Granting Clause
Names the authorizer and the recipient, describes what access is granted (doors, systems, time windows), and any conditional restrictions tied to the credential.
An Electronic Access eKey creates a clear, auditable authorization that links identity, access scope, and time limits. It reduces ambiguity about who may enter or operate systems, supports security and incident response, and integrates with electronic logging to show activity history for compliance and liability purposes.
Organizations create eKey authorizations when granting controlled access for employees, vendors, residents, or contractors.
The document also helps security and facilities teams manage revocations, renewals, and audits without relying on informal approvals.
Usually a property manager, IT administrator, or operations manager who has the delegated authority to approve access. Their signature certifies scope, duration, and any special conditions tied to the eKey.
An employee, contractor, or resident who accepts responsibility for the credential. Signing confirms identity, acceptance of rules, and agreement to security and liability terms.
Names the authorizer and the recipient, describes what access is granted (doors, systems, time windows), and any conditional restrictions tied to the credential.
Specifies start and end dates and times for access. It should include automatic expiration or renewal procedures to avoid open-ended privileges.
Describes required identity proofs (ID check, employee badge, multi-factor setup) and any additional authentication used when provisioning the eKey.
Sets permitted uses, prohibited actions (sharing credentials), and responsibilities for reporting loss, theft, or suspicious activity.
Explains how and when access will be revoked, who may request revocation, and how revocation is recorded in system logs.
Identifies the audit data retained (timestamps, device IDs, access events) and where logs are stored for compliance or incident investigation.
| Field | Configuration |
|---|---|
| Auto-Expire | Enable automatic expiration at end date to revoke credentials. |
| Multi-Factor | Require MFA setup before activation to strengthen authentication. |
| Approval Chain | Set role-based approvals for authorizer and secondary approver. |
| Audit Capture | Record signer email, IP, timestamp, and provisioning event ID. |
Match the eKey form and file format to the access control platform and record systems you use.
| signNow | DocuSign | Adobe Sign | PandaDoc | HelloSign | |
|---|---|---|---|---|---|
| Starting Price | $8/user/mo | $15/user/mo | $14/user/mo | $19/user/mo | $15/user/mo |
| Free Trial | Yes, 7-day free trial | No | No | Yes, limited | Yes, limited |
| Bulk Send | Yes | Yes | Yes | Yes | No |
| Audit Trail | Yes | Yes | Yes | Yes | Yes |
| Envelope Cap | No cap | 100 envelopes/user/year | Varies by plan | Varies by plan | Varies by plan |
A property management firm issues time-bound eKeys to maintenance vendors for scheduled repairs
A healthcare facility restricts access to lab areas with role-based eKeys and HIPAA addenda
Provision eKey and confirm activation within 24–72 hours of signature.
Perform identity verification before provisioning; complete within three business days.
Use automatic expiry for contractors at the end of job or project.
Revoke lost or compromised keys immediately; document revocation event.
Schedule periodic audits quarterly or as required by policy.
Submit requester details and proposed scope for approval.
Confirm ID and eligibility before provisioning begins.
Capture authorizer and recipient signatures and metadata.
Activate the eKey and record provisioning event in logs.