Turnstiles for CSCS and Right to Work Compliance
CSCS card access control means linking a construction turnstile to each worker’s credentials so the gate only opens for people with a valid, in-date CSCS card and confirmed Right to Work status. If a certification has expired or a check has not been completed, access is denied automatically. This moves compliance from a paper exercise done after the fact to a control enforced at the point of entry, backed by a full audit trail.
Keeping unqualified or ineligible workers off site is one of the clearest responsibilities a main contractor holds, and one of the hardest to police manually. Cards get checked once at induction and then forgotten, certifications expire mid-project, and Right to Work paperwork is easy to misfile. Envision’s turnstiles, powered by the CloudPass platform, turn those checks into an automatic gate condition rather than a spreadsheet nobody has time to maintain. As a CloudPass hardware partner, Envision brings the enforcement at the gate and the credential software together in one solution.
Why credential checks are
hard to manage manually
On paper, the rule is simple: only inducted workers with valid credentials and the right to work should be on site. In practice, a manual process struggles. A card that was valid at induction may expire weeks later, subcontractors bring workers the main contractor has never checked, and busy site teams cannot realistically re-verify every credential every day. The gap between the policy and what actually happens at the gate is where compliance risk lives.
Verifying CSCS cards
with Smart Check
CloudPass validates CSCS cards through the scheme’s own checker, Smart Check, which reads all of the recognised partner cards, and CloudPass is an IT partner within that scheme. When a worker presents themselves, the turnstile checks their status the moment they reach the gate. If their card is valid and in date, the turnstile releases. If it has lapsed or a required check is missing, access is refused automatically and the site team is alerted. Envision’s security access control turnstiles hold these credentials against a verified identity, so the check happens every single time, not just once at induction.
Right to Work checks
through PPAC
Right to Work is handled through CloudPass’s integration with PPAC, the market leader for Right to Work in construction. Where your business and your subcontractors hold a PPAC account, the integration checks the underlying Right to Work documentation, which is far more thorough than simply recording a status. For anyone not yet using PPAC, Right to Work can still be captured as a data field, but the PPAC route gives the stronger, document-backed check. Because this is confirmed before a worker arrives, eligibility is enforced at the gate rather than assumed.
Certification management
that stays current
The real value is that the system tracks expiry dates continuously and warns you ahead of time. CloudPass notifies users around 30 days before a card is due to expire and reports on who has expired and when, so renewals happen before they become a problem. On the day a certification lapses, the turnstile denies access automatically. That protects the contractor from the situation where an incident investigation reveals a worker on site with out-of-date qualifications, and it keeps subcontractor labour to the same standard as everyone else passing through the gate.
A clean, GDPR-ready
audit trail
Every access decision is logged: who entered, when, and against which valid credentials. That gives you a defensible record if a client, principal contractor or insurer asks for evidence that only competent, eligible workers were on site, and CloudPass can produce a CSCS audit report directly. The platform is built around GDPR best practice, with role-based access to data and defined retention periods, and works to information security standards including ISO 27001 and ISO 9001. This sits within a broader approach to construction site security where access, compliance and workforce data are connected rather than kept in separate systems.
Preventing ghost workers
and shared credentials
Credential checks only work if the person at the gate is really the person the credential belongs to. Facial recognition and anti-pass-back technology close that loophole, so a valid card cannot simply be passed back and shared between workers. Combined, they ensure that the worker who was verified is the worker who entered, which removes ghost workers and strengthens both compliance and site security. On larger sites this pairs well with construction site access control systems for full workforce accountability.
What to confirm
before deployment
Before you rely on a turnstile for compliance, check how credentials are captured and verified during onboarding, whether your subcontractors hold PPAC accounts for Right to Work, how the system handles a worker whose card expires mid-project, and how quickly a new subcontractor can be enrolled so they are checked from day one. A short site survey will match the process to your compliance requirements. Our guide to construction site turnstile hire covers how these packages are set up and supported.
Frequently asked questions
Yes. Through CloudPass, the turnstile validates CSCS cards using the scheme’s Smart Check service, which reads the recognised partner cards, and it checks validity at the point of entry, releasing the gate only when the card is valid and in date. Because the check runs every time the worker enters, rather than once at induction, it catches cards that expire during the project. CloudPass also warns you around 30 days before a card is due to expire, so renewals can be arranged in good time.
Right to Work is handled through the CloudPass integration with PPAC, the market leader in construction. Where your business and subcontractors hold a PPAC account, the integration checks the actual Right to Work documentation before a worker arrives, and the turnstile then only grants access to workers whose checks are complete. For those not using PPAC, Right to Work can be recorded as a data field instead. Either way, eligibility is enforced and time-stamped at the gate rather than relying on paperwork that may be incomplete.
The system tracks expiry dates continuously, so on the day a certification lapses the turnstile refuses access automatically, and CloudPass will already have flagged it around 30 days earlier. This prevents the common and hard-to-defend situation of someone remaining on site with out-of-date qualifications. The worker can be reinstated as soon as valid credentials are uploaded and confirmed, keeping the site both compliant and productive without manual chasing.
Enforce compliance at the gate, not on a spreadsheet
Envision supplies, installs and maintains construction site turnstiles and access control across the UK, with CSCS and Right to Work checks, certification management and audit trails built in. Tell us about your site and we will recommend the right setup.
Compliance checking happens at the gate, whether the turnstiles are owned or hired. If you are pricing up a scheme, see our guide to construction site turnstile hire.
