# Noon Elite

> Noon Elite Ltd builds one thing: an iPad visitor and contractor sign in kiosk for UK
> manufacturing sites, with fire evacuation roll call, contractor permits to work and a
> timestamped record an auditor, an inspector or a customer’s security questionnaire asks for.

A UK company, selling to UK sites, installed in person around the East Midlands and supported
across the UK. Prices are published rather than quoted on request. The comparison page names
competitors and says where they are cheaper, because they are.

## Product and pricing

- [/kiosk/](https://noonelite.com/kiosk/): The product in full: what the iPad at reception does, the three modules, and what is included. Links to a live demonstration of the visitor sign in and the fire roll call that runs in a browser with no sign-up, at https://demo.noonelite.com/demo, with fictional data; badge printing and Permit to Work are not in it.
- [/digital-visitor-book/](https://noonelite.com/digital-visitor-book/): What a digital visitor book is (also called an electronic visitor book, a digital visitor log or a visitor book app), what it should record and for how long with links to the pages that quote each standard, what goes wrong with the paper book, and five options cheapest first: printed sheets and a QR code with Microsoft Forms, both free, a peel-off paper book, a self serve app on your own tablet, and a managed iPad kiosk at £150 a month plus VAT with setup from £599. Says plainly that a paper book is lawful, that the kiosk makes no site compliant, and that it has no questions, answers or signatures in the visitor sign in, no pre-registration for visitors, and a roll call that lists visitors and contractors and not staff.
- [/hardware/](https://noonelite.com/hardware/): What arrives with the kiosk: an iPad in its retail box that enrols itself through Apple Business Manager and locks to the kiosk app, a steel floor stand with a locking enclosure assembled with cables routed, a screen protector and a spare, and with the badge module a Brother QL-820NWBc label printer with DK-N55224 labels. Owned by Noon Elite and included in the monthly price; the site provides a mains socket and Wi-Fi without a captive portal. Hardware failure replaced in three to five working days at no cost; accidental damage, loss and theft chargeable.
- [/secure-badge-approval/](https://noonelite.com/secure-badge-approval/): The Secure Badge and Approval module, £150 a month: the visitor signs in and waits, a named member of staff comes to the kiosk and approves or refuses by six digit PIN after seeing a preview, and the badge prints with name, company, host, date and clearance level. Optional photo, off by default. If nobody comes, the site’s Teams or Slack channel is told. An append-only log of every request, approval, refusal, wrong PIN and print. Says plainly that the badge prints in black, returns are not logged, and approval happens only at the kiosk.
- [/deliveries/](https://noonelite.com/deliveries/): Delivery drop-off on the kiosk, part of the platform: the courier taps Delivery Drop-off, picks or types the courier company and taps Notify Team; the drop-off is logged with the time and the site’s Teams or Slack channel is told. Says plainly that a drop-off is not a sign in, is not on the fire roll call, stores no driver name or recipient, and has no export.
- [/microsoft-teams/](https://noonelite.com/microsoft-teams/): Microsoft Teams notifications from the visitor kiosk: a webhook, not a Teams app, posting an Adaptive Card to one channel per site when a visitor signs in (name, company, host, vehicle registration), a courier drops off, or a badge is waiting for approval. The same address works for Slack. Set up by pasting the channel’s webhook address into the dashboard. Nothing is sent on sign out and nothing goes to a person directly.
- [/driver-sign-in-kiosk/](https://noonelite.com/driver-sign-in-kiosk/): A driver sign in kiosk for goods-in, gatehouses and transport offices: a delivery or collection driver enters their name, company, who they are here to see and the vehicle registration, accepts the site rules on screen with the exact wording stored, is announced in the site’s Teams or Slack channel and is on the fire roll call until signed out. Says plainly: English only today, no booking reference, trailer number or load field, no weighbridge or transport system link, one set of site rules per site, and anyone still signed in at 23:59 UTC is signed out automatically. Other languages for drivers are a pilot, not built. Quotes BRCGS Storage and Distribution Issue 4 clause 4.2.4, which names drivers.
- [/contractor-invoice-hours-check/](https://noonelite.com/contractor-invoice-hours-check/): Checking a contractor’s invoice against the hours they were on site: the visitor history filters by date and exports a CSV file of name, company, host, signed in and signed out, in UK time, which a person lays beside the invoice or timesheet. Says plainly that the kiosk reads no invoice and compares nothing automatically, that time on site is not time worked and the record is not proof of hours worked, and that a forgotten sign out shows the automatic 23:59 UTC time. An automatic comparison is a pilot, not built.
- [/demo/](https://noonelite.com/demo/): Two ways to see the kiosk before talking to anyone. First, a live demonstration at https://demo.noonelite.com/demo, in a browser, with no form, no email and no account: the real visitor sign in on a fictional site with three fictional people already signed in (a name, a company, who is being visited, the site rules accepted), the live fire roll call for that session opened on a phone, sign out, and a delivery. A session lasts 45 minutes, everything typed is deleted within the hour, nobody else can see it, and it runs on a separate demonstration system, not the one customers’ records are held on. It does not show badge printing and approval, photographs, Permit to Work, the dashboard or the Teams and Slack messages. Then the recorded version: the three sign in screens, a fire roll call in 100 seconds, a badge printed after staff approval, the delivery alert, the exportable record, and a ten minute permit to work walkthrough. No form.
- [/permit-to-work/](https://noonelite.com/permit-to-work/): Contractor permits to work and RAMS, raised before arrival and signed off on screen.
- [/hot-work-permit-software/](https://noonelite.com/hot-work-permit-software/): Hot work permit software for UK sites, as the hot work permit type in the Permit to Work module: the contractor’s office completes its part of the request and uploads insurance, RAMS and COSHH assessments before arrival, a manager authorises on the dashboard, and the engineer signs in at the kiosk with the company name, a six digit code and their own name and is on the fire roll call while on site. Says plainly that Permit to Work is in early access and has not yet run at a customer site, that arrival and departure happen at the kiosk iPad so it is not a phone-only permit app, and that paper is fine for a few permits a year. Quotes HSE’s HSG250 (2005) and RISCAuthority’s RC7 Version 9 (2023) on hot work permits, read 2 October 2026.
- [/visitor-management-with-permit-to-work/](https://noonelite.com/visitor-management-with-permit-to-work/): A buyer’s checklist for one system that signs contractors in and issues their permits: nine questions to ask any supplier, Noon Elite included, with how the kiosk answers each, the six step permit path, and a dated answer on whether Envoy does permit to work.
- [/pricing/](https://noonelite.com/pricing/): Every price, in public. £150 a month plus VAT for the platform, £150 per module, setup from £599.
- [/terms-in-plain-english/](https://noonelite.com/terms-in-plain-english/): The Noon Elite kiosk’s commercial terms as plain sentences, each taken from the pricing page or the terms and conditions: list prices, setup fee on signature, Direct Debit, the fourteen day evaluation, twelve month minimum then monthly on thirty days’ notice, hardware owned by Noon Elite Ltd, failure and damage, leaving, discontinuation notice, data in Ireland, and that the signed agreement governs.
