Most small offices have a visitor log, and most visitor logs are theater: a sign-in sheet by the door that nobody reconciles, nobody retains on purpose, and nobody could produce on the day it actually matters.
The day it matters is unglamorous. A laptop walks out of the office and the police report asks who was in the building that afternoon? An insurer asks for evidence of physical access controls. A customer's security questionnaire asks how visitors are handled. A clipboard with seven honest columns answers all three.
The seven columns that carry the whole weight
- Date, time in, time out. The out-time is the column small offices skip — and the one an insurer asks about. Rule: nobody is still "in" overnight. The last person out closes any open rows, initialing the out-time.
- Name. Printed by the visitor themselves.
- Company or organization. "FedEx" is fine for the courier; insist on a person, not a logo, for auditors and candidates.
- Host. The employee expecting them. The test for a legitimate visit: if nobody will put their name in this column, the visit was never expected.
- Badge issued. If you issue visitor badges, the log records the badge number.
- Badge returned. A visitor badge that never came back is a key that walked out the door. Deactivate the same day you notice.
- Signature + acknowledgment. One line, three jobs (below).
Who signs, who is exempt
Signs: clients, candidates, auditors, vendor technicians, a contractor's first-day colleagues — anyone going beyond reception with a laptop, a toolbox, or five minutes alone.
Exempt — but in writing: letter carriers, food left at the door, cleaning crews on a standing contract. Write the exemption down ("couriers hand off at reception; cleaning enters 18:30–20:00 under the facilities contract"). An exemption nobody can point to in writing is just an unlocked door with good PR.
Repeat visitors get pre-logged, not un-logged. The client who comes every Tuesday still signs each visit. A log with gaps only tells you someone stopped signing if the gaps would have been deliberate.
The acknowledgment line that does most of an NDA's job
On the sign-in sheet itself:
I agree not to disclose or make use of confidential information seen or heard on these premises, and to be accompanied by my host in non-public areas.
One sentence, signed per visit. It is not a substitute for a negotiated NDA — it is the floor that exists without one. A real NDA is still needed for three triggers: long engagements with code or customer data, demos of unreleased product, and any meeting where lawyers will eventually be involved.
And keep the paper honest: names, companies, and times are personal data. Two sentences at the bottom — why you collect it, how long you keep it — and the log survives the "wait, why do you keep a list of everyone who visits us?" question.
The three supporting rules
- Visitor badges expire by the day. Color or date-stamp them; collect at the exit.
- No visitor alone in non-public areas. The escort rule is what makes the host column true. Break it and the log becomes fiction.
- Guest wifi is a credential. Visitors get the guest SSID, split from the office network, rotated quarterly or on leak.
Paper or digital?
Paper wins on adoption (a clipboard is physically in the doorway), loses on forensics. Digital wins on retention and reconciliation. The cheap hybrid: paper in the doorway, plus a weekly phone-photo of the sheet into a dated folder. Either way — one canonical log. The failure mode is two half-logs, each missing what the other caught.
Retention and the quarterly fifteen minutes
Keep it one year; longer only while a matter is open. Reconcile quarterly: every row has an out-time, every badge number came back, every host remembers the visit. The one nobody remembers is the row that gets a second look.
And when something does walk out, the log gives you the visitor list for the window in minutes — names, hosts, times, who was alone. That is the moment the team stops seeing the clipboard as bureaucracy.
The full template — the sign-in sheet, the acknowledgment language, the reconciliation half-page — is part of the HIVE80lab ops notes, alongside the badge & door access checklist and the physical security checklist it pairs with. The Ops Starter Kit puts the sheet on fill-in-the-blank templates, and the Automation Starter Pack schedules the nightly row-close nudge and the quarterly walk.
Top comments (0)