...

Face recognition access control: entering a site by face, no pass needed

Face access control lets employees, contractors and guests in by face instead of a card: the camera at the entrance captures the person, NeuroVision looks them up in the access list and returns the result to your system, while the turnstile, door or security act under your rule. Entry to a building and zones by face is only for those who have given consent; everyone else goes in by card.

Entry by face

1:N searching for a face in the access list
2 routes face or card, at the person’s choice
from 29 ₽ per KYC session of a guest: document and Liveness
The result goes to your system via API Access lists and access roles A card for those without biometrics

The price is the “Document + Liveness” package of the price matrix on the publication date

Face access control: the face becomes the pass

A pass that cannot be handed over

A card is given to a colleague, lost or copied. The face stays with its owner — and only the owner gets through.

  • 01

    Searching the access list, not everyone indiscriminately

    The face at the entrance is matched only against the lists you have compiled: employees, contractors for a week, guests for today, the stop list. If the person is not on a list, there is no entry. Biometric access control changes one element in your access control system, the identifier: the turnstiles, doors and access rules stay yours. How face search in your own database works is described on the page about searching for a person by face in a database.

  • 02

    The decision stays with your access control system

    NeuroVision returns who is in the frame, while whether to let them into this zone at this time is decided by the rules of your system. A disputed frame can be sent to a guard: they see the photo from the list and the frame from the camera and decide themselves.

  • 1:N face against the access list
  • 2 routes face or card, at the person’s choice
  • Roles access to lists and the log

Where face recognition is installed in access control

A camera or terminal is installed where people pass and where a mistake costs the most: at the main entrance, at doors with valuables and at zones admitting only those who have had a briefing.

  • Checkpoint with a turnstile

    A face recognition turnstile at the main entrance: the person walks up, looks into the camera and passes without a card. The queue at the checkpoint does not build up if the camera is installed properly.

  • Entry to the building and floors

    Face entry to a building, a lift lobby or a tenant’s floor in a business centre. Each tenant has their own list, and the reception has the list of guests for today.

  • Doors of a server room, cash desk and archive

    Rooms that only a few people visit. Here the face is often added as a second factor to the card: the door opens only if the card and the face belong to the same person.

  • Hazardous and restricted zones

    A workshop, work at height, a chemicals warehouse. Access to hazardous zones is only for employees who have had a briefing: the briefing date is stored in the person’s card, and whether to close the zone after that date is determined by the rule of your access control system.

  • Warehouses and loading zones

    Lots of temporary staff and contractors, and cards are passed from hand to hand. A face cannot be passed on — the person who gets into the warehouse is the one who has been registered.

  • Checkpoint of a construction site and shift camp

    Crews change every week. The contractor submits a list of workers with photos, the security service checks it and adds it to the access list with a validity period in the card.

How a person passes through a face turnstile

Registration happens once, entry every day. The example is a warehouse employee who has already consented to face entry.

Step 1

The face is added to the access list

The employee signs the consent and takes a photo — at the pass office or in advance via a link from a smartphone, with a Liveness check. The photo is added to the “Employees” list, together with the department, zones and access validity period.

An employee added to the access list
Step 2

The camera at the entrance finds the face

The camera or terminal at the turnstile picks out the face in the frame. A face that is too small or turned too far is not recognised — the minimum size and permissible rotation are set in the source settings, and the person steps closer and looks into the camera.

The camera at the entrance finds a face
Step 3

Live presence and search in the list

The system checks that a live person is in front of the camera, not a photo on a phone or a mask, and searches for their face in the access lists of this entrance. Confidence below the threshold means no match.

Live presence check and search in the list
Step 4

The turnstile opens or calls security

The person is on the list and has access to this zone — the result goes to your system, the turnstile opens and the entry is written to the log. The person is not on the list, is on the stop list or the frame is disputed — entry is closed and the guard gets an alert with the frame.

The entry log in your access control system

Why a face is more reliable than an access card

  • A card can be handed over — a face cannot

    A dismissed employee left their card to a friend, a contractor passed a pass to a replacement, an employee let in an acquaintance. With a face this scenario does not work: only the person on the list gets through.

  • Copying a card is easier than fooling Liveness

    Simple cards are copied in minutes. A photo from a phone, a printout or a mask in front of the camera is rejected by the live presence check before the search in the list.

  • Access is closed by changing the list

    An employee is dismissed or a contractor’s agreement has ended — the record is deleted from the list or moved to the stop list. There is no need to wait for the card to be returned and to reprogram the locks.

  • The log holds a frame, not a card number

    When investigating an incident you see not “card 0471 passed at 22:14” but the frame of the person who passed. Access to the log and to face images is restricted by roles.

Corporate face access confirms that the person passing is the owner of the pass, not whoever has the card in their hand.
How to choose an algorithm and compare metrics — in the article “A face recognition system: how it works and where it is used”.