- [/referral-partners/](https://noonelite.com/referral-partners/): For compliance, health and safety, fire, ISO and BRCGS consultants and managed IT providers who see paper visitor books on client sites: Noon Elite pays 20% of the recurring fee for the first 24 months of each site introduced, quarterly against an invoice, and for the life of the account once a partner has three sites live at the same time. £30 a month per site on the platform, £720 over two years. The partner introduces; Noon Elite demos, installs, supports and invoices. No selling, no stock, no target, no exclusivity. Terms confirmed in writing at the first introduction.
- [/business-case/](https://noonelite.com/business-case/): Written for the director who signs it off rather than the manager who found it: £5,999 over three years for one site, the fourteen day evaluation period and twelve month term, and what happens if the hardware fails, if you leave, or if Noon Elite stops trading.
- [/visitor-management-comparison/](https://noonelite.com/visitor-management-comparison/): Noon Elite against Sign In App and Eptura, including where they win. Every claim about another company is sourced to that company’s own pricing page, newsroom or filing, and the date it was checked is on the page.
- [/eptura-alternative/](https://noonelite.com/eptura-alternative/): For sites coming from Eptura Visitor, Proxyclick or Condeco: what happened to the product, sourced to Eptura’s own pages, a published price against a quote, and a straight answer on when Eptura is the better fit.
- [/sign-in-app-alternative/](https://noonelite.com/sign-in-app-alternative/): A Sign In App alternative for UK manufacturing sites: their published per site per year tiers against £150 a month, hardware sold separately against an iPad and stand included, self serve against installed on site, and who owns each. Says plainly that their entry tier is cheaper.
- [/swipedon-alternative/](https://noonelite.com/swipedon-alternative/): A SwipedOn alternative, now that swipedon.com and its pricing page redirect to Sign In App: what happened to SwipedOn, sourced and dated, the published prices a SwipedOn buyer is now sent to, and what the kiosk does that a self serve platform does not.
- [/envoy-alternative/](https://noonelite.com/envoy-alternative/): An Envoy alternative with permit to work: what Envoy publishes on price, hardware, permits and ownership, read on a stated date, against the same rows for Noon Elite, plus the six step permit path, the nine questions to ask any supplier, and the permit walkthrough film.
- [/provisit-alternative/](https://noonelite.com/provisit-alternative/): A ProVisit alternative: what ProVisit publishes, read on its own pages on 27 September 2026 and dated, beside Noon Elite on the same rows. Says first what ProVisit publishes that Noon Elite does not have: digital invitations for visitors, contractor documents with expiry dates and alerts, and Cyber Essentials Plus. Then the structural differences: no ProVisit price is published (quote only) against £150 a month plus VAT, hardware not stated as included against an iPad and stand in the monthly price, ProVisit’s permit to work marked Beta on its own contractor page, and Noon Elite’s Permit to Work module in early access and not yet run at a customer.
- [/inventry-alternative/](https://noonelite.com/inventry-alternative/): An InVentry alternative for a UK manufacturing site: what InVentry publishes, read on its own pages on 3 October 2026 and dated, beside Noon Elite on the same rows. Says first that InVentry’s entry package is cheaper (Essential £95, Enhanced £125 and Enterprise £150 a month on its corporate subscription pricing page, against £150 a month plus VAT) and that InVentry publishes staff sign in, pre-registration, door access integrations with Paxton, Salto, Almas Industries and Suprema, DBS tracking and a pupil module for schools, 24/7 support and ISO 9001 and ISO 27001, none of which Noon Elite has; visitor pre-registration and staff on the fire roll call are in pilot at Noon Elite and not built. Then the differences the other way: an iPad on a stand included and replaced, setup from £599 published, monthly notice after twelve months, one engineer, and a Permit to Work module in early access and not yet run at a customer. Says a school or a trust should choose InVentry.
- [/visitor-management-requirements-checklist/](https://noonelite.com/visitor-management-requirements-checklist/): A visitor management requirements checklist for writing a specification before choosing a system: the record, the declaration, the fire roll call, badges, contractors and permits, pre-arrival, notifications, data, hardware and price, each line with the clause that asks for it quoted from the standard’s page on this site, or a dash where no standard names it, and Noon Elite’s answer as Yes, With a module, Early access or No. Says plainly which lines are no: pre-registration and invitations, photo ID, questions and answers, signatures, an induction video, a message to a named host, a badge return record, one declaration per visitor type, and its own security certification. Prints as a blank A4 form for any supplier.
- [/security/](https://noonelite.com/security/): Where visitor data is stored, who processes it, and the sub-processor list — written for somebody filling in a supplier security questionnaire.
- [/what-the-kiosk-does-not-do/](https://noonelite.com/what-the-kiosk-does-not-do/): What the Noon Elite kiosk does not do, each line with what to do instead: no photo ID or document scanning, no watchlist, no pre-registration or pre-visit email for visitors, no questions, answers or signatures in the visitor sign in (both exist in the Permit to Work module), no separate wording per kind of visitor (one per site), no sign in open past 23:59 UTC (a night shift is signed out mid-shift), no employee time and attendance, no nationality field, no purpose of visit field, no record of a badge coming back, Permit to Work in early access and not yet run at a customer, no integrations beyond a Teams or Slack webhook. Then when a paper book is the better answer.
- [/roadmap/](https://noonelite.com/roadmap/): The Noon Elite kiosk roadmap in public. Built: visitor and contractor sign in, site rules accepted on screen with the wording kept, a fire roll call of visitors and contractors, delivery messages to Teams or Slack, a spreadsheet export, and the Secure Badge and Approval module. Early access: Permit to Work, which has not yet run at a customer. In pilot and not built: visitor pre-registration, staff on the fire roll call, contractor insurance and RAMS expiry, a contractor induction video, a health questionnaire with answers, a still on site message at lock-up, a key sign-out register and visitor parking registration. Then how a request from a site is handled: scope and a fixed price agreed before any work starts, and what Noon Elite will not build.
- [/which-words-did-they-accept/](https://noonelite.com/which-words-did-they-accept/): A design note: how the kiosk keeps the exact wording each visitor accepted. The text is stored by its SHA-256 fingerprint when it is served, before anyone can accept it; each visit carries the fingerprint; a sign in queued while the Wi-Fi was down carries it too; stored wordings cannot be edited. Says plainly that this is acceptance of text, not a signature and not identity verification.
- [/alcoa-visitor-records/](https://noonelite.com/alcoa-visitor-records/): ALCOA+ applied to the visitor record, for the QA manager at a pharmaceutical, food or cosmetics site: each attribute in the words of the MHRA’s ‘GXP’ Data Integrity Guidance and Definitions (Revision 1, March 2018), what a paper book gives, what the kiosk records and what it does not, including that it does not verify identity, does not record who signed a visitor out, and has not been validated under Annex 11.

