24/7 Gym Access Control: Doors, Fobs, and Software That Syncs Billing

24/7 gym access control comes down to the Three-Ledger Rule: your billing system, your access controller, and the physical door must agree at all times, and billing wins every disagreement. Get that right and unstaffed hours mostly run themselves. Get it wrong and you are deleting fobs by hand at midnight.

What does 24/7 gym access control actually need to do?

24/7 access is three systems agreeing: the billing record, the access controller, and the door itself. Billing is the source of truth.

Most operators buy this backwards. They shop for hardware first, then discover the controller keeps its own member list that nobody updates. Across Zatrovo studios, 2026, the most common month-one support ticket from operators running unstaffed hours is not a broken door. It is a fob that still works for someone whose membership ended three weeks earlier.

The demand is real. The Health and Fitness Association reported record fitness membership in 2025 in its 2026 US Health & Fitness Consumer Report: about 81 million Americans belonging to a gym, studio, or other fitness facility, roughly a quarter of the US population ages 6 and older. Extended hours reach the shift workers and parents inside that number. They only reach them profitably if the ledgers stay in sync.

Which door hardware passes inspection for unstaffed hours?

Unstaffed hours put your egress path under scrutiny. Delayed egress hardware is legal, common, and prescriptive about timing, force, signage, and fail-safe behavior.

The code numbers are not negotiable. Under NFPA 101 and the International Building Code, the lock must release within 15 seconds, or 30 seconds only where your authority having jurisdiction approves it. Force to trigger the sequence cannot exceed 15 pounds, and cannot be required for more than 3 seconds. A local audible alarm has to sound. Signage must read PUSH UNTIL ALARM SOUNDS with the delay stated. The lock releases immediately on power failure or fire alarm activation.

Accessibility bites in parallel. The US Access Board sets a 5 lbf maximum opening force for interior hinged doors, 32 inches minimum clear width, hardware mounted 34 to 48 inches above the floor, and operation that does not require tight grasping, pinching, or twisting of the wrist. Round knobs fail. No maximum force is specified for exterior hinged doors, so the closer that passes inside your studio tells you nothing about your street door.

Which credential should you issue: fob, card, phone, or PIN?

Pick the credential you can revoke instantly and reissue cheaply. Everything else, including cost per unit, is a secondary concern for a small studio.

Low-frequency proximity fobs are the default because they are cheap, and they transmit an unencrypted number that a retail key kiosk will duplicate in about the time it takes to buy one. That does not make them unusable. It means you should not treat the fob as your security layer.

Three procedures matter more than the credential type. First, never let members choose their own PIN, because they will reuse the code they gave a friend two years ago. Generate 6-digit PINs, unique per member, rotated whenever the membership tier changes. Second, keep a small bin of spare encrypted cards behind the desk for the mobile-credential members who arrive with a dead phone at 9 p.m. Third, run a quarterly Two-Card Audit: export every active credential from the controller, export every active membership from billing, and reconcile the two lists line by line. Orphaned credentials, not cloned ones, are the more common way a non-member gets in overnight.

Disclosure: Zatrovo publishes this blog and sells studio management software that integrates with access control. The table above reflects our own operator observations across Zatrovo studios, 2026, not independent benchmark testing.

How fast does a revoke need to reach the door?

A revoke that takes an hour to reach the door is not a revoke. Test the actual latency yourself, monthly.

Run the 60-Second Revoke Test. Cancel a test membership in your studio software, walk to the door with that credential, and badge. If it opens, your controller is polling on a schedule rather than receiving a push from your membership system.

This is not a defect, it is a design tradeoff. Cloud controllers cache credentials locally so the door keeps working when your internet drops at 4 a.m., which is exactly what you want. The consequence is that a revoke sits in a queue until the next cache refresh. Ask your vendor for that interval in minutes, write it on the panel in marker, and set your cancellation policy around it. If you are wiring systems together yourself, the studio booking API integration patterns that push events rather than poll for them are what turn an hour of drift into seconds.

What happens to access when a payment fails?

Never cut door access on the first declined charge. Run a staged Grace Window that separates a card problem from a member who has left.

