vms.adtomatic.comVisitor Management System
for Singapore Premises
A smart front-desk platform that scans visitor IDs with AI, screens against watchlists, and keeps every visit PDPA-compliant — across multiple sites.
The ProblemFront desks still run on paper logbooks
Still writing by hand
Guards hand-copy NRIC/FIN into a book — slow queues and constant transcription errors.
No just-in-time data
Management can't see who is on site right now; the logbook is only readable after the fact.
Illegible incidents
Incident reports written in poor handwriting are hard to read, act on, or use later as evidence.
No screening
Banned or flagged visitors walk in unchecked; no watchlist at the point of entry.
No audit trail
Pages can be torn out or altered — there is no tamper-proof record of who did what, when.
PDPA exposure
Open logbooks expose everyone's personal data; no masking or retention control.
Before vs AfterFrom paper logbook to AI-powered VMS
Manual logbook
- Hand-written, illegible, slow
- No live "who's on site" view
- No watchlist screening at entry
- Editable / tearable — not tamper-proof
- Everyone's PII visible on the page
- No cross-site or head-office reporting
AI-powered VMS
- AI scans the ID & auto-fills in seconds
- Real-time on-site dashboard
- Every visitor screened at check-in
- Tamper-proof, time-stamped audit trail
- Masked PII, retention control (PDPA)
- Multi-site & tenant-wide reporting
The SolutionOne platform, end to end
AI ID Scan
Snap the visitor's NRIC/FIN/passport — AWS Bedrock reads it and auto-fills the form; the image is stored securely.
Instant Screening
Every ID is checked against the watchlist before entry; matches raise a blocking alert.
Geo & Multi-Site
Each check-in is tagged with site + GPS coordinates; admins manage many premises.
Guard Scheduling
Plan shifts on a calendar, track leave/availability, and get double-booking warnings.
Incident Reporting
Guards log incidents by site; admins triage and track resolution across premises.
AI Assistant
Admins ask plain-English questions about schedules, registrations and incidents.
Flagship AI Use CaseID-card scan → auto-filled entry
The security officer photographs the visitor's ID card. Amazon Bedrock (Claude vision) extracts the name, ID type and number — the officer just adds the unit number and saves.
ID numbers are masked on display (e.g. S****567A) and never logged — PDPA by design.
Who Uses ItFour roles, one multi-tenant platform
MCST · Tenant Super Admin
The building/estate owner. Onboards security companies, provisions their admin accounts, and sees tenant-wide reporting across every company & site.
Company Administrator
Security agency admin — manages its own sites, hosts, guards, watchlist, scheduling, incidents and reports. Desktop-first.
Security Officer
Front desk — AI scan, check-in / out, badges, watchlist. Views own shift calendar, gets schedule alerts, and files incident reports. Mobile-ready.
Host / Employee
Pre-register & invite expected visitors; see who is coming to meet them.
Multi-TenantOne platform, many companies & sites
The MCST (estate/tenant owner) sits above everything. It onboards security companies; each company owns its sites, guards and data — cleanly separated, centrally overseen.
Onboard companies
MCST creates each security agency and provisions its first admin account.
Data separation
Sites and users belong to a company — each agency works only within its own scope.
Tenant reporting
Roll-up of visits, shifts and incidents across every company, exportable to Excel/PDF.
How It WorksFrom invitation to check-out
1 · Pre-register
Host invites an expected visitor with date, time and purpose.
2 · Check-in
Officer scans ID, screens the watchlist, records site + GPS, issues a pass.
3 · Notify host
The host is notified that their visitor has arrived.
4 · Check-out
Scan the pass to check out; the visit is closed and the badge returned.
WorkforceRight guard, right site, right time
Calendar & Resource views
See the month at a glance, or a guards-×-days grid to balance coverage across sites.
Availability & Leave
Mark guards available, unavailable, on leave or medical leave — scheduling respects it.
Conflict warnings
Blocks double-booking and scheduling on leave days, with an explicit override.
Shift alerts
Guards are notified of new shifts and see their own calendar, filtered by site and week/month.
SafetyCapture & resolve incidents by site
Guard reporting
Log theft, trespass, disputes, fire, medical or suspicious activity — with type, severity and time.
By-site visibility
Admins see per-site incident counts and filter by site and status.
Status workflow
Track each incident Open → Investigating → Resolved → Closed.
Exportable
Every admin report exports to Excel, PDF and CSV for audits and handover.
Ask AnythingChat with your operations data
A built-in Bedrock assistant lets admins ask plain-English questions and get grounded, factual answers from live system data — no reports to dig through.
"Who is scheduled this week?"
Instant answers on shifts, guards and site coverage.
"How many visitors are on site now?"
Real-time registration and check-in figures.
"Any open incidents at Marina One?"
Site-level incident status on demand.
Answers are grounded only in your data (aggregates, no NRIC) — the assistant never invents facts.
Trust & ComplianceTamper-proof records, locked-down access
Full audit trail
Every check-in/out, watchlist hit, schedule change and incident is time-stamped with the user and IP — stored, not scribbled.
Tamper-proof
Records can't be torn out or quietly altered like a paper page — the log is append-only and always available for audits.
Not publicly exposed
The application is not open to the public internet. Access is VPN-restricted — including from mobile devices.
Data residency
Hosted on private cloud in a Singapore data centre — your visitor data stays in Singapore, PDPA-aligned.
Built OnEnterprise-ready, cloud-native
AWS Bedrock
Managed AI for ID OCR and the ops assistant — no model to train or host. Scanned IDs kept in private, encrypted S3.
PHP 8 · MySQL
Proven stack, Bootstrap 5.3 UI, deployed on EC2 + Nginx with HTTPS.
Secure by design
Not publicly exposed — VPN-restricted (incl. mobile). HTTPS, CSRF, masked PII, tamper-proof audit trail.
SG private cloud
Hosted on private cloud in a Singapore data centre for data residency — responsive on phone & desktop.
average check-in with AI scan
visitors screened against the watchlist
PricingOne price per site. Unlimited users.
admins, guards & hosts — no per-seat fees
Every site includes
- AI ID scan & auto-fill
- Watchlist screening
- Guard scheduling
- Incident reporting
- Tamper-proof audit trail
- AI assistant & reports
- VPN-restricted access
- SG private-cloud hosting
Scales linearly: 5 sites = $500/mo, 20 sites = $2,000/mo — always unlimited users.
Thank YouReady to modernise
your front desk.
AI-powered Visitor Management System — secure, fast, and PDPA-compliant.