## Standards and duties this answers

- [/visitor-records-by-standard/](https://noonelite.com/visitor-records-by-standard/): Every standard with a visitor, contractor or site access clause on one page: BRCGS, SALSA, IFS, UFAS, EU GMP, UK GDPR, ISO 27001, PCI DSS, TISAX, CMMC, List X, ITAR, AEO, CTPAT, TAPA, ISO 45001 and the Fire Safety Order, with the clause numbers, the document’s own words, the version and the date each was read, and four standards that have no visitor clause (SOC 2, COMAH, Martyn’s Law, CQC Regulation 9A). Printable, and each row links to the page that quotes the clause in full.
- [/visitor-record-retention/](https://noonelite.com/visitor-record-retention/): How long to keep visitor records in the UK, by standard, each read at source on 26 September 2026: PCI DSS 9.3.4 at least three months; TAPA FSR 2026 4.1.5 at least 30 days; BRCGS Storage and Distribution 3.1.3.1 never less than one year for records; BRCGS Food Safety 3.3.2 and SALSA 3.5.2 shelf life plus a year for records; BRCGS Packaging 3.3.4 a period the site documents; UK GDPR 5(1)(e) no longer than necessary; CTPAT, ITAR guidance and List X name no period. The kiosk keeps one period per company, one day to two years, a year by default, and deletes nightly.
- [/what-a-visitor-log-must-contain/](https://noonelite.com/what-a-visitor-log-must-contain/): What a visitor log must contain, by standard: a matrix of PCI DSS, CTPAT, ITAR guidance, TAPA FSR 2026, TISAX and List X against name, company, host, date, times in and out, purpose, photo ID, nationality, badge issued and returned, non-disclosure accepted and escort, each cell in the document’s own words with the clause number. Underneath, what the kiosk records for each field and what a person does by hand: no purpose, photo ID, nationality, badge return or escort field.
- [/visitor-control-standards-calendar/](https://noonelite.com/visitor-control-standards-calendar/): What changed for visitors and contractors in each UK audit standard, 2024 to 2027, newest first, each date read at source: VDA ISA 2027 for TISAX assessments ordered from 1 January 2027, TAPA FSR 2026 from 15 September 2026, SALSA Issue 7 from 1 September 2026, BRCGS Packaging P708 from 10 August 2026, FSSC 22000 Version 7 (May 2026), BRCGS Packaging Issue 7 audits from 28 April 2025, UFAS 2024 v1.1 from 1 April 2025, PCI DSS v4.0.1 (June 2024) and IFS Food v8 from 1 January 2024.
- [/gdpr-visitor-book/](https://noonelite.com/gdpr-visitor-book/): Is a paper visitor book GDPR compliant? The honest answer is that a book is lawful — the problem is the open page showing the last twenty visitors to the twenty-first.
- [/cmmc-physical-security/](https://noonelite.com/cmmc-physical-security/): What NIST SP 800-171 §3.10 asks of a UK manufacturer’s front desk, and what an assessor expects to see.
- [/list-x-visitor-control/](https://noonelite.com/list-x-visitor-control/): List X visitor requirements: what the MOD’s Facility Security Clearance Policy and Guidance v1.4 (March 2024) asks of a cleared site’s reception, 22.1 on need to know and clearance, 22.2 on effective arrangements for the identification and control of visitors, 22.3 and 22.4 on who counts as a visitor, 23.3 on HSE inspectors signing the visitor’s book, and paragraph 46(h) of the 2014 List X requirements on records of all foreign visitors, quoted from GOV.UK. Says plainly that the kiosk records no nationality, checks no clearance, and holds data in Ireland, which the FSC and the ISAC must accept first.
- [/itar-visitor-log-uk/](https://noonelite.com/itar-visitor-log-uk/): ITAR visitor log for UK sites: the six items DDTC’s ITAR Compliance Program Guidelines (PDF dated 2 December 2022) say a Technology Control Plan visitor record should indicate, name and nationality, organisation, date, persons and areas visited, purpose and summary, quoted with the guidelines’ own line that they are not the regulation, and with no retention period because the document states none. Says which three items the kiosk records (name, organisation, date and host) and which three it does not (nationality, areas, purpose).
- [/def-stan-05-138-visitor-access/](https://noonelite.com/def-stan-05-138-visitor-access/): Def Stan 05-138 visitor access: control 1503 of Defence Standard 05-138 Issue 4 (14 May 2024), visitor access and exit shall be logged, visitors shall wear visitor ID badges, badges should differ from staff badges, visitors should be escorted, badges should be returned at the end of the day, at Cyber Risk Profile Levels 1 to 3, with control 1500 on reviewing physical access logs and clause 2.8 on DEFCON 658, quoted from the standard, line by line against the record. Says plainly that the kiosk does not record a badge being handed back, that a forgotten sign out shows the automatic 23:59 UTC time, and that the escort and the staff badges stay with the supplier.
- [/iso-27001-visitor-access/](https://noonelite.com/iso-27001-visitor-access/): ISO 27001 Annex A 7.2: controlling physical entry and keeping a visitor log you can protect, retain and review.
- [/pci-dss-visitor-log/](https://noonelite.com/pci-dss-visitor-log/): PCI DSS visitor log: what Requirement 9.3.4 of v4.0.1 says the log holds (name and organisation, date and time, who authorised access) and that it is kept for at least three months unless otherwise restricted by law, with 9.3.2 and 9.3.3 on authorisation, escort and badges, quoted from the standard, and what the kiosk records towards each.
- [/aeo-visitor-access-control/](https://noonelite.com/aeo-visitor-access-control/): Authorised Economic Operator security and safety (AEOS): what HMRC’s handbook and questionnaire guidance say about regulating access for visitors, telling them your procedures and recording their vehicles, quoted verbatim from GOV.UK, and what a kiosk records towards each.
- [/ctpat-visitor-log-uk-suppliers/](https://noonelite.com/ctpat-visitor-log-uk-suppliers/): CTPAT visitor log for UK suppliers: the six fields criterion 10.2 of CBP’s Minimum Security Criteria for Foreign Manufacturers (March 2020) requires, date, name, verification of photo identification, time of arrival, company point of contact, time of departure, why a US importer’s questionnaire reaches a UK supplier under criterion 3.5 (October 2021), and AEO as acceptable proof under 3.4. Says plainly that a UK manufacturer is not a CTPAT member, per CBP’s eligibility page, and that the kiosk does not record the photo ID check.
- [/tisax-visitor-management/](https://noonelite.com/tisax-visitor-management/): TISAX visitor management: VDA ISA 6.0.3 control 3.1.1 on security zones, with its visitor management line (registration and escorting of visitors) quoted from the workbook, the prototype protection control 8.1.7, the ISA 2027 dates from ENX, and the visitor record the kiosk produces. Says plainly that nothing gets a site a label.
