What is a PACS (Physical Access Control System)? Components + platforms

PACS (Physical Access Control System)

A Physical Access Control System, or PACS, is the integrated system that decides who can enter which doors, gates, and secure areas of a building. Components include credential readers, electric or magnetic locks, door controllers, and management software. Modern enterprise PACS platforms (Brivo, Avigilon Alta, Genetec Synergis, Lenel S2, Honeywell Pro-Watch) run cloud-managed or on-prem and integrate with video management systems, identity providers, and HR systems for automated provisioning and deprovisioning.

The short definition

A PACS replaces metal keys with electronic credentials, electric locks, and software-enforced rules. When someone presents a credential at a reader, the controller checks: is this credential valid right now, on this door, at this time of day, for this person. If yes, the lock releases. If no, the door stays locked and the event logs as a denied attempt.

The audit trail is the operational difference. Metal keys produce no record. PACS produces a timestamped record of every entry, every denied attempt, every door-held-open event. That record matters for HR investigations, insurance claims, OSHA documentation, and compliance frameworks like HIPAA, PCI DSS, and SOC 2.

The five-layer stack

Credentials. Plastic badges (prox cards, smart cards), mobile credentials (phones via Bluetooth or NFC), biometrics (fingerprint, face, iris), or PINs. See the mobile credential entry and biometric authentication entry for credential types.
Readers. Mounted next to the door. Accept the credential and pass data to the controller via Wiegand (legacy), OSDP (modern), or IP. Brands include HID, Allegion Schlage, Mercury, and vendor-specific readers (Verkada Access, Brivo).
Controllers. Panel-mounted hardware in the IDF or telecom closet. Hold the credential database (or sync with cloud) and decide whether to unlock. Mercury, HID Edge, and vendor-specific controllers.
Locks. Electric strikes (replace the strike plate), mag-locks (electromagnetic, fail-safe), electrified mortise locks (replace the lockset). Choice depends on door type, life-safety code, and aesthetic.
Software. Cloud or on-prem platform managing users, schedules, audit, integrations, and reporting.

The major platforms

Brivo. Cloud-native, broadly deployed, strong API. Mid-market and multi-tenant default.
Avigilon Alta (formerly Openpath). Cloud-native, mobile-credential-first, integrated with Avigilon video. Strong in office and education.
Genetec Synergis. On-prem or hybrid. Unified with Genetec Security Center video and ALPR. Enterprise standard.
Lenel S2. On-prem enterprise. Deep customization. Government, healthcare, large corporate.
Honeywell Pro-Watch. On-prem enterprise. Manufacturing, logistics, government.
Verkada Access. Cloud-native, single-vendor camera plus access stack. Mid-market simplicity at the cost of multi-vendor flexibility.
Kisi. Cloud-native, mobile-first. Office and coworking standard.

Where PACS integration earns ROI

Multi-tenant office buildings. Tenant onboarding, after-hours access, visitor management, and elevator destination dispatch all run through PACS. Cloud platforms simplify multi-tenant management.
Healthcare HIPAA-driven access. Restrict access to PHI areas (records rooms, server closets, pharmacy). Audit trail required for HIPAA risk assessments. See the HIPAA entry.
Manufacturing safety zones. Restrict access to chemical storage, high-voltage rooms, and lockout-tagout zones. PACS plus video creates the OSHA-relevant documentation trail.
Schools and K-12 lockdown. Single-button lockdown locks all classroom doors during a threat. PACS integration with mass-notification systems is the standard SVPP grant scope.

When to ask Tec-Tel about PACS

PACS picks last 7 to 10 years. We'll scope the credential type, controller architecture, video integration, and identity-provider connection at a site walk. We install Brivo, Avigilon Alta, Genetec Synergis, Verkada Access, and Lenel S2.

Frequent buyer questions

What's the difference between PACS and access control?

PACS (Physical Access Control System) is a specific term emphasizing the physical-world domain: doors, gates, turnstiles, vehicle barriers. Access control is the broader concept that also covers logical access (network logins, application permissions). In commercial security, the two terms are usually interchangeable. PACS is more common in federal and government contexts; access control is more common in commercial.

What are the components of a PACS?

Five layers. (1) Credentials: badges, mobile credentials, biometrics, PINs. (2) Readers: at the door, accept the credential and pass data to a controller. (3) Controllers: panel-mounted hardware that decides whether to unlock. (4) Locks: electric strikes, mag-locks, electrified mortise locks. (5) Software: cloud or on-prem platform that manages users, schedules, and audit trails. Network and power infrastructure tie it all together.

Cloud PACS vs on-prem PACS, which should I pick?

Cloud (Brivo, Avigilon Alta, Genetec Stratocast Access, Verkada Access) wins on remote management, automated firmware updates, identity provider integration, and multi-site federation. On-prem (Lenel S2, Honeywell Pro-Watch, Genetec Synergis) wins on offline operation, deeper customization, and air-gapped deployments. Most new commercial installs go cloud unless there's a regulatory or operational reason to stay on-prem.

What does PACS integration with video do?

When a badge reads or a door alarm triggers, the VMS automatically pulls the camera covering that door and bookmarks the moment. Operators see who badged through door 3 at 2:14 AM with what credential, paired with the camera 7 footage of that exact moment. Saves hours on incident investigation. Standard integration in Genetec Security Center, Avigilon Unity, Verkada Command, and Eagle Eye Networks.

How does PACS connect to HR systems?

Modern PACS platforms support SCIM, SAML, or direct connectors to identity providers (Okta, Azure AD, Google Workspace) and HR systems (Workday, BambooHR, ADP). When HR adds an employee, a credential is automatically provisioned with the right access level. When HR offboards, all credentials revoke immediately. Closes the gap where ex-employees retain badge access for weeks or months.

Start with a free consultation.

Tell us what you're protecting and what's already in place. The Tec-Tel team reviews it and comes back with a written plan.

Tell us how many sites you run and what's already in place. We'll show you what a build or upgrade looks like.

Straight answers from the team that does the work. We're platform-agnostic, so you get the system that fits your sites, not one brand's catalog.

Since 2010 · 1,000+ deployments nationwide · ISN-accredited

Book a free consultation 855-577-0400

PACS (Physical Access Control System)

The short definition

The five-layer stack

The major platforms

Where PACS integration earns ROI

When to ask Tec-Tel about PACS

Frequent buyer questions

Mobile credential

Biometric authentication

Tailgating

Industries

Start with a free consultation.

How can we help?