What the system checks at the entrance

Between the frame and the open turnstile there are four groups of checks. Each answers its own question: is the person alive, are they on the list, can the frame be trusted and do they have access here and now.

  • A photo on a phone screen or a printout in front of the camera Entry closed
  • A mask, a dummy head, a video instead of a live person Entry closedAlert to security
  • More about the live presence check is on the page Liveness

  • The face is found in the access list of this entrance with confidence above the threshold
  • The face is not on any access list Entry closed
  • The face is found on the stop list Entry closedAlert to security

  • The person is far away, turned away or the face is too small Repeat
  • A medical mask, glasses, headwear — whether to allow entry in them is for you to decide Entrance setting
  • There are several faces in the frame: the person is not passing alone Alert to security

  • Zone: the person has access to this particular entrance Entrance setting
  • Validity period: a guest’s access for today, a contractor’s — until the end of the contract Entrance setting
  • Condition: a briefing, a medical examination or another field in the person’s card Entrance setting
  • “Entry closed” — the turnstile does not open, a hint is shown on the screen
  • “Alert to security” — the guard receives the frame and decides themselves
  • “Entrance setting” — the rule is set for an entrance or a list
  • “Repeat” — the person is shown what to correct

Visitors and contractors: one-time access by face

A guest should not stand at the reception while a pass is being printed, and a contractor should not wait for a card to be issued. Access by face is arranged in advance and is valid until the end of the period in the person’s card.

  • Invitation by link

    The employee expecting the guest sends them a link. The guest reads the consent and takes a selfie with a Liveness check, and the employee adds them to the “Guests for today” list. The link is valid from 15 minutes to 30 days.

    Suitable for:

    for business centres and offices with a flow of guests

  • Passport and face at the checkpoint

    If the pass is issued by security, the guest’s document is recognised by the camera, data is not typed in by hand, and the face is matched with the photo in the passport. The guard sees the result and confirms access themselves.

    Suitable for:

    for sites where a guest is checked against a document

  • Contractor’s list

    The contracting organisation submits a list of workers with photos and consents. The security service checks it and enables access for the period of works — after that the records are closed.

    Suitable for:

    for construction sites, factories, warehouses

  • A guest without biometrics

    Not every guest will agree to a photo. They are given a one-time card or taken through the security post — the same way as before face access control. A refusal of biometrics is not a reason to refuse entry to a person who is expected.

    Suitable for:

    for everyone — this is a mandatory fallback route

If a person does not consent to biometrics

  • A card or a pass remains

    An employee has the right not to give consent to biometrics. The previous method stays for them: a card, a pass without a photo or entry by document through the security post.

  • A refusal is not a breach of discipline

    An employee cannot be punished for refusing to give biometrics or for withdrawing consent — this conclusion is also found in case law. Do not make face entry a condition of hiring or of admission to a shift.

  • Consent can be withdrawn

    The person has changed their mind — the record is deleted from the access list and entry switches to the card. Deletion is done in the console or via API, one record at a time or for the whole list.

  • The fallback route is not a loophole

    A card for those without biometrics must be named and have the same zones and validity periods as entry by face. Otherwise an outsider will go in exactly through it.

Access control is not among the cases when biometrics may be processed without consent. This means face access control always works alongside another way of entry — and it must be planned before launch.
The position of the Ministry of Digital Development and what to arrange with employees — in the “Face access control and the law” block below. How cloud and on-premises storage of biometrics in KYC work — in the article “On-premises or cloud KYC”.

Face access control and the law: employee consent, 152‑FZ and 572‑FZ

A face in access control based on facial biometrics is biometric personal data: it is used to establish who is passing. For an employer, the relevant rules are 152‑FZ on personal data, the Labour Code and the restrictions of 572‑FZ. Below is a summary of the rules as of October 2026. It is a guide for a conversation with a lawyer, not a legal opinion.

  • Biometric personal data is information about physiological and biological characteristics by which a person is identified and which the operator uses for this purpose (Part 1, Art. 11 of 152‑FZ) 152‑FZ
  • The Ministry of Digital Development has clarified that biometrics stored and used in an organisation’s access control system for entry to premises or a territory are biometric personal data, and their use is processing of them (letter of 15.10.2025 No. P24-16856-OG; the letter is about fingerprints) 152‑FZ
  • The purpose of processing is the access and on-site regime; it is fixed in a local act. An employee’s personal data is processed only for the purposes permitted by Art. 86 of the Labour Code, including the personal safety of employees and the preservation of property Labour Code of the Russian FederationYour company

  • A person is not obliged to provide biometrics, and cannot be refused on that ground unless the law requires them (Part 3, Art. 11 of 152‑FZ) 152‑FZ
  • For anyone who has refused, the employer arranges a different access procedure — by a pass without a photo or by document Your company
  • If face entry is built as authentication through the Unified Biometric System, a refusal of it cannot be a reason to refuse service (Part 13, Art. 3 of 572‑FZ) 572‑FZ