- [/tapa-fsr-visitor-log/](https://noonelite.com/tapa-fsr-visitor-log/): TAPA FSR visitor log: what FSR 2026 (effective 15 September 2026) requires at the office visitor entry point, 4.1.4 photo ID, 4.1.5 registration with a log kept a minimum of 30 days showing who was visited and why, 4.1.6 badges reconciled and the log checked daily, 4.1.7 badges displayed and visitors escorted, 4.1.1 and 9.4.1, quoted with their security levels and the FSR 2023 numbering, and what the kiosk records towards each. Says plainly that the kiosk checks no photo ID and has no field for the reason for the visit.
- [/brcgs-visitor-control/](https://noonelite.com/brcgs-visitor-control/): BRCGS Issue 9 clause 4.1.4 for food sites: visitor reporting, hygiene declarations and driver control.
- [/brcgs-packaging-visitor-control/](https://noonelite.com/brcgs-packaging-visitor-control/): BRCGS packaging visitors: the five clauses of Packaging Materials Issue 7 that reach reception, 4.4.2 on controlled access and a visitor reporting system, 4.4.1 as amended by Position Statement P708 from 10 August 2026, 6.4.2 on the health confirmation before manufacturing, packing or storage areas, 6.2.6 and 6.5.2, quoted from BRCGS’s own Issue 7 checklist, and the declaration accepted on the kiosk by name.
- [/brcgs-storage-distribution-visitor-control/](https://noonelite.com/brcgs-storage-distribution-visitor-control/): BRCGS storage and distribution visitors: Issue 4 clause 4.2.2 (access controlled and a visitor reporting system in place), 4.2.4 on contractors and visitors including drivers being made aware of access procedures, 4.2.3, 8.2.7 on the health confirmation before storage areas and 8.2.2, quoted from BRCGS’s own SD401 self-assessment tool, with drivers who sign in on the record and a delivery drop-off that is not a sign in.
- [/brcgs-unannounced-audit/](https://noonelite.com/brcgs-unannounced-audit/): BRCGS unannounced audit: what BRCGS079, the Position Statement and Protocol on Unannounced Audits, Version 6 (24/07/2024), says about at least one unannounced audit in three years, 2.5 on the site contact on arrival and their deputy and the entry rules, 2.6 on auditor identification, 3.1 on the production audit starting within 30 minutes, and 5.1 on suspension if access is denied, quoted from the protocol, with what a sign in records and the arrival message to the site’s Teams or Slack channel. Says plainly that checking the auditor’s ID, reaching production inside 30 minutes and protective clothing stay with the site, and that the message goes to one channel, not a named phone.
- [/visitor-control-non-conformity/](https://noonelite.com/visitor-control-non-conformity/): A BRCGS visitor control non-conformity and the 28 days to answer it: clauses 4.1.4 (a visitor recording system, drivers made aware of access procedures) and 7.3.2 (the visitor health questionnaire) of Food Safety Issue 9, and Part III 2.3.2 on corrective action, root cause analysis and a preventive action plan within 28 calendar days or no certificate, Table 2’s objective evidence or revisit, and Appendix 8 on preventive actions taking longer, quoted from the Standard and checked against F926 version 4. Root cause questions for a front door, one line each on Packaging Issue 7 and Storage and Distribution Issue 4 (90 days at an initial audit), and what a kiosk records. Says plainly that the kiosk does not pick the root cause, write the plan or decide acceptance, that the certification body decides, and that no installation time is published, so ask for a date and keep a paper correction until it is live.
- [/salsa-visitor-control/](https://noonelite.com/salsa-visitor-control/): SALSA audit visitors: the five clauses of the SALSA Food & Drink Production Audit Standard Issue 7 (June 2026) that reach reception, 1.2.7 on visitors and contractors notifying illness, 1.2.2 protective clothing, 1.2.1 hygiene rules, 4.2.3 the food defence plan and 4.3.3 visitor tours, quoted from the Standard, and the health declaration accepted on the kiosk by name. Says plainly that no clause asks for a visitor book.
- [/ifs-food-visitor-hygiene/](https://noonelite.com/ifs-food-visitor-hygiene/): IFS Food visitors: KO number 3 (requirement 3.2.2, personal hygiene understood and applied by all relevant personnel, contractors and visitors), 3.2.1 on what the hygiene requirements cover, 4.21.2 on the policy of access by visitors and contractors in the food defence plan, 4.19.2 on allergen risk from visitors, and 3.2.3 on quarterly monitoring, quoted from IFS Food Version 8 (April 2023, mandatory from 1 January 2024), with what a KO is in the Standard’s own words and the hygiene requirements accepted on the kiosk by name.
- [/ufas-feed-mill-visitor-control/](https://noonelite.com/ufas-feed-mill-visitor-control/): UFAS visitors: what the UFAS Scheme Rules and Standard 2024, Version 1.1 (effective 1 April 2025) asks a compound feed mill to show about visitors, contractors and vehicle drivers, F 1.2 on security measures with its interpretation quoted as interpretation, F 1.4 on eating and smoking controls, F 1.5 on workwear and the new F 1.6 on being advised about communicable enteric disease, quoted from the Standard, with drivers who sign in on the record and a delivery drop-off that is not a sign in.
- [/gmp-visitors-production-areas/](https://noonelite.com/gmp-visitors-production-areas/): GMP visitors in production areas: EudraLex Volume 4 Chapter 2 paragraph 2.13 (in operation since 16 February 2014) quoted in full, visitors preferably not taken into production and quality control areas, information in advance about hygiene and protective clothing, closely supervised, with Chapter 3 paragraph 3.5 on preventing entry of unauthorised people and GOV.UK on the MHRA’s inspections. Says plainly that both are should paragraphs, that the kiosk gives the information at the door rather than in advance, and that it does not supervise anyone.
- [/gdp-wholesale-visitor-control/](https://noonelite.com/gdp-wholesale-visitor-control/): GDP visitor control for medicines wholesalers: section 3.2 of the Guidelines of 5 November 2013 on Good Distribution Practice (2013/C 343/01), unauthorised access prevented, usually by a monitored intruder alarm and access control, and visitors accompanied, with 2.2 on the responsible person and 4.2 on keeping documents at least five years, and MHRA Guidance Note 6 on why a UK licence holder follows the guidelines, quoted from source. Says plainly that the accompanying, the alarm and access control, and deciding who is authorised stay with the wholesaler, and that the kiosk keeps records for up to two years.
- [/fire-roll-call/](https://noonelite.com/fire-roll-call/): Fire evacuation roll call for factories and warehouses, and what the Fire Safety Order asks of you.