The ladder that works: day zero, automatic retry. Day one, SMS with a one-tap card update link. Day three, second retry. Day seven, access drops to staffed hours only. Day fourteen, full revoke. The counterintuitive part is day seven. Downgrading to staffed hours is a better signal than a hard lockout, because the member discovers it at a time when someone is standing there to fix it. A member locked out of a 5 a.m. session by a first-decline lockout rarely tells you. They tell the next three people who ask about your gym, and seven days of dues is cheaper than that conversation.

Payment rail changes the failure rate you are managing. The ACH versus credit card tradeoff for studios matters more on a 24/7 tier than on a class pack, because card expiry is a leading cause of these declines and ACH mandates do not expire. Annual versus monthly membership structure shifts the exposure again.

What does the door log tell you that your booking report cannot?

Badge events are the only attendance record a 24/7 member generates. If your retention signals run on bookings, those members look churned already.

This is the single largest reporting error in small 24/7 gyms. Your class attendance report shows zero for the overnight crowd, your dashboard flags them as inactive, and your win-back email lands on someone who was in the building four times last week.

Rebuild the signal on badge events. A workable threshold: flag any member with 14 consecutive days of no badge event whose prior 30-day average was 8 or more visits. That is a sharper trigger than anything a booking table produces, and it feeds directly into the at-risk member detection workflow you are probably already running for class members.

The same log rewrites your staffing. Pull badge counts by hour for one full month before you set the schedule. Do not assume the overnight band is empty until the log says so, and check the late-evening hours against the mid-afternoon lull you are currently staffing for.

How do you stop tailgating without policing your members?

Tailgating is mostly politeness, not fraud. Fix it with anti-passback rules and door reports you actually read, not with a laminated sign.

Set timed anti-passback at 60 to 90 minutes: a credential that has entered cannot enter again until that window expires or it registers an exit. Set the door-held-open alarm at 30 seconds, not 10, or you will train everyone to ignore it. Tie the entry camera to badge events so you review by event rather than scrubbing four hours of footage.

The procedure is the part most operators skip. Every Monday, pull the door-forced and held-open report, match each event to the badge log, and make one polite call for anything unmatched. Two weeks of naming it, individually and without accusation, usually changes behavior. A sign on the door does not, because the member holding it open believes they are being courteous to another member.

What is legally required inside the room during unstaffed hours?

Several states regulate unstaffed hours directly. Pennsylvania is the most prescriptive, and its equipment list is a reasonable floor anywhere you operate.

Under the Pennsylvania Health Club Act, 73 P.S. section 2174, a club offering services during nonstaffed hours must have at least one automated external defibrillator, a panic button, a 911 telephone, and at least four personal security devices. Signage with usage instructions must sit in plain view at each one, plus a sign stating that working out alone during nonstaffed hours may pose health and safety risks. New and renewing members must receive orientation covering the location and use of that equipment, and the contract must carry a signed waiver acknowledging it. Confirm the current statutory text with your attorney, and check your own state, before you publish overnight hours.

One placement note that is not in any statute: the AED cannot live behind the front desk. During unstaffed hours the desk is locked, which makes the device decorative. Mount it on the open floor.

What should your after-hours incident runbook say?

Write the runbook before you need it. During an overnight incident you need three facts in thirty seconds and one number to call.

Name it the Dark Hours Runbook and keep it to one page. The three facts: who badged in and is still inside, which doors have opened in the last hour, and whether any door is currently held. If your software cannot answer those three in thirty seconds from a phone, that is the gap to close first.

Route the panic button to a monitored alarm line, not a staff cell phone. A cell phone is on silent at 3 a.m. Test the route on the first Monday of every month, log the test date and the operator's name, and keep twelve months of those logs. Insurers ask for them after an incident, not before.

How do you switch an existing member base to 24/7 without chaos?

Pilot with twenty-five long-tenured members on one door for thirty days. Price the upgrade before you announce the hours, not after.

Order matters. Set the tier and the price first, run the waiver through your attorney, then announce. Moving members up a tier after they already have overnight access is close to impossible. Across Zatrovo studios, 2026, the common shape is a $10 to $20 monthly upgrade, though your market and cost base should set the number.

Sequence the pilot: week one, extend to 5 a.m. and 11 p.m. on the existing door. Week two, run the 60-Second Revoke Test and the first held-open report. Week three, go to true 24 hours for the pilot group only. Week four, review every door-forced event before you open enrollment. Pick your twenty-five from longest tenure, not loudest request. They report problems instead of posting about them.