The verdict in three sentences
For a headquarters with 1,200 employees and 300 visitors a day, the paper logbook costs more than it seems: queues, unreturned badges and personal data kept without any framework. A custom visitor management system costs between MAD 120,000 and 300,000 excl. VAT in 2026, depending on how deeply it integrates with access control. Host pre-registration and QR code badges cut reception waiting time by three and bring the register in line with Law 09-08.
What the paper logbook really costs the headquarters
On the ground floor of a headquarters in Casa Anfa or Sidi Maarouf, the scene repeats every morning: 40 to 60 visitors between 8:30 and 10 am, two receptionists, a notebook, photocopied ID cards and numbered plastic badges. The facilities director sees three problems: average waiting time exceeds 9 minutes, around 4% of badges never come back, and nobody can say who is in the building during an evacuation.
Law 09-08 on the protection of individuals with regard to the processing of personal data requires a declared purpose, a limited retention period and information given to data subjects. A notebook kept for five years in a cupboard meets none of these requirements. The CNDP can ask to see the processing declaration.
| Indicator (2026 order of magnitude) | Paper logbook | Custom application |
|---|---|---|
| Average reception waiting time | 9 to 12 min | 3 to 4 min |
| Visitors pre-registered by host | 0% | 70 to 85% |
| Badges lost per year | 400 to 600 | under 50 (disposable QR) |
| List of people on site during evacuation | impossible | real time |
| Data retention period | unlimited in practice | configured (e.g. 3 months) |
| Receptionist time per visitor | 3 to 4 min | under 1 min |
Features and their price
A visitor management system is built in modules. The core covers host pre-registration from a web form or Outlook, an invitation with QR code sent by email or WhatsApp, check-in on a touch kiosk and host notification on arrival. Higher tiers add integration with the existing access control (turnstiles, badge readers), management of regular contractors and security dashboards.
| Scope | Features | 2026 budget excl. VAT | Timeline |
|---|---|---|---|
| Core | pre-registration, QR code, host notification, digital register | MAD 120,000 to 160,000 | 8 to 10 weeks |
| Core + kiosks | touch kiosk, ID or passport scan, badge printing, 09-08 consent | MAD 160,000 to 210,000 | 10 to 12 weeks |
| Access control | QR read by turnstiles, authorised zones, time slots | MAD 210,000 to 260,000 | 12 to 16 weeks |
| Multi-site headquarters | several buildings, recurring contractors, evacuation list, reporting | MAD 260,000 to 300,000 | 16 to 20 weeks |
| Hardware (excl. development) | 10-inch tablet kiosk + stand + badge printer | MAD 12,000 to 25,000 per kiosk | 2 to 4 weeks |
| Hosting and maintenance | server in Morocco or cloud, updates, support | MAD 2,500 to 6,000 per month | ongoing |
The most underestimated item is access control integration: it depends on the reader manufacturer and how open its API is. A two-day audit before quoting avoids bad surprises.
Law 09-08 compliance: the non-negotiables
The specification must include an information notice displayed on the kiosk, explicit consent for photos, automatic data purging after the chosen period and a log of who accessed the data. Hosting data in Morocco simplifies the CNDP declaration, since a transfer abroad requires authorisation. Collection must also be minimised: the ID number is only useful if security really needs it, otherwise name, company and host are enough.
Mini case study
Need a professional website?
Kolonell builds websites that attract clients, optimized for the Sénégalese market. Free quote in 2 minutes.
Youssef, facilities director of an insurance group in Casablanca, handles 300 visitors a day, 250 days a year. With the paper logbook, each visitor takes 3.5 minutes of a receptionist's time; with the application, under one minute. Gain: 2.5 minutes x 75,000 visits = 3,125 reception hours a year, nearly two full-time positions. At a loaded cost of MAD 9,000 per month per position, savings reach about MAD 200,000 a year. Chosen project: core + kiosks + turnstile integration for MAD 235,000 excl. VAT, plus two kiosks at MAD 18,000 each. Payback: about 16 months, not counting lost badges avoided and a reliable evacuation list.
FAQ
Must the application be declared to the CNDP?
Yes, a visitor register is personal data processing covered by Law 09-08. The declaration is filed online and usually takes 2 to 4 weeks; we provide the technical description of the processing to fill it in.
Can we reuse our current turnstiles?
In 7 cases out of 10, yes, if the readers accept QR codes or expose an API. Otherwise, replacing readers costs MAD 4,000 to 9,000 per access point.
Wouldn't a foreign SaaS be cheaper?
An international SaaS often charges MAD 1,500 to 4,000 per month per site, with data hosted outside Morocco. Over five years, the custom tool costs about the same, remains yours and integrates with your turnstiles.
How long should visitor data be kept?
Common practice is 3 to 6 months, unless a sector rule applies. The application automatically purges records at the set deadline.
Are visitors without a smartphone supported?
Yes, the kiosk prints a paper badge with a QR code in under 30 seconds. Reception also keeps a manual entry mode.
Let's scope your project. Share your daily visitor count, your sites and your access control system: we will price the scope, the budget in MAD excl. VAT and the go-live timeline. Detailed quote within 48 h. WhatsApp +221 77 596 93 33.
Mohamed Bah
Fondateur, Kolonell
Passionate about digital and entrepreneurship in Africa, Mohamed has been helping Sénégalese businesses with their digital transformation since 2020. Founder of Kolonell, he believes every SME deserves a professional and accessible online présence.