- [/factory-fire-safety-audits/](https://noonelite.com/factory-fire-safety-audits/): A data page, not a product page: fire safety audits of factories and warehouses in England, from tables published by the Ministry of Housing, Communities and Local Government. Year ending March 2026: 3,486 audits, 1,345 unsatisfactory (38.6% of premises audited), 286,765 premises known, so 1.22% audited in the year, or one audit per premises about every 82 years. Ten years of audits from 2016/17, non-compliance by article of the Fire Safety Order, the audit rate in each of the 44 fire and rescue authorities with a CSV, fires by building type, and the caveats: audits are targeted at risk so the share is not of all factories, and the share unsatisfactory is not comparable between authorities. Open Government Licence v3.0.
- [/contractor-management/](https://noonelite.com/contractor-management/): Contractor management and RAMS sign-off the way HSG159 describes it.
- [/construction-work-at-your-site/](https://noonelite.com/construction-work-at-your-site/): Construction work in occupied premises, for the facilities or health and safety manager at a factory or warehouse that keeps running while builders are in for an extension, a re-roof, a line install or a shutdown refit: who is the client, the principal contractor and the contractor under CDM 2015 (regulation 2(1)), what stays with the client when a principal contractor is appointed (regulation 4(1), 4(4) and 4(6)(b), and HSE L153 Appendix 3 paragraph 7), the principal contractor’s duties on site induction and unauthorised access (regulation 13(4), L153 paragraphs 134 and 135), and who has to tell contractors where the asbestos is (Control of Asbestos Regulations 2012 regulation 4(1) and 4(9)(c)), quoted from legislation.gov.uk and L153 as read on 28 September 2026. Says plainly that the kiosk does not hold, show or check an asbestos register, shows one wording per site to everyone who signs in, signs out anyone still signed in at 23:59 UTC including a night shift, checks no CSCS card or ID, and is not a construction site turnstile system.
- [/contractor-sign-in-robot-installers/](https://noonelite.com/contractor-sign-in-robot-installers/): Signing in robot and automation installers at a UK factory or warehouse: the integrator’s and vendor’s engineers are contractors, so the site records each sign in, has its induction wording accepted, and counts them at a fire roll call. Quotes section 3(1) of the Health and Safety at Work etc. Act 1974, regulation 12(3) of the Management Regulations 1999, HSE’s INDG368 (a safety method statement is not required by law) and HSG159 (all contractors sign in and out), and Articles 2 and 15 of the Fire Safety Order, read 1 October 2026. Says plainly that the kiosk does not track, register or count robots, that holding RAMS and insurance is the Permit to Work module, in early access, and that it gives no instruction on the work itself.
- [/visitor-safety-mobile-robots/](https://noonelite.com/visitor-safety-mobile-robots/): Visitor and contractor safety briefings on sites running autonomous mobile robots or automated guided vehicles: what HSE’s workplace transport guidance says about telling visitors and contractors the routes and the layout (HSG136 paragraphs 4, 31 and 59, HSE’s page on separating pedestrians and vehicles, regulation 17(1) of the Workplace Regulations 1992), read 1 October 2026, and how the kiosk shows the site’s own wording before sign in and records who accepted it and when. Says plainly that HSE’s guidance does not use the words AMR, AGV or robot, that the site’s risk assessment sets the rules, and that the kiosk gives no advice on speeds, zones or safeguarding and does not track robots.
- [/hse-inspection-records/](https://noonelite.com/hse-inspection-records/): What an HSE inspector can ask to see about visitors and contractors under section 20 of the Health and Safety at Work Act, and which records a site is expected to produce.
- [/iso-45001-contractor-control/](https://noonelite.com/iso-45001-contractor-control/): ISO 45001 clause 8.1.4.2 for UK sites: co-ordinating with contractors, communicating site rules and emergency arrangements, and keeping the evidence.
- [/visitor-nda-sign-in/](https://noonelite.com/visitor-nda-sign-in/): Visitor NDA sign in for R&D, medical device and engineering sites: your non-disclosure wording shown on the iPad before sign in, accepted with one button, and the record of who accepted which exact wording and when, kept for the retention period you set. Says what the kiosk does not do: no signature, no questions, no routing.
- [/visitor-sign-in-sheet-template/](https://noonelite.com/visitor-sign-in-sheet-template/): A free, printable visitor sign in sheet, contractor sign in sheet and fire roll call register with the UK GDPR privacy line already written, and how to use them so they stay lawful.
- [/permit-to-work-template/](https://noonelite.com/permit-to-work-template/): A free, printable permit to work template built on the HSG250 essentials: hazards, isolations, precautions, authorisation, acceptance, hand back and cancellation. When a permit is needed and what it must contain.
- [/hot-work-permit-template/](https://noonelite.com/hot-work-permit-template/): A free, printable hot work permit for UK sites with the fire precautions pre-printed: combustibles cleared to 10 metres, fire watch during and for 60 minutes after, checks to two hours. What insurers and the FPA’s RC7 expect.
- [/visitor-health-questionnaire-template/](https://noonelite.com/visitor-health-questionnaire-template/): A free visitor and contractor health questionnaire for food and food packaging sites, printable and as PDF or Word: illness in the last 48 hours, contact with infection, skin conditions, travel, hygiene rules acknowledged and the host’s sign off, with the privacy line for health data already written.
- [/fire-drill-record-template/](https://noonelite.com/fire-drill-record-template/): A free, printable fire drill record for UK sites: timings, the roll call count including visitors and contractors, observations and actions. How often to hold a drill and why the results have to be kept.
- [/contractor-induction-template/](https://noonelite.com/contractor-induction-template/): A free, printable contractor site induction record: the checks before work starts, the induction topics ticked one by one, and a signed declaration. What the law asks a host site to tell a contractor.
- [/templates/](https://noonelite.com/templates/): Every free printable template on the site in one place: sign in sheets, a food site health questionnaire, a contractor induction record, a permit to work, a hot work permit and a fire drill record. No form to fill in to get any of them.
- [/free-visitor-sign-in-microsoft-forms/](https://noonelite.com/free-visitor-sign-in-microsoft-forms/): How to build a free visitor sign in from a QR code, Microsoft Forms, Excel and Power Automate in eight steps, each checked against Microsoft’s documentation, with a privacy line to paste in and an honest list of the six places it stops being enough.

