Visitor Management

Principal workflows

• Invite: Staff pre-register expected guests such as vendors, contractors and interview candidates, so they arrive with their details and documents already handled.
• Sign in and screen: At the entrance, visitors sign in on a kiosk or with a desk officer, answer the screening questions for their visitor type, and are checked against your watchlist.
• On site: While visitors are in the building, security and front desk staff can see who is signed in, where they were going and when they arrived.
• Review and adapt: Visit records answer questions after an incident, and screening rules are changed through approved requests when conditions change.

Who uses it

• Directors of security and public safety at hospitals and health systems
• Front desk, information desk and security officers at entrances
• Infection prevention teams who set health screening rules
• Facilities, supply chain and vendor management teams who host contractors and vendor representatives
• Privacy and compliance officers responsible for patient and visitor information

Reporting

• Visitors on site now, by entrance and destination
• Visitors not signed out
• Watchlist matches and outcomes
• Screening outcomes by visitor type and site
• Visits by site, type and time of day
• Configuration changes with approvers

Features

• Kiosk and desk sign-in: Envoy provides sign-in on a tablet kiosk or by front desk staff, with flows that differ by visitor type.
• Visitor types: Separate flows for patients' visitors, vendor representatives, contractors, interview candidates, couriers and others, each with its own questions and documents.
• Health screening questions: Questions set by your infection prevention team for each visitor type, changed through approved requests when conditions change.
• Watchlist checks: Envoy checks visitors against the watchlist your security team keeps, and alerts security privately on a possible match.
• Badges: Printed visitor badges showing name, photo where captured, destination and date, so staff can see who should be where.
• Pre-registration: Hosts invite expected guests in advance, so arrival is quicker and security sees who is expected.
• Document signing: Envoy has visitors sign the documents you require, such as confidentiality or safety acknowledgments, before entry.
• Host notifications: Hosts are told when their guest arrives, by email, text or messaging tool.
• Multi-site configuration: One baseline across sites and entrances, with local differences recorded and approved.
• Visit log: A searchable record of who visited, when, where they went and what they answered, kept for the period your policy sets.
• Kiosk and printer support: Moraph supports kiosk tablets, badge printers and ID scanners, and coordinates replacement when hardware fails.
• Controlled changes: Every change to sign-in flows, questions, watchlist rules and retention has a request, an approver and a record.

Integrations

• Single sign-on: Staff and administrators sign in through your identity provider.
• Employee directory: Staff are synced from your directory so visitors can find their host and hosts can invite guests.
• Calendar: Hosts can invite guests from their calendar where your calendar system is connected.
• Access control: Where Envoy supports your access control system, approved visitors can be given temporary access to specific doors.
• Vendor credentialing: Where an integration is available, vendor representatives' credentialing status from your vendor credentialing system is checked at sign-in.
• Messaging and email: Arrival notifications and security alerts go to hosts and officers by email, text or your messaging tool.
• Your service desk: Tickets pass between your IT service management tool and Moraph's.

Deployment

• Licences through Moraph: Moraph resells the Envoy subscription and runs it as one service, subject to Envoy's terms.
• Your existing Envoy account: If you already license Envoy, Moraph reviews the current setup against a new baseline and takes over its operation.
• Co-managed: Your team keeps some tasks, such as watchlist entry or first-line device support, and Moraph runs the rest; the split is written into the responsibilities for the service.

Security and privacy

• Data you choose to collect: Each sign-in flow collects only what your privacy officer approves; by default the patient being visited is not recorded.
• Business associate agreement: Where visit records include patient information, Moraph signs a business associate agreement and patient details are only recorded where Envoy's terms allow it.
• Role-based access: Desk officers see their entrance, hosts see their guests, and the full visit log is limited to the roles you choose.
• Complete audit trail: Envoy records sign-ins and administrator actions, and Moraph's change record links each change to its request and approval.
• Encryption and keys: Service records Moraph holds are encrypted, with keys Moraph staff cannot use without explicit, time-bound authorization.
• Audited company-wide: Moraph is audited to SOC 2 Type II and ISO/IEC 27001 across the company, including the teams that run this service. Envoy's own attestations cover the platform.

Limitations

• Moraph is not Envoy. Envoy operates the platform, and Envoy's own service commitments, roadmap, maintenance and outages apply.
• Envoy licences are subject to Envoy's terms. Kiosk tablets, printers, scanners and some integrations are priced separately.
• Moraph does not staff entrances or provide security officers. Your staff sign visitors in and respond to alerts.
• Watchlist checks only find people on your watchlist. The service does not perform criminal background checks.
• Health screening relies on the answers visitors give. It is not a clinical assessment, and your infection prevention team decides the questions.
• Access control and vendor credentialing integrations depend on what Envoy supports with your systems.
• Visitors who bypass a staffed or kiosk entrance are not recorded. Physical entrance control is your organization's responsibility.
• Moraph does not make privacy or breach notification decisions; your privacy officer does.

Next steps

Book a demonstration or a technical briefing at www.moraph.com/solutions/visitor-management. Purchasing routes and company information: www.moraph.com/how-to-buy.