Digital Wallet
Your phone is your keycard: one credential, every door, every building
Cohesion's mobile access solution unifies credentials, readers, and user management into one cloud platform that works on every phone and with the access control systems you already run. No rip-and-replace. No plastic. No second app.
The Problem with Plastic
Plastic keycards cost more than they look. Production, shipping, replacement, lock maintenance, and the staff time to chase down lost ones add up to real money, and the bigger cost is what plastic does to your security posture.
- ~70% of building credentials stay active after someone's offboarded. Plastic keeps working long after HR ends the record.
- 3+ days to replace a lost or stolen card, the same window it can get copied, shared, or walked out the door.
- Production, shipping, and lock maintenance costs stack up long before a single card reaches someone's badge holder.
Your Phone is Your Keycard
One credential carries from the street to the seat. The lobby turnstile, the elevator, the tenant floor, the gym, and a building three cities away on a different access system all read the same mobile pass. People stop juggling badges and apps and just tap to enter, the same way they tap to pay.
Cohesion supports the full credential stack. Apple Wallet on iPhone and Apple Watch. Google Wallet on Android. BLE for older devices and properties that want broader hardware reach. The same person can hold any mix of formats, and you set how many active credentials they're allowed across the portfolio.
For the people who still want a card, cards still work. Mobile is the default for new hires and visitors; physical stays available for the cases that need it. Biometric readers cover the highest-security doors.
Issue, Change, and Revoke in Seconds
Provisioning is real-time and rules-driven. A new hire is added to the HR system and the credential lands on their phone before they walk in. A role change updates clearance the next time their phone connects. An offboarding event in HR revokes the credential before the person reaches the parking garage.
Visitors and contractors get a time-boxed wallet pass or QR code by email that expires on its own, so temporary access never lingers. A room or amenity reservation grants exactly the doors it needs for exactly its window, then revokes itself. Access runs on policy, not on tickets.
HR Record Created
A new hire is added in the HR system.
Elapsed
0s
Credential Issued
Cohesion provisions the credential and pushes it to the wallet.
Elapsed
4s
Tap to Enter
The wallet credential is live on the phone, ready at the reader.
Elapsed
12s
More Private, More Secure
Mobile credentials inherit the security model of the device. Face ID or fingerprint authenticates the user before the credential is ever transmitted, which makes mobile a two-factor credential by default. The credential itself is encrypted, device-bound, and cannot be cloned the way a low-frequency card can.
Every door event, credential issuance, and access change writes to a tamper-evident audit trail. SOC 2 Type II, ISO 27001, and UL Smart System Verified Platinum apply to the platform itself, not just to a marketing badge. Real-time dashboards show who is in the building right now, and exports for compliance teams generate on demand.
Post-Termination Badge Reads
Person-level risk rows from the Workday + Genetec join, with badge reads dated after the Workday termination flagged red
| Badge | Name | Dept | Termination date | Last badge read | Site |
|---|---|---|---|---|---|
| B-40871 | L. Marsh | Contractors | 2026-06-12 | 2026-06-24 19:42 | HQ Tower |
| B-22015 | P. Okafor | Facilities | 2026-06-18 | 2026-06-27 06:15 | DC-East |
| B-51340 | R. Delgado | Contractors | 2026-06-03 | 2026-06-20 22:08 | Annex 2 |
| B-18902 | T. Halvorsen | Sales | 2026-06-21 | 2026-06-20 17:31 | Tower B |
| B-33776 | N. Feld | Engineering | 2026-06-09 | 2026-06-09 08:04 | HQ Tower |
| B-47228 | C. Bianchi | Finance | 2026-06-15 | 2026-06-14 16:52 | DC-West |
A Migration Plan, Not a Pilot
Moving a portfolio off plastic is a change-management problem as much as a technical one. Cohesion's rollout playbook maps current credentials and exceptions, sequences buildings and tenants into waves, and moves everyone to mobile on a date you set.
Step 1
Discovery
Map current credentials, systems, and exceptions across the portfolio.
Step 2
Wave Plan
Sequence buildings and tenants into rollout waves, smallest risk first.
Step 3
Communications
Prepare announcement and adoption materials for each wave ahead of cutover.
Step 4
Cutover
Move each wave to mobile on the date you set, help desk staffed for the weeks that matter most.
Step 5
Optimization
Track adoption and resolve exceptions, then carry lessons into the next wave.
Frequently Asked Questions
No. Digital Wallet is a layer on top of the access control systems and readers you already run. If you're on Genetec, LenelS2, AMAG, Datawatch, Avigilon Alta, Johnson Controls, HID, or Kastle, mobile credentials work on day one, no rip-and-replace required.
The credential is protected by Face ID or fingerprint, which makes mobile a two-factor credential by default, and it can be revoked instantly from a dashboard, the same way you'd revoke a lost card, except it takes seconds instead of days.
Real-time and rules-driven. A new hire's credential lands on their phone before they walk in, and an offboarding event in HR revokes it before the person reaches the parking garage. Same-day revocation runs 100% of the time.
Apple Wallet on iPhone and Apple Watch, Google Wallet on Android, and BLE for older devices or properties that want broader hardware reach. Physical cards still work for anyone who needs them.
Yes. Visitors and contractors get a time-boxed wallet pass or QR code by email that expires on its own, so temporary access never lingers past its window.
SOC 2 Type II, ISO 27001, and UL Smart System Verified Platinum apply to the platform itself. Every credential is encrypted and device-bound, and every door event, issuance, and access change writes to a tamper-evident audit trail.
Cohesion's rollout playbook sequences buildings and tenants into waves rather than a single cutover, with communications and a staffed help desk for each wave. One client moved 51 offices and issued 10,000+ credentials in a single program.
By the Numbers
mobile credentials issued in a single client rollout
offices migrated in one program
five-year TCO reduction vs. plastic-card programs
same-day revocation on offboarding
Ready to move from plastic to wallet?
Bring your access environment, identity provider, and phased rollout plan. We'll walk through the migration end to end.