  • Organisations are prohibited from collecting and storing in their own systems biometrics used for identification, except for collection for the Unified Biometric System (cl. 1, Part 1, Art. 15 of 572‑FZ) 572‑FZ
  • Biometrics for authentication may be processed only for matching against Unified Biometric System vectors and stored for no longer than 10 days (cl. 2–3, Part 1, Art. 15 of 572‑FZ). This route is described on the page about sign-in and confirming operations by face 572‑FZ
  • Whether entry by an access list falls under these prohibitions depends on the scheme: where the list is stored, who matches and who makes the decision. The qualification is given by your lawyer before launch Your company

  • 572‑FZ does not apply to matching that is carried out not automatically but with the participation of an authorised official (cl. 2, Part 2, Art. 1 of 572‑FZ). The “the guard confirms entry” mode is built with this in mind 572‑FZYour company
  • Nor does it apply to the purposes of defence, state security, law enforcement, migration registration and issuing identity documents (cl. 1, Part 2, Art. 1 of 572‑FZ) 572‑FZ
  • Biometrics is processed without consent only in the cases of Part 2, Art. 11 of 152‑FZ — for example, under the legislation on transport security or on countering terrorism. Whether this applies to your site is determined by a lawyer 152‑FZ

  • The operator is obliged to take measures to protect personal data (Art. 19 of 152‑FZ) and not to pass employees’ biometrics to third parties without a legal basis 152‑FZYour company
  • The data retention period is set in the scenario, and personal data is destroyed on request via API. Where the data is processed and on what terms is fixed in the contract NeuroVisionYour company
  • For search, numerical face templates are compared; access to lists, the entry log and face images is restricted by roles NeuroVision
  • The summary of the rules is simplified: 152‑FZ as amended on 26.07.2026, 572‑FZ — of 28.12.2024; check the current versions in ConsultantPlus. What the Unified Biometric System is and who works through it — a blog article. The entry log does not replace a timesheet: time tracking by face is on a separate page.

Which sites suit face access

Where there are many people, the staff changes and the price of someone else’s entry is high.

  • Business centres and offices

    • Tenants’ entry without cards
    • Guests by invitation
    • Each tenant has their own list
  • Manufacturing

    • Access to workshops by briefing
    • A stop list after violations
    • Contractors for the period of works Learn more
  • Construction sites and shift camps

    • Checkpoint for contractor crews
    • Lists with photos from the contractor
    • Shift camps Learn more
  • Warehouses and logistics

    • Temporary staff
    • Zones for storing valuable goods
    • Entry without passing cards on Learn more
  • Hotels and service areas

    • Service entrances and storerooms
    • Outsourced staff
    • Rooms with a cash desk Learn more
  • Public sector and restricted sites

    • Russian software from the registry
    • Access lists and access roles
    • Entry log with differentiated rights Learn more

What equipment is needed for face entry

NeuroVision is the software part: face recognition and access lists. The turnstiles, doors and cameras are yours or your integrator’s. We select the equipment requirements to suit your site.

  • A camera or terminal at the entrance

    An IP camera aimed at the face of the person passing will do, or a terminal with a camera and screen at the turnstile. The main thing is a large, frontal face at a distance of a step, and lighting without backlight.

  • A turnstile, door, barrier

    The actuating devices stay the same. The recognition result goes to your access control system, and it opens the passage the same way as after a card.

  • Where recognition runs

    Recognition and lists run in the NeuroVision cloud via API. Whether an option on your side is needed and on what terms — we discuss at connection.

  • Access control integrator

    Connection to your access control system is done by your integrator or a NeuroVision partner: they know the site’s equipment, and NeuroVision provides the API and lists.

Connection to your access control system: API, cameras, lists

Recognition and access lists are configured in the personal account and via API. Get a test scenario

Face recognition for access control via API

The software of your access control system sends a frame from the camera and the identifiers of the lists of this entrance, and receives a response: who is in the frame, with what confidence, or “no matches”. Person lists are created and updated by the same API. Documentation

  • Access lists in the console and via API
  • Confidence threshold
  • Access roles for the log
  • Web SDK and REST API

Terms of connection

A test scenario on your account, a personal manager, payment only for completed checks.

How much face access control costs

The price depends on the number of entrances, people on the lists and the connection method. You can start with a test scenario at one entrance — terms are specified by the manager.

  • Start with this

    A pilot at one entrance

    a test scenario

    Request a pilot

    Test access to the API and lists, connection of one camera or terminal, threshold setup and a check on your employees.

  • Cloud

    on request

    Calculate the cloud

    Recognition and lists in the NeuroVision cloud, the log and access roles in the console, payment only for completed checks.

