Visitor Management

Moraph resells, implements and runs Envoy visitor management for hospitals, clinics and other care sites. We configure sign-in flows for patients' visitors, vendors, contractors and other guests, with the screening questions, watchlist checks, document signing and badges your security and infection prevention teams approve, then operate the service across your entrances: changes, kiosks and printers, monitoring and support. Your organization decides who may enter and on what terms, and every change to those rules is recorded with its approver.

The problem it solves

Hospital entrances see a constant flow of visitors, vendor representatives, contractors and couriers, often across many doors and sites. Paper logs and handwritten stickers do not show who is in the building, screening questions change with every outbreak and are applied unevenly, and security officers rely on memory for people who should not be let in. When an incident or audit happens, finding who was on a unit at a given time means searching through clipboards.

Who it’s for

• Directors of security and public safety at hospitals and health systems
• Front desk, information desk and security officers at entrances
• Infection prevention teams who set health screening rules
• Facilities, supply chain and vendor management teams who host contractors and vendor representatives
• Privacy and compliance officers responsible for patient and visitor information

1. InviteStaff pre-register expected guests such as vendors, contractors and interview candidates, so they arrive with their details and documents already handled.
2. Sign in and screenAt the entrance, visitors sign in on a kiosk or with a desk officer, answer the screening questions for their visitor type, and are checked against your watchlist.
3. On siteWhile visitors are in the building, security and front desk staff can see who is signed in, where they were going and when they arrived.
4. Review and adaptVisit records answer questions after an incident, and screening rules are changed through approved requests when conditions change.

Kiosk and desk sign-in

Envoy provides sign-in on a tablet kiosk or by front desk staff, with flows that differ by visitor type.

Visitor types

Separate flows for patients' visitors, vendor representatives, contractors, interview candidates, couriers and others, each with its own questions and documents.

Health screening questions

Questions set by your infection prevention team for each visitor type, changed through approved requests when conditions change.

Watchlist checks

Envoy checks visitors against the watchlist your security team keeps, and alerts security privately on a possible match.

Badges

Printed visitor badges showing name, photo where captured, destination and date, so staff can see who should be where.

Pre-registration

Hosts invite expected guests in advance, so arrival is quicker and security sees who is expected.

Document signing

Envoy has visitors sign the documents you require, such as confidentiality or safety acknowledgments, before entry.

Host notifications

Hosts are told when their guest arrives, by email, text or messaging tool.

Multi-site configuration

One baseline across sites and entrances, with local differences recorded and approved.

Visit log

A searchable record of who visited, when, where they went and what they answered, kept for the period your policy sets.

Kiosk and printer support

Moraph supports kiosk tablets, badge printers and ID scanners, and coordinates replacement when hardware fails.

Controlled changes

Every change to sign-in flows, questions, watchlist rules and retention has a request, an approver and a record.

Security director

Owns entrance policy, approves the baseline and watchlist rules, and leads incident lookups

Front desk or security officer

Signs visitors in, handles screening outcomes and watchlist alerts, and prints badges

Host

Invites expected guests and meets them on arrival

Infection prevention lead

Sets health screening questions and approves changes to them

Moraph visitor platform engineer

Configures flows, devices and integrations under approved changes and resolves second-line issues

Moraph service manager

Runs the monthly service review and reports on visits, changes and support

Single sign-on

Staff and administrators sign in through your identity provider.

Employee directory

Staff are synced from your directory so visitors can find their host and hosts can invite guests.

Calendar

Hosts can invite guests from their calendar where your calendar system is connected.

Access control

Where Envoy supports your access control system, approved visitors can be given temporary access to specific doors.

Vendor credentialing

Where an integration is available, vendor representatives' credentialing status from your vendor credentialing system is checked at sign-in.

Messaging and email

Arrival notifications and security alerts go to hosts and officers by email, text or your messaging tool.

Your service desk

Tickets pass between your IT service management tool and Moraph's.

Data you choose to collect

Each sign-in flow collects only what your privacy officer approves; by default the patient being visited is not recorded.

Business associate agreement

Where visit records include patient information, Moraph signs a business associate agreement and patient details are only recorded where Envoy's terms allow it.

Role-based access

Desk officers see their entrance, hosts see their guests, and the full visit log is limited to the roles you choose.

Complete audit trail

Envoy records sign-ins and administrator actions, and Moraph's change record links each change to its request and approval.

Encryption and keys

Service records Moraph holds are encrypted, with keys Moraph staff cannot use without explicit, time-bound authorization.

Audited company-wide

Moraph is audited to SOC 2 Type II and ISO/IEC 27001 across the company, including the teams that run this service. Envoy's own attestations cover the platform.

Licences through Moraph

Moraph resells the Envoy subscription and runs it as one service, subject to Envoy's terms.

Your existing Envoy account

If you already license Envoy, Moraph reviews the current setup against a new baseline and takes over its operation.

Co-managed

Your team keeps some tasks, such as watchlist entry or first-line device support, and Moraph runs the rest; the split is written into the responsibilities for the service.

Discovery

We review your sites, entrances, visitor types, current sign-in process, visitor policy and any visitor restrictions with your security, infection prevention and privacy leads.

Baseline design

We propose sign-in flows, screening questions, documents, badges, watchlist handling and retention, and agree the baseline with your approvers.

Entrance setup

Kiosks, badge printers and ID scanners are installed or configured at each entrance with your facilities and IT teams.

Integrations

Directory, single sign-on, notifications and any access control or vendor credentialing integrations are connected and tested.

Pilot entrance

One entrance goes live first with extra support, and flows and procedures are adjusted with your desk staff.

Rollout and handover

Remaining entrances go live in an agreed order, staff are trained, and the change process, escalation contacts and reporting move into day-to-day operation.

• Moraph is not Envoy. Envoy operates the platform, and Envoy's own service commitments, roadmap, maintenance and outages apply.
• Envoy licences are subject to Envoy's terms. Kiosk tablets, printers, scanners and some integrations are priced separately.
• Moraph does not staff entrances or provide security officers. Your staff sign visitors in and respond to alerts.
• Watchlist checks only find people on your watchlist. The service does not perform criminal background checks.
• Health screening relies on the answers visitors give. It is not a clinical assessment, and your infection prevention team decides the questions.
• Access control and vendor credentialing integrations depend on what Envoy supports with your systems.
• Visitors who bypass a staffed or kiosk entrance are not recorded. Physical entrance control is your organization's responsibility.
• Moraph does not make privacy or breach notification decisions; your privacy officer does.

• List your entrances and visitor types and check each has a proposed sign-in flow
• Walk a vendor representative and a patient's visitor through sign-in at a pilot kiosk
• Review what each flow collects with your privacy officer
• Rehearse a watchlist match with your desk officers and security supervisor
• Run a visit history search for a fictional incident and check the export
• Confirm the split of responsibilities between your security team, Moraph and Envoy