PPM Contracts: What Good Looks Like for Door Entry & Access Control
A PPM contract is only as good as what it actually prevents.
Most buildings with door entry or access control systems already have a planned preventative maintenance contract in place. Almost none of them have stopped to ask whether that contract is actually doing what it's supposed to do.
The instinct is understandable. A PPM contract feels like a box that's been ticked - someone visits twice a year, a report gets filed, the budget line is accounted for. But "we have a maintenance contract" and "our door entry and access control systems are properly maintained" are two different statements and the gap between them is where facilities teams get caught out - usually during a fire risk assessment, an insurance renewal, or the week after a break-in that a badly maintained system should have prevented.
Key stat
Facilities and estates teams increasingly report that access control failures - doors failing to lock, entry systems left in fail-safe override, unsynchronised user databases - are identified reactively, during an incident or audit, rather than through the maintenance contract that was supposed to catch them first.
What a PPM contract is actually meant to catch
Preventative maintenance exists to find problems before they become incidents. For door entry and access control specifically, that means a contract should be built around the failure points that actually matter to a building's security and life-safety position, not a generic service visit that checks the system powers on and calls it done.
A properly scoped PPM contract for door entry and access control should cover:
Door hardware condition - hinges, closers, seals and locking mechanisms, particularly on fire doors where compliance depends on the door closing and latching correctly every time
Access control database accuracy - removing leavers, auditing user permissions, and checking that the physical system matches who should actually have access
Fail-safe / fail-secure configuration - confirming each door is set correctly for its function, and that this hasn't drifted following a fault, a power cut, or an ad-hoc override that was never reversed
Battery and backup power testing - for both the control system and any standalone locking hardware, so the system performs as intended during a power failure rather than only in normal operation
Integration checks - confirming door entry, access control and fire alarm systems are still talking to each other correctly, particularly after any one of them has been serviced or updated independently
Firmware and software updates - applied on a defined schedule rather than left until a fault forces the issue
For facilities teams
The test of a good PPM contract isn't whether the engineer turned up. It's whether the visit would actually have caught the fault that later caused a problem. If you can't answer that with confidence, the contract needs reviewing - not necessarily replacing.
Reactive vs planned: where the real cost sits
The financial case for a properly scoped PPM contract is straightforward, but it's usually made badly, as a vague appeal to "prevention is better than cure" rather than a specific comparison.
The real difference is where the cost lands and how much control you have over it. A reactive model means faults get fixed after they've already caused disruption: a door left unable to lock overnight, a resident or employee locked out, an engineer call-out at short notice and out-of-hours rates. A planned model finds the same faults during a scheduled visit, at a scheduled cost, before they've affected anyone.
Neither model eliminates faults entirely, hardware fails regardless of how well it's maintained. What planned maintenance changes is the proportion of faults that are caught early versus caught by an incident, and that proportion is usually the clearest evidence a facilities manager can bring to a budget conversation.
What good actually looks like in the contract itself
Beyond the scope of what's inspected, the structure of the contract matters just as much. These are the elements that distinguish a contract that performs from one that simply exists:
Defined response times for reactive call-outs, separate from the scheduled PPM visits, with different tiers for security-critical faults (a door that won't lock) versus lower-priority issues (a keypad backlight)
Clear visit frequency matched to the building's risk profile - a single-tenant office and a multi-occupancy residential building with fire doors do not need the same PPM schedule
Written reporting after every visit, listing what was checked, what was found, and what action was taken - not a generic sign-off sheet
Parts and labour terms that are explicit about what's included in the contract price versus what's chargeable separately
A named point of contact and escalation path, rather than a call centre that routes to whichever engineer is available
Manufacturer independence, so the contract can support hardware from more than one vendor as the building's system evolves
Where compliance and PPM overlap
Door entry and access control sit close to several compliance obligations, and a good PPM contract should be doing some of that compliance work automatically rather than leaving it as a separate exercise.
Fire door performance is the clearest example, a fire door that doesn't close and latch correctly isn't a minor snag, it's a compliance failure, and it's exactly the kind of fault a properly scoped PPM visit is designed to catch before a fire risk assessment does. Access control audit trails matter for similar reasons: insurers and, in regulated sectors, inspectors increasingly expect a clean record of who has access to a building and when that access was last reviewed.
Compliance note
A PPM contract that doesn't produce a written record of what was checked and what was found isn't giving you anything to show a fire risk assessor, an insurer, or an auditor after the fact. The visit needs to leave a paper trail, not just a completed job.
Common PPM mistakes we see
Buying on price per visit rather than scope - a cheaper contract that skips fail-safe checks and database audits isn't cheaper once a fault gets missed
Treating the PPM contract and the reactive call-out service as unrelated, rather than making sure faults found reactively feed back into what the next planned visit checks
Letting the access control database drift between visits - leavers not removed, contractors with standing access long after the job finished
No clear ownership internally - a PPM contract works best when one person is accountable for reviewing the reports, not when they're filed and forgotten
Locking into a single manufacturer's service network, which limits the ability to switch provider or integrate new hardware without a full replacement
How S.E.A Systems approaches PPM for door entry and access control
S.E.A Systems provides planned preventative maintenance contracts for door entry and access control systems, built around what actually needs to be checked rather than a generic visit template. We work across leading manufacturers and remain independent, our contract scope is based on your building and its risk profile, not on a preferred supplier relationship.
We carry ISO 9001, 14001 and 45001 accreditations, and every PPM visit produces a written report: what was checked, what was found, and what action was taken. If a fault is identified, it's logged against the system's history - so the next visit, and any audit that follows, has a clear trail to point to.
Book a Free PPM Contract Review
We'll assess your current door entry and access control maintenance arrangement against what your building actually needs, and provide a written recommendation - no obligation.