Transactions vs Compliance: The Three-Layer Architecture | TouchPoint
6 MIN READ • COGENT

Transactions Tell You What Happened.
The PAC Framework Tells You Whether Your Facility Is Actually Compliant.

Physical Access Compliance (PAC) is not a product feature. It is a standard - a structured way of measuring whether every person, material, and activity at your physical boundary is not just managed, but provably controlled.

PAC Visualization

Infrastructure Is Not Compliance

Most facilities confuse record-keeping with compliance. They have a guard at the gate, they have a register, and they might even have a digital VMS. But if an incident happens today, can they prove - within an hour - that the specific person involved was authorised, their documents were valid, and they had completed their safety induction?

"Recording a transaction only proves that a gate was opened. Compliance proves that the gate was opened for the right person, at the right time, with the right credentials."

The Three-Layer Architecture (TLA)

To solve this, we developed the TLA Framework, which divides access control into three distinct layers of maturity:

LAYER 01

The Transaction Layer

This is where most facilities stop. Every entry, every exit, every gate pass is captured. Transactions are recorded. While necessary, this layer is reactive. It only tells you what happened after the fact.

LAYER 02

The Compliance Layer

Here, transactions are measured against rules in real-time. The system checks contractor eligibility, permit-to-work validity, and safety induction status before the gate is allowed to open.

LAYER 03

The AI Intelligence Layer

The highest level of maturity. AI persona agents monitor operations 24/7, detecting patterns, predicting risks, and closing the gap between what the system records and what is actually happening.

Is your facility actually compliant?