Services Work AI Ecosystem Industries About Get an Estimation →

MangoAccess — memberships that open doors — hardware-enforced, offline-first

MangoAccess links every membership to the doors it unlocks, enforces permissions directly at the hardware via encrypted QR tokens, and keeps doors opening even during network outages.

Industry
Access Control & Facility Operations SaaS
Timeline
2024 — ongoing
Services
IoT Hardware & Turnstile Integration · Offline-First Cryptographic Architecture · Facility Operations & Member SaaS · POS & Commerce Inventory System · Class & Trainer Scheduling Engine
Stack
Laravel 11 Vue.js Cockpit AES-256-CBC Encrypted QR Hardware Microcontroller Relays Offline Caching & Bi-Directional Sync MySQL REST API Multi-Language (EN, SQ, MK, DE)
MangoAccess
01

The challenge

Traditional access control and gym management systems suffer from a brittle coupling: readers depend on an active internet connection to authenticate members against a cloud database. A momentary ISP interruption locks members out, creates chaotic lines at turnstiles, and leaves front-desk staff scrambling. Furthermore, gym operators are forced to juggle separate disconnected software tools for member subscriptions, POS supplement sales, trainer bookings, and hardware logs.

02

The solution

We engineered MangoAccess as an end-to-end, offline-first hardware and facility management platform. Dynamic QR tokens carry signed AES-256-CBC encrypted permissions (valid hours, allowed doors, subscription expiration) that the turnstile reader validates locally on-device in under 0.3 seconds without calling home. The MangoAccess administration cockpit unifies real-time headcount (Mango Pulse), multi-zone door monitoring, member subscriptions, POS supplement sales, and trainer sessions into one intuitive command centre.

Access Control & Operations · Flagship SaaS

Memberships that open doors.

MangoAccess ties every membership to the doors it unlocks and the hours it is valid for, enforces that at the hardware, and writes down every attempt — granted or denied.

MangoAccess Hardware & Software Architecture

Offline AES-256 Tokens, Turnstile Relays & Unified Facility Cockpit

Offline AES-256-CBC Zero Relay Lag (<0.3s) Real-Time Mango Pulse Multi-Zone Facilities
The Decision Chain

What happens in the second after a scan

Every module in MangoAccess exists to serve one chain: a member buys access, and a door lets them in — or doesn't — based on what they bought.

01

Package

You define the plan: price, duration, which doors it unlocks, and the hours it is valid.

02

Subscription

A member buys it in the app or gets it assigned at the desk. Payment is recorded against it.

03

QR Code

Their code carries the subscription, expiry, and the doors and hours it covers — encrypted.

04

Device

The reader at the door checks the code against those rules locally and releases the lock.

05

Access Log

The attempt is written down with the door, the member, and the reason — granted or denied.

Hardware Resilience

When the line drops, the door doesn't.

The QR code isn't a lookup key — it carries the permission itself, signed and encrypted with AES-256-CBC. A reader that has lost its connection can still read the code, apply the rules, and open the door. When the network comes back, it synchronizes everything it decided while offline.

An internet outage is an IT inconvenience, never a queue of members waiting outside your doors.

QR PAYLOAD AES-256-CBC
subscription 4812
expires 2026-10-31
doors [main, spa, female, studio-2]
hours 06:00–23:00
Validated on device — zero network required
Central Operations Command

MangoAccess Facility Administration Cockpit

From instant door status and live Mango Pulse headcount to unpaid subscription follow-up and POS desk checkout — complete oversight of facility operations.

Live Headcount & Hardware Online
Live Headcount Mango Pulse
AES-256-CBC Offline Cryptography
Main, Female & Spa Active Hardware Doors
< 0.3s Verified Unlock Response
MangoAccess Facility Administration Cockpit
Confidential Data Sanitized · Real MangoAccess Production Architecture

Live Mango Pulse & Headcount

Real-time visibility into who is currently inside the building, check-in volume trends, and active facility capacity.

Multi-Zone Facility Hardware Status

Direct monitoring of turnstiles, electromagnetic locks, and device relay health across all entrances and wellness areas.

Subscription Invoicing & POS Reconciliation

Automated tracking of active subscriptions, pending payments, cash/card desk receipts, and daily sales takings.

Tailgating & Anti-Passback Detection

Intelligent audit logging flags unusual repeat entries within brief time windows to prevent unauthorized token sharing.

Member Lifecycle & Access Control

Granular User & Subscription Administration

Unified member directory with instant search, subscription expiration warnings, and one-click role and permission changes.

142 Total Users · All registered accounts
19 Active Users · With current subscriptions
123 Inactive Users · Past or casual members
38 Pending Users · Awaiting plan assignment
Granular User & Subscription Administration
Confidential Personal Data Sanitized · Real User Management System

Expiring Soon & Subscription Filters

Identify members whose access expires within 7 days to trigger automated renewal notifications and front-desk reminders.

Role-Based Access Governance

Separate permissions for clients, personal trainers, front-desk staff, and facility administrators.

One-Click Member Profiles

Inspect comprehensive check-in logs, purchase history, and assigned door permissions for any individual athlete.

The Back Office

Everything behind the door, in one place

The same system that decides who gets in also runs the parts of the business that decide whether they should.

Members

Profiles, subscription history, and who is inside the building right now.

Packages & Billing

Plans, pricing, renewals and payments — cash, card or bank transfer.

Shop & Orders

Sell supplements and gear at the desk or in the app, with stock that keeps count.

Trainer Sessions

Publish sessions, take enrolments, and cap them so classes stay the right size.

Access Logs & Reports

Every entry attempt, and the daily takings behind them, ready to export.

Four Languages

English, Albanian, Macedonian and German — edited by your staff, not developers.

MangoAccess Architecture & Technical Foundation
Access Control SaaS Laravel 11 Backend Vue.js Admin Cockpit AES-256-CBC Encrypted QR Offline-First Validation IoT Hardware Relays Real-Time Mango Pulse Multi-Zone Permissions POS & Inventory Engine Trainer Class Booking Multi-Language (EN, SQ, MK, DE) Audit Logging
The outcome

Results that compound

< 0.3s
Gate Unlock Speed
100% Offline
Zero Downtime Architecture
Real-Time
Mango Pulse Headcount
4 Languages
EN, SQ, MK & DE Built-In
  • Eliminated member lockouts during ISP and cloud outages via on-device AES-256-CBC cryptographic validation
  • Achieved sub-0.3-second door release times across turnstiles and electromagnetic gates with zero perception of lag
  • Consolidated member management, turnstile hardware control, POS supplement sales, and trainer sessions into one cockpit
  • Deployed in high-traffic fitness and wellness facilities handling hundreds of daily check-ins with 97% active member retention
  • Delivered complete multi-lingual support across English, Albanian, Macedonian, and German for staff and athletes

Want results like these?

Tell us about your project — we'll show you how we'd approach it, with honest thoughts and a clear next step.