## Sectors

- [/manufacturing/](https://noonelite.com/manufacturing/): For UK factories of 20 to 200 staff with a paper book on the front desk: visitors and contractors sign in and out on an iPad, accept the site rules on screen, are on a fire roll call read from a phone, and each sign in posts to the site’s Teams or Slack channel. Links what the fire marshal, an HSE inspector, an ISO 45001 auditor and UK GDPR ask. Says plainly that a delivery drop-off is not a sign in and is not on the roll call.
- [/food-manufacturing/](https://noonelite.com/food-manufacturing/): For food and food packaging manufacturers: the visitor and contractor health declaration accepted on the iPad at sign in rather than on paper, timestamped, kept twelve months and ready for a BRCGS, SALSA or customer audit.
- [/pet-food-manufacturing/](https://noonelite.com/pet-food-manufacturing/): Pet food manufacturer visitor hygiene: what the FEDIAF Guide to Good Practice for the Manufacture of Safe Pet Foods (February 2018) says about visitors and contractors, section 2.8.2.1 on hygiene standards documented and adopted by contractors and visitors and on people known or suspected to have a disease who should not be allowed to enter, 2.8.2.2 on protective clothing, 2.1.2 on access to the site and 2.4.1 on supervising contractors, quoted from the guide as read on 29 September 2026, with UK Pet Food’s raw pet food guidelines (revision 02.02.22) sections 5.1.2 and 5.1.3 and GOV.UK on APHA approval. Says plainly that it is an industry guide and not a regulation or a certification standard, that it names no visitor questionnaire or visitor book, that the kiosk asks no questions and keeps nothing about anybody’s health, that there is one declaration per site for every kind of visitor, that who goes in is the site’s decision, and that no pet food maker runs the kiosk.
- [/packaging-manufacturing/](https://noonelite.com/packaging-manufacturing/): For carton, film, label, tin and closure makers audited by food customers and to BRCGS Packaging Materials: the health declaration and hygiene rules accepted on the iPad at sign in, recorded with the exact wording and the time, and printed badges with staff PIN approval as a module. JK Powell, a Derbyshire metal packaging site, as the named customer.
- [/precision-engineering/](https://noonelite.com/precision-engineering/): For owner-managed machining, fabrication and extrusion businesses: contractors and visitors sign in on one screen, accept the site rules, are on a fire roll call read from a phone, and the Teams or Slack channel is told when nobody is at the front desk. Permit to work is mentioned once, as an early access module.
- [/automation-integrators/](https://noonelite.com/automation-integrators/): For automation integrators and machine builders: customers’ engineers in for an acceptance test accept the non-disclosure wording and workshop rules on the iPad before sign in, contractors on a build are recorded the same way, and everyone signed in is on a fire roll call read from a phone. Says plainly that an acceptance is not a signature and does not make an NDA binding, that the roll call does not list staff, and that the kiosk records people, not machines.
- [/automotive-suppliers/](https://noonelite.com/automotive-suppliers/): For UK Tier 1 and Tier 2 automotive suppliers: visitors registered on an iPad, the NDA and site rules accepted as one text before entry with no signature, and the registration record a TISAX assessment or an OEM audit asks for. Says plainly that nothing gets a site a TISAX label but an assessment.
- [/aerospace-defence/](https://noonelite.com/aerospace-defence/): For UK aerospace and defence suppliers under US or MOD flow-downs (CMMC and NIST SP 800-171, List X, ITAR): visitors held at reception until a named member of staff approves them by PIN, a printed badge with name, host and clearance level, and a timestamped physical access log. Says plainly that the kiosk records no nationality, checks no clearance, and holds data in Ireland, which a cleared site must put to its FSC.
- [/pharmaceutical-life-sciences/](https://noonelite.com/pharmaceutical-life-sciences/): For licensed pharmaceutical manufacturers, CMOs and laboratories: hygiene, protective clothing and confidentiality wording accepted on the iPad before entry, recorded against the name and the time, with EU GMP Chapter 2 paragraph 2.13 described. Says plainly that the kiosk gives the information at the door rather than in advance, supervises nobody, and asks no health questions.
- [/logistics-warehousing/](https://noonelite.com/logistics-warehousing/): For 3PL, chilled and ambient warehouses: drivers and visitors sign in with their vehicle registration, couriers who only drop off are logged as deliveries and are not on the roll call, sign ins made while the Wi-Fi is down are queued with the real arrival time, and the roll call is on a phone. Links BRCGS Storage and Distribution, TAPA FSR and AEO, and says the kiosk has no field for the reason for a visit and checks no photo ID.
