Visitor Desk logo Visitor Desk
← Back to home
⚠️ Risk Awareness · Standalone (offline-only) Mode

You can run Visitor Desk offline-only.
Here's what you should know first.

The Android app works without a business code — entries, exits, QR, history, all on-device. That's powerful, but it puts all the responsibility on a single phone. This page walks you through every risk and exactly how to reduce it.

⚡ The short version

In standalone mode, the device is your visitor register. Lose the device, lose the data. No one but the device holder can see what was logged. There's no central audit trail, no live oversight, and QR visitor cards don't work.

You can dramatically reduce these risks with two free things: enable Google Drive backup (in Settings), and request a business code when you're ready to centralise.

Risks of staying offline-only

What can actually go wrong

Each risk below is something we've thought hard about — with the specific mitigation Visitor Desk already offers. Use the green checklists.

HIGH RISK
📱

Lost, stolen or damaged phone = lost data

Your visitor log lives only on the device. If the phone is lost, broken, factory-reset, or simply misplaced, the data goes with it.

Why it matters: there is no server-side copy in standalone mode. Even our team cannot recover it.
✅ How to reduce it
  • Turn on Google Drive backup in Settings — auto-snapshot to your Drive
  • Back up before big events (e.g. heavy visitor days)
  • Keep the device's OS & the app updated
  • Use a secure phone lock (PIN, biometric)
HIGH RISK
👥

No multi-staff coordination

A visitor logged on one phone is invisible to every other phone or to the manager. Shift handovers become guesswork.

Why it matters: two staff members can't share an active-visitor view, exits get missed, overstays go unnoticed.
✅ How to reduce it
  • Designate a single "primary device" per shift to avoid drift
  • For multi-staff sites, attach to a business for true shared logs
  • Use visitor sharing (WhatsApp / SMS) for handovers, where appropriate
HIGH RISK
🔍

No central oversight or audit trail

Owners and managers can't see live activity, can't audit who logged what, and can't pull reports across sites.

Why it matters: compliance, incident investigation, and accountability all rely on a central log.
✅ How to reduce it
  • Export and save reports periodically (PDF / Excel)
  • For real oversight, upgrade to the web admin (Starter plan and up)
  • Define an internal handover review at end of every shift
MEDIUM RISK
🪪

QR visitor cards are disabled

Card scanning, validity windows, entry limits, and revocation only work when the device is attached to an approved business.

Why it matters: regulars (tenants, contractors, employees) have to be logged manually every time.
✅ How to reduce it
  • For sites with frequent repeat visitors, attaching to a business is the only way
  • Until then, use destinations and quick-search to speed up manual entry
  • Pre-create destinations to remove typing during peak hours
MEDIUM RISK
🔄

No cross-device data movement

Switching to a new phone is a manual restore from your Drive backup. There's no instant device handover.

Why it matters: upgrading devices, swapping staff, or reassigning the role of "front-desk phone" requires planning.
✅ How to reduce it
  • Always restore from the most recent Drive backup on the new device
  • Sign in to Drive with the same Google account as the previous phone
  • For frequent device changes, switch to attached mode for instant cross-device sync
MEDIUM RISK
📂

Backup discipline depends on you

Drive backup is opt-in. If you turn it off, forget, or run out of Drive space, you have no safety net.

Why it matters: "we'll back up next week" becomes "we forgot for three months" much faster than people expect.
✅ How to reduce it
  • Enable Drive backup the day you install the app — don't postpone
  • Keep at least ~50 MB free on your Google account
  • Verify a restore at least once so you know it works
MEDIUM RISK
🚨

No remote revocation if the device is compromised

If the phone is stolen, anyone with the unlock can read the visitor log. There's no remote wipe of the app's data from the web.

Why it matters: a leaked register can expose visitor phone numbers, photos, and ID details.
✅ How to reduce it
  • Use a strong device lock (PIN, biometric, auto-lock)
  • Use Google's "Find My Device" to remote-wipe the phone itself
  • For sensitive sites, run attached mode where membership can be revoked centrally
LOW RISK
📈

Reporting & exports are device-local

PDF / Excel exports only contain what's on that one device. Cross-site reports aren't possible.

Why it matters: if you need a portfolio-wide view (e.g. "all sites this month"), you can't produce it.
✅ How to reduce it
  • Schedule a monthly export from each device
  • For multi-site reporting, use the web admin with attached mode
LOW RISK
📜

Compliance & legal trail

Some industries (clinics, factories, regulated sites) require provable, tamper-evident records of who entered and when.

Why it matters: a local SQLite file is hard to defend in an audit — anyone with the device could alter it.
✅ How to reduce it
  • For regulated sites, attach to a business — server-side logs are append-only by design
  • Limit who has physical access to the front-desk device
  • Keep periodic Drive backups as additional evidence of timeline
5-minute playbook

Reduce 80% of the risk in 5 minutes

If you choose to stay offline-only, do these five things today. They take five minutes total and they protect your data.

1

Turn on Drive backup

Settings → Google Drive backup → enable. Sign in with the account you use for that phone.

2

Run a test restore

Once a quarter, install on a spare device and restore. If it doesn't work, find out before you need it.

3

Lock the device

PIN or biometric lock plus auto-lock under 1 minute. Don't share the unlock with strangers.

4

Pre-create destinations

Add your flats, departments, or gates upfront. Faster entry means less missed logging at peak hours.

5

Export monthly

Export to PDF/Excel at the end of every month. Keep a copy somewhere outside the device.

6

Plan your upgrade trigger

Decide upfront: "When we hit X visitors / staff, we'll attach to a business." Don't wait for an incident.

Side-by-side

Offline-only vs. attached to a business

Both are valid. Pick what fits your scale, your team, and your appetite for risk.

Concern Offline-only Attached business
Data survives phone lossOnly if you back upAlways — server-side
Multiple staff see same logNoYes
Live oversight from the webNoYes
QR visitor cards (entry/exit)DisabledEnabled
Switch devices instantlyManual restoreSign in, ready
Remote revoke of staff accessNoOne click
Cross-site / multi-business reportingNoYes
CostFreeFrom ৳600/mo (30-day trial)
Should you upgrade?

A 30-second decision guide

Answer these honestly. If two or more are "yes", you'll get more out of attaching to a business than staying offline.

Do more than one person log visitors?

If yes, offline-only means each phone sees a different log.

Attach

Do you have regular visitors (tenants, employees, contractors)?

Offline can't issue QR cards. Manual entry every time gets old fast.

Attach

Does an owner or manager need oversight from a different location?

Standalone has no web view. Attached gives a live dashboard from anywhere.

Attach

Is your industry regulated (clinic, factory, government, finance)?

A defensible audit trail usually requires server-side append-only logs.

Attach

Is this a personal / very small setup with one device and one operator?

Then offline-only with Drive backup is perfectly fine. Stay free.

Offline

Ready to remove the risk?

Try the full attached experience free for 30 days — web admin, cloud sync, QR visitor cards, the lot. No credit card required.

Start 30-Day Free Trial