  • Face API

    on request

    Calculate Face API

    Search in access lists via API with your interface and your access control system. Terms and price — to suit your site.

Registration of guests by link with a document check and Liveness can be paid for as a KYC session — the “Document + Liveness” package from 29 ₽ per session. Equipment and installation are not included in the price. Prices for online checks — price matrix.

Glossary: access control, access list, Liveness and threshold

Terms you will meet in the project, the contract with the integrator and the conversation with a lawyer.

Access control
An access control and management system: readers, controllers, turnstiles, doors and the software that decides who may go where.
access control system
Biometric access control
An access control system in which the identifier is a face, a fingerprint or other biometrics instead of a card or code.
biometric access control
Access list
A list of people with photos and fields — zones, validity periods, conditions — by which entry to a particular entrance is decided.
access list, person list
Stop list
A list of people who are denied entry, with an alert to security on a match.
watchlist
1:N search
Comparison of the face in the frame with all the faces in the selected lists. More — on the page face search in a database
face search, 1:N
1:N identification
A technical term for 1:N search. In the law, “identification” is a separate legal concept (Art. 2 of 572‑FZ); the two are not to be confused.
face identification
Liveness
A check that a live person is in front of the camera, not a photo, a screen or a mask. More — on the page Liveness
liveness detection
Confidence threshold
The minimum confidence at which a match is considered found. The higher the threshold, the fewer false entries, but the more often repeat attempts.
threshold
Entry on someone else’s card
An outsider passing on an employee’s card, or a repeat entry on one card.
tailgating, passback
Two-factor access
Entry where two identifiers are needed at once, for example a card and a face.
two-factor access
Biometric personal data
Information about a person’s physiological and biological characteristics by which identity is established (Part 1, Art. 11 of 152‑FZ).
biometric data

Licences and certificates

Innovation Promotion Foundation

The project «Development of a multimodal system using artificial intelligence "Neuromed" for managing the diagnostic processes of a clinic on the basis of the "Neurovision" computer vision platform» is supported by the Innovation Promotion Foundation within the federal project «Domestic Solutions»

We will select face access control for your site

Tell us how many entrances and people you have, which access control system you have now and what requirements for data hosting your security service has — we will propose a scheme and a pilot at one entrance.

Can't put your request into words? Book a call and our team will contact you at a convenient time

Book a call

The company is included in the register of IT companies and the register of personal data operators of the Russian Ministry of Digital Development.

Address: Moscow, Presnenskaya Embankment 12 — Moscow City business centre, Federation Tower. Nearest metro stations: Delovoy Tsentr and Mezhdunarodnaya.

Frequently asked questions about face access control

It is an access control system in which the pass is the face. A camera or terminal at the entrance captures the person, the system looks them up in the access list and returns the result to your access control system, while the turnstile, door or security act under your rule. Cards remain for those who have not consented to biometrics.

It depends on your access control system. NeuroVision is the software part: via API it answers whether the person is on the access list, and how this answer reaches the controller or the software of the access control system is determined at connection together with your integrator. The turnstiles and doors stay yours; we select the cameras or terminals at the entrances to suit the site.

The live presence check rejects photos on a screen, printouts, masks and videos before the search in the list. There is no absolute protection, so the decision on entry stays with your access control system and security. Whether to allow entry in a medical mask and glasses is for you to decide.

The time from the frame to the turnstile opening depends on the camera, lighting, the size of the list and your access control system. The figure for your entrance is given by a test scenario at a real checkpoint.

Yes. Biometrics is processed only with written consent, and the access regime is not among the exceptions in Part 2, Art. 11 of 152‑FZ. Consent is drawn up as a separate document, and the purpose of processing is fixed in a local act.

Leave them another way of entry — a card, a pass without a photo or entry by document. A refusal cannot be a reason to refuse work, and one cannot be punished for it (Part 3, Art. 11 of 152‑FZ).

The guest is sent a link: they give consent and take a selfie with Liveness, and the employee adds them to the list for today. The contractor submits a list of workers with photos and consents, and access is enabled for the period of works. Those without biometrics enter on a one-time card.

The data is processed in the NeuroVision cloud, and the terms of hosting and storage are fixed in the contract. The retention period is set in the scenario, and personal data is destroyed on request via API. For search a numerical face template is used, and access to lists and the log is restricted by roles.

The entry log shows who entered and when, but it is not a timesheet. Time tracking by face is a separate scenario with its own rules and consent, and it is covered on the page about time tracking by face.

You can start with a test scenario at one entrance — terms are specified by the manager. After that the price depends on the number of entrances and people on the lists. Guests who register by a link with a document and Liveness can be paid for as a “Document + Liveness” KYC session — from 29 ₽. Equipment and installation — separately, with you or your integrator. Prices for online checks — in the price matrix.