a QR code or an RFID card.
A medical office building should treat its visitor log as sensitive, because a record of who visited which practice can reveal personal information. Owners should limit who can view visitor records, keep invitation wording neutral, publish a retention policy and ask counsel how healthcare privacy rules apply. Edge.AI is an access control and visitor management system, separate from any practice’s patient records.
Couriers, suppliers and service vendors can be pre-registered at a medical office building through Edge.AI visitor management. The host practice or building team sends an invitation, including through Outlook or Google Calendar, the visitor completes an appless pre-check-in on a phone, and the host is notified on arrival. Couriers who come every day can instead be enrolled as contractors with their consent.
Edge.AI can control the doors of storage rooms in a medical office building, including medication and supply rooms, so that entry is granted to authorized staff using facial recognition, a QR code or an RFID card, with alerts on suspicious spoofing or fraud attempts. Practices should still follow their own controlled-access and inventory policies, because Edge.AI is an access system, not a clinical tool.
Edge.AI works with the card-based access control already installed in many medical office buildings by connecting to existing panels via Wiegand, so tenant badges stay in service while staff who opt in use facial recognition. Other options include a side-by-side pilot, a hybrid of integrated and standalone doors, or full replacement of the legacy panels, hosted in the cloud or on-prem.
Map your building’s zones with our team
Tell us about your tenants, their hours and the areas that need tighter control, and we will show how Edge.AI could work with your existing readers. To arrange a demo or a subscription quote, send your building details through the contact form at the bottom of this page or email sales@proptech.ai.
Sources: Illinois BIPA, 740 ILCS 14; FTC Policy Statement on Biometric Information