- [/care-homes/](https://noonelite.com/care-homes/): For care homes in England: the home’s own infection and visiting wording (hand hygiene, the visiting policy, an outbreak line) shown on the iPad and accepted before sign in, with a record of which wording each visitor accepted and when, quoting the DHSC infection code of practice criterion 4, CQC regulation 9A and the government fire guide for residential care. Says plainly that every visitor is asked for a company name, that the roll call lists visitors and contractors signed in at the kiosk and not residents or staff, that the kiosk asks no questions and keeps no health information, and that it never decides who may visit.

## Pilots and one concept: not built, and not in production

- [/visitor-pre-registration/](https://noonelite.com/visitor-pre-registration/): A pilot, not in production and not built: visitor pre-registration, where a host books a visitor ahead and the site information and NDA wording reach the visitor before the visit. Today visitors sign in on arrival and accept the site’s wording on screen; there is no pre-registration and no pre-visit email. Asks how many expected visitors a week, who books them and what must be sent ahead.
- [/contractor-induction-video/](https://noonelite.com/contractor-induction-video/): A pilot, not in production and not built: a contractor induction video played before sign in or sent ahead, with a record of who watched it and when. Today contractors accept the site rules on screen and the accepted text is stored; there is no video step. Asks the video’s length, how often it is repeated and where it should be watched.
- [/contractor-insurance-rams-expiry/](https://noonelite.com/contractor-insurance-rams-expiry/): A pilot, not in production and not built: contractor insurance certificates and RAMS kept against the company with their expiry dates and asked for again only when due. Today the Permit to Work module, in early access and not yet run at a customer site, collects insurance, RAMS and COSHH assessments per permit and a manager checks them; nothing remembers a contractor between visits and nothing tracks an expiry date.
- [/visitor-health-questionnaire-digital/](https://noonelite.com/visitor-health-questionnaire-digital/): A pilot, not in production and not built: a visitor health questionnaire for food and packaging sites with the site’s own yes and no questions on screen and the answers stored with the visit. Today the kiosk shows one health declaration and records that it was accepted, with the exact text: no questions and no answers are recorded. Says health answers are sensitive personal data and makes no claim about how they would be stored.
- [/staff-sign-in-fire-roll-call/](https://noonelite.com/staff-sign-in-fire-roll-call/): A pilot, not in production and not built: staff signing in and out at the same kiosk as visitors so that staff and visitors are on one fire roll call. Today the roll call lists visitors and contractors signed in at the site, and staff are not on it. Asks the number of staff, the shifts and how staff are counted in a drill.
- [/visitor-parking-registration/](https://noonelite.com/visitor-parking-registration/): A pilot, not in production and not built: a visitor’s vehicle registration passed to the site’s parking operator so the visitor is exempted for the visit, for sites with camera-enforced parking. Today the kiosk takes an optional registration at sign in and sends it to no parking operator. Names no operator.
- [/contractor-still-on-site-alert/](https://noonelite.com/contractor-still-on-site-alert/): A pilot, not in production and not built: a message to the site’s Teams or Slack channel at a time the site chooses, listing who is still signed in, for the keyholder locking up. Today the roll call shows who is signed in if somebody looks, nothing sends a message at a set time, and anyone still signed in at 23:59 UTC is signed out automatically. Says plainly it is not a lone worker safety system.
- [/key-sign-out-register/](https://noonelite.com/key-sign-out-register/): A pilot, not in production and not built: a sign-out register on the kiosk for keys, radios, access fobs and visitor PPE, each signed out to a named person and signed back in, with the items still out listed on the dashboard. Today nothing in the kiosk records an item against a person. Says plainly it is a register, not a key cabinet: nothing is physically locked.
- [/near-miss-reporting-button/](https://noonelite.com/near-miss-reporting-button/): A concept, not a product: a physical button or small device on the shop floor for logging a near miss in seconds, with the report reaching the health and safety manager. Nothing is built, no hardware exists, there is no price and no date, and it is separate from the visitor kiosk. The page asks sites whether they would use it, and quotes HSE’s HSG245 (2004) on what a near miss is and why investigating one is worth it, read 2 October 2026.
- [/visitor-sign-in-app-ipad/](https://noonelite.com/visitor-sign-in-app-ipad/): A pilot, not built and not on sale: the visitor sign in software as a self serve app on an iPad the site already owns, set up by the site from a checklist, for one site and one iPad, with email support and a monthly plan. No price is published. Today the app runs only on iPads Noon Elite supplies, installs and manages. Badge printing and Permit to Work will not be part of it. The page asks sites to email if they would use it, including what they would expect to pay.

