Envoy's Security Blind Spot
Envoy Visitors is popular for good reason. The product is well-designed, easy to deploy, and does a solid job at what it was built for: visitor sign-in, host notifications, space booking, and workplace experience.
But there's a significant gap that most buyers don't discover until after they've signed: Envoy has no background screening capabilities.
No sex offender registry checks. No automated watchlist screening. No real-time deny list matching. No AAMVA driver's license verification beyond basic ID capture.
For a tech startup managing guest Wi-Fi and conference room bookings, this probably doesn't matter. But for a school, a hospital, a government building, or any facility where knowing who is walking through your door is a legal or safety requirement — it's a critical gap.
This isn't a knock on Envoy's product quality. It's a statement of fact about their product scope. Envoy was built as a workplace experience platform. KyberAccess was built as a security platform. The features reflect that difference.
What Background Screening Actually Means
"Background screening" in visitor management isn't the same as running a full employment background check. It's faster, more targeted, and happens in real time during the check-in process. Here's what a properly equipped VMS should check:
Sex Offender Registry Screening
The National Sex Offender Public Website (NSOPW) aggregates data from all 50 state registries. A VMS with screening capability checks every visitor's name and date of birth against this database at the moment of check-in — before they receive a badge, before they're allowed past the lobby.
If there's a match, the system can:
Envoy does none of this.
Custom Watchlists and Deny Lists
Organizations maintain internal lists of individuals who should be flagged or denied entry — former employees terminated for cause, individuals involved in restraining orders, known bad actors, or people flagged by law enforcement (BOLO alerts).
A proper watchlist system should support:
Envoy offers a basic blocklist at higher tiers. It doesn't support threat levels, fuzzy matching, or real-time push alerts.
AAMVA Driver's License Verification
The American Association of Motor Vehicle Administrators (AAMVA) sets the standard for driver's license barcode encoding across the US and Canada. Scanning the barcode on the back of a license with an AAMVA-compliant reader extracts:
This isn't just convenient — it's how you verify that the person standing at your front desk is who they claim to be. A photo of an ID can be faked. A properly decoded AAMVA barcode is significantly harder to forge.
Envoy offers basic ID capture (photo of the front of the license). It does not parse AAMVA barcodes or validate the data against the visitor's self-reported information.
Industries Where This Matters Most
K-12 Schools
This is where the gap is most dangerous. Multiple states now mandate visitor screening in schools:
A school using Envoy for visitor management is not meeting these statutory requirements. The check-in looks modern and professional, but the security screening isn't happening.
Healthcare Facilities
HIPAA doesn't explicitly mandate visitor screening, but it does require facilities to implement "reasonable safeguards" to protect patient information and safety. The HHS enforcement guidance has made clear that visitor management is part of the physical security controls expected under the Security Rule.
Hospitals, clinics, and senior living facilities deal with vulnerable populations. A visitor who would be flagged by a sex offender check can walk into an Envoy-equipped facility without triggering any alert.
Government Buildings
Federal facilities follow FIPS 201 and ISC standards that require identity verification beyond simple sign-in. State and local government buildings increasingly adopt similar requirements.
Manufacturing and Regulated Industries
Pharmaceutical companies, data centers, and facilities with ITAR/EAR compliance requirements need to verify visitor identity and screen against denied parties lists. Basic check-in isn't sufficient.
How KyberAccess Handles Screening
Every feature described above is built into KyberAccess — not as an add-on, not at an enterprise tier, but as core platform functionality.
Real-Time Sex Offender Registry Screening
When a visitor checks in at a KyberAccess kiosk, their name and date of birth are automatically checked against sex offender registries. This happens in seconds, during the check-in flow, before a badge is printed or entry is granted.
Custom Watchlists with Threat Levels
KyberAccess supports unlimited watchlist entries with granular controls:
AAMVA Driver's License Verification
KyberAccess includes full AAMVA barcode scanning in the Pro plan:
All Included — Even on the Free Plan
Sex offender screening is available on every KyberAccess plan, including Free. Watchlists, AAMVA scanning, and advanced screening features are included with Pro ($399/mo). There's no "security add-on" package and no per-check pricing.
The Cost of Getting It Wrong
The consequences of inadequate visitor screening aren't theoretical:
Legal Liability
If a registered sex offender enters a school or childcare facility because the visitor management system didn't screen them, the organization faces negligence liability. "Our software doesn't do that" is not a defense when affordable alternatives exist.
Compliance Violations
Schools operating under state mandates (Florida, Texas, California, New York, and others) can face penalties, loss of funding, or administrative action for non-compliance with visitor screening requirements.
Reputational Damage
A single incident involving an unscreened visitor makes local — sometimes national — news. The fact that a school was using a "visitor management system" that didn't actually screen visitors makes the story worse, not better.
Insurance Implications
Insurers increasingly ask about visitor management practices during underwriting. Demonstrating real screening capability (not just sign-in logging) can reduce premiums. Demonstrating a gap can increase them.
Making the Switch from Envoy
If you're currently using Envoy and need screening capabilities, you have two options:
Migrating from Envoy to KyberAccess
The migration is straightforward:
Most organizations complete this in a few hours. Run both systems in parallel during a transition week if you prefer — the free tier means there's no cost to the overlap.
For a full feature comparison, see our detailed KyberAccess vs Envoy breakdown.
The Bottom Line
Envoy is a good workplace experience product. It handles sign-in, notifications, and space management well. If those are your only requirements, it's a reasonable choice.
But if your facility has a legal, regulatory, or ethical obligation to know who is walking through your doors — and most do — then a check-in system without screening is an incomplete solution. A visitor management system that doesn't screen visitors isn't managing risk. It's managing appearances.
See our background screening features, ID scanning capabilities, or pricing page for more details.