Guide
Door Access Swipe Cards And Building Logs
17 pages · 21 min read
Door access, swipe cards, and building logs create a digital diary of physical presence.
- CCTV and physical access evidence
§ Guide
Door Access Swipe Cards And Building Logs
This guide explains how door access swipe cards and building logs provide physical presence evidence, detailing what a badge event proves and its limitations.
Ref · E-D · 2026 · §LIBClass · ConfidentialJuris · England & WalesStatus · Active
Guide · 17 pages · 21 min read · Published 2026-08-30
Written for UK legal practitioners navigating physical presence evidence, this publication addresses the challenge of converting electronic access control records into reliable court evidence. While security platforms log credential movements across readers, controllers, turnstiles, lifts, and perimeter systems, a badge event places a card rather than a specific individual. Forensic analysis bridges the gap between credential and human attribution, resolving complications such as shared cards, unrecorded exits, deleted logs, and short retention periods. The text outlines methods for securing building data before it is overwritten, joining physical entries to digital timelines, and examining wider source architectures including CCTV, time and attendance records, and visitor management platforms. For lawyers managing disclosure obligations or instructing a CPR Part 35 expert witness, it supplies draft preservation letter wording, interrogatories for opponents, and red flag checklists to evaluate technical limitations. Through e-discovery platforms, this building data sits on the same reviewed chronology as other digital evidence, supported by complete chain-of-custody documentation.
Share
Read this guide on your phone, open the PDF reader with the full text, browse guides by topic or go back to the full PDF library.
§ Credit and source
Published by Computer Forensics Lab on 2026-08-30. Original material of the practice, free to read, cite and download. See every guide's author and source.
§ Read Door Access Swipe Cards And Building Logs
Download the PDFPrefer a PDF that matches this page exactly? Download the current text as a PDF, generated from the current wording of the guide, including any later corrections.
Page 1
ACCESS CONTROL EVIDENCE · A GUIDE FOR UK LAWYERS Door Access, Swipe Cards and Building Logs Physical Presence Evidence and What a Badge Event Does and Does Not Prove COMPUTER FORENSICS LAB
§ ABOUT THE AUTHOR PREPARED BY COMPUTER FORENSICS LAB E-DISCOVERY TEAM TIMELINE CONSTRUCTION CPR PART 35 EXPERT REPORT S FULL CHAIN-OF-CUSTODY DOCUMENTATION
§ CONTENTS In this guide 01 Executive summary 02 The problem in plain English: the building keeps a diary 03 The access-control estate: readers, controllers and platforms 04 What the logs record and how to read them 05 Attribution: card, credential and human 06 Collection and retention: getting the logs before they go 07 Joining presence to the digital timeline 08 Source architecture: where else the evidence lives 09 Worked examples 10 Common mistakes and technical limitations 11 Questions to ask · Suggested wording 12 Checklist and red flags · When to involve a digital forensic expert 13 Frequently asked questions 14 Glossary · References · Disclaimer · How a specialist laboratory can assist
§ 01 · ORIENTATION Executive summary THE HEADLINE POINT: BADGELOGSPLACEACREDENTIALPRECISELY: MAKINGTHEM PLACEAPERSONISTHEANALYTICALWORK
§ 02 · FIRST PRINCIPLES The problem in plain English: the building keeps a diary
§ 03 · THEESTATE The access-control estate: readers, controllers and platforms
Page 2
§ 04 · THERECORD What the logs record and how to read them
§ 05 · WHOSE H AND Attribution: card, credential and human
§ 06 · BEFOREITGOES Collection and retention: getting the logs before they go
§ 07 · THEJOIN Joining presence to the digital timeline
§ 08 · THEWIDERMAP Source architecture: where else the evidence lives EVIDENCE TURNSTILES / CONTROLLERS / CCTV DIGITAL TIME & DELETED / PLATFORM LAYER PERIPHERY ATTENDANCE RECOVERABLE LIFTS / VISITORS
§ 09 · IN THE WILD Worked examples EXAMPLE1 · THEOVERTIMETHATBADGEDITSELFOUT EXAMPLE2 · THESERVERROOMAT02: 12, AND WHOSE H AND EXAMPLE3 · THEABSENCETHATPROVEDNOTHING, HONESTLY
Page 3
§ 10 · WHEREITGOESWRONG Common mistakes and technical limitations Common mistakes Technical limitations
§ 11 · INTERROGATORIES & DRAFTING AIDS Questions to ask · Suggested wording Ask your client Ask your opponent Ask your e Discovery / forensic provider SUGGESTED WORDING · AC CESS - CONTROLLIMBFORTHEPRESER VAT I ON LETTER
§ 12 · QUICK CONTROL Checklist and red flags · When to involve a digital forensic expert The access-control checklist Red flags When to involve a digital forensic expert 35. Through e-discovery.uk, the building's diary sits on the same reviewed chronology as everything else the
§ 13 · COMMON QUESTIONS Frequently asked questions How long are swipe logs actually kept? Can badge data alone prove someone was in the building? The logs show no exit for our witness. When did they leave? Our client says a colleague borrowed their card. Hopeless? Is building access data caught by disclosure duties like documents? Can employers freely use this data to investigate staff?
§ 14 · REFERENCE Glossary Sources and authoritative references DISCLAIMER
§ HOW A SPECIALIST LABORATORY CAN ASSIST Working with Computer Forensics Lab Speak to a forensic examiner, not a salesperson. INSTRUCTTHELAB NEWENQUIRIESEMAILE - DISCOVERY
§ Related documents
Guide
Recovering Deleted CCTV And DVR Footage
17 pages · 26 min read
CCTV and DVR systems automatically overwrite footage, creating an urgent need for preservation.
- Deleted data and recovery
- CCTV and physical access evidence
Guide
CCTV Evidence
17 pages · 20 min read
CCTV evidence is time-sensitive and requires immediate action to prevent overwrite.
- CCTV and physical access evidence
Instruct the practice
Bring us in early.
Defensibility is built, not retrofitted.
Whether you are responding to a regulator, preparing for disclosure, or scoping an internal investigation, start the chain of custody with a short, confidential conversation.