## For sites in the United States, Ireland and the EU: first sites, none live yet

- [/visitor-management-software-us/](https://noonelite.com/visitor-management-software-us/): For sites in the United States: the visitor and contractor sign in software on its own, on an iPad the site already owns, set up remotely. No site in the United States runs it yet and the page says so: it is taking the first US sites, at $199 a month for each site and $499 once for remote setup, agreed in writing first. Says what is true today and what will change for US sites: times are in UK time, everyone still signed in is signed out at 23:59 UTC, the app is installed by us on iPads we supply, English only, and the data is kept in Ireland with no US region. Permit to Work and badge printing are not part of it. In the UK the kiosk is sold installed. Links the page for EU sites.
- [/visitor-management-software-eu/](https://noonelite.com/visitor-management-software-eu/): For sites in Ireland and the rest of the EU: the visitor and contractor sign in software on its own, on an iPad the site already owns, set up remotely. No site in the EU runs it yet and the page says so: it is taking the first EU sites, at €179 a month for each site and €449 once for remote setup, agreed in writing first. The record is already kept in the EU, in Ireland. Says what else is true today and what will change: the data processing agreement is written under UK law today, times are UK time (which is also Irish time), everyone still signed in is signed out at 23:59 UTC, the app is installed by us on iPads we supply, and the screens are English only. Permit to Work and badge printing are not part of it. Makes no statement of what the EU GDPR requires.

## Company

- [/about/](https://noonelite.com/about/): Who runs Noon Elite, and why it sells one thing to one kind of business.
- [/case-studies/](https://noonelite.com/case-studies/): UK manufacturing sites running the kiosk, and what changed at reception.
- [/case-studies/jkp-metal-packaging/](https://noonelite.com/case-studies/jkp-metal-packaging/): JK Powell, a Derbyshire metal packaging site: paper book to kiosk in under an hour, and a fire roll call readable from any phone.
- [/visitor-management-east-midlands/](https://noonelite.com/visitor-management-east-midlands/): Installed in person around Derby, Nottingham, Chesterfield and Leicester. One regional page, not one per town.
- [/multi-site-visitor-management/](https://noonelite.com/multi-site-visitor-management/): For manufacturers with more than one site: a kiosk at each site under its own name, grouped as one company, with an area manager role that sees visitors signed in across all of them. Priced per site, not per user, and honest about how many sites one engineer can serve.
- [/unmanned-reception-sign-in/](https://noonelite.com/unmanned-reception-sign-in/): For sites with nobody on reception: visitors sign in and drivers log deliveries on the iPad, the person they are here for is told by name in Microsoft Teams or Slack, and everyone signed in is on the fire roll call. Says plainly that a delivery drop-off is not a sign in, that it does not open doors and that it is not an intercom.
- [/contact/](https://noonelite.com/contact/): Phone, email and a booking link. No form.

## Articles

- [/blog/](https://noonelite.com/blog/): Articles on visitor and contractor sign in for UK manufacturers.
- [/humanoid-robot-safety-standard-uk-sites/](https://noonelite.com/humanoid-robot-safety-standard-uk-sites/): ISO is drafting a safety standard for robots that balance on legs or wheels. What iso.org and BSI show on 1 October 2026, and what a UK site can do now.
- [/cmmc-visitor-log-requirements/](https://noonelite.com/cmmc-visitor-log-requirements/): Your US customer has asked about CMMC. Here's what the physical protection controls mean for your paper sign-in book, and what an assessor expects to see.
- [/permit-to-work-small-business/](https://noonelite.com/permit-to-work-small-business/): What a permit to work is, when your site needs one, and why permit to work for small businesses so often fails. A plain-English guide for site managers.
- [/fix-headless-linux-server-crash/](https://noonelite.com/fix-headless-linux-server-crash/): Does your headless Linux server crash when you unplug the monitor? Learn the 1-line GRUB software fix to bypass Intel GPU panics without buying a dummy plug.

## Contact

- Email: ben@noonelite.com
- Phone: 0115 727 0698
- Company number 17223153, VAT GB 521 834 896, ICO 00014127862