The After-Hours Business Entry and Alarm SOP

Purpose

When a tech opens a closed business at night, three parties are watching the door: the owner, the alarm monitoring company, and, if anything goes wrong in the first minute, the police. This procedure makes every after-hours entry one the business authorized in writing, one the monitoring company expects or can cancel with a valid code, and one the shop can reconstruct to the minute the next morning. Without it, the predictable failures are a police dispatch to a tech with a toolbag, a false-alarm charge the business passes back to the shop, and a manager who arrives to find the alarm left off and no one able to say who was inside.

Scope

Covers getting into a closed business, disarming its intrusion alarm, logging the time in the building, and rearming on the way out. Applies to any trade, any after-hours or weekend call, and any visit where the tech is the only person on site.

Does not cover how codes and keys are issued, stored and retired at the shop (see related: Keys, Alarm Codes and Access Cards at a Business), or the full end-of-visit restore, door walk and note, which is its own procedure (see related: The Business Lockup and Handback SOP). Does not cover fire alarm panels: a tech never silences, resets or disables a fire alarm system, and a fire panel in trouble or alarm goes to the business and its fire alarm contractor.

Roles and responsibilities

The handoff that matters is the first one. The tech does not leave for a site whose card is incomplete, because every gap on the card becomes a phone call made in the dark with an entry delay counting down.

The keyholder and alarm card

The office builds this card from the business's own answers, in writing, before the tech is dispatched. It lives on the job, not in a text thread.

KEYHOLDER AND ALARM CARD
Business     ______________  Job ______
Address      ______________
Entry auth   by ________ (role) at ____ via ____
Keyholder 1  ________  phone ______
Keyholder 2  ________  phone ______
User code    issued to: tech name ______
             code held by: tech only, not texted
             expires: ______
Monitoring   company ______  acct ______
             call-in before entry? Y / N
             verbal passcode held by: ______
Panel        location ______  entry delay __ sec
Entry door   ______  key/lockbox ______
Arm on exit  tech / leave for ______
Leave on     ______________
Do not touch ______________

Procedure

1. Confirm the entry is authorized in writing before leaving the shop. The office gets a text or email from someone the business has named as able to let contractors in after hours, stating the date, the time window and the tech's name. Acceptance: the message is attached to the job and the authorizer's role is on the card. Wrong looks like "the manager said it's fine" relayed by the tech, or authorization from a day-shift employee who does not hold a code; the stop rule is no dispatch until the authorizer is someone the business lists as a keyholder (see related: Who Can Actually Authorize Work in a Business). Hazard: an unauthorized entry is the one way a tech ends up face to face with police at a door, so this step is the tech's personal protection, not paperwork.

2. Confirm the user code is the tech's own, current, and held only by the tech. The keyholder issues a code to the named tech, or confirms one already issued, and gives it by phone call to the tech or through the office's secure code record, never in a group text. Acceptance: the card shows the tech's name against the code and an expiry date. Wrong looks like a "shared code everyone uses" or a code written on the work order; the stop rule is ask for an individual user code, and if the business will only give a shared one, the office records who gave it and when it was last confirmed working. A removed or changed code is the most common cause of an alarm dispatch on a contractor.

3. Do the call-in to the monitoring company if the card says to. Some businesses tell their monitoring company in advance that a contractor will be on site; others want the tech to call on arrival. Before entry, the tech calls the monitoring number on the card, gives the account number and, if the company asks, the verbal passcode the business gave for this purpose. Acceptance: the operator confirms the account and notes the visit, and the tech writes the operator's name or ID and the time on the job. Wrong looks like an operator who does not recognize the passcode; the stop rule is do not enter, call keyholder 1. Hazard: a tech who enters after a failed call-in has told the monitoring company in advance that an unknown person is about to open the door.

4. Locate the panel and read the entry delay before opening the door. From the card, the tech knows which door to use, where the keypad is, and how many seconds the entry delay gives. Entry delays are set per business and are commonly between 30 and 60 seconds; panels built to ANSI/SIA CP-01, the false alarm reduction standard written for panel manufacturers, ship with delays and a short abort window meant to give a legitimate user time, but the installer can change them, so the card's figure governs. Acceptance: the tech can say the keypad location and the delay out loud before unlocking. Wrong looks like a keypad that is not where the card says; the stop rule is lock the door again and call keyholder 1 rather than search the building with the delay running. Hazard: approach the door with a flashlight and the truck lit, never in the dark with tools in hand, so a passing patrol or neighbor sees a contractor.

5. Enter, go straight to the keypad, disarm, and confirm the display. Open the door, close it behind you, walk directly to the keypad, enter the user code and read the display. Acceptance: the panel shows disarmed or ready, with no alarm memory. Wrong looks like a code that is refused, or a siren; the stop rule is enter the code once more, carefully, and if it is refused again or the siren is sounding, step outside, call the monitoring company yourself with the account number, identify yourself, and then call keyholder 1. Never try codes from memory or old cards, and never pull the panel's power or battery to silence it. Hazard: an alarm in progress means the monitoring company may already have called police, so stay outside in view, with hands empty, until it is resolved.

6. Log the entry. The tech writes the entry time, the panel display and the door used on the job, and texts keyholder 1 a short "in at 21:14, panel disarmed" message. Acceptance: the entry line is on the job within 5 minutes of disarming. Wrong looks like an entry logged at the end of the visit from memory; redo it at the time. Risk: the log is what answers the manager who sees an 01:00 disarm on the panel history the next week.

7. Keep the perimeter closed while working. The tech uses the one entry door, keeps it closed and locked behind them, does not prop doors for convenience, and does not open any door the card lists under do not touch. Acceptance: the same door locked during the work, confirmed when stepping out to the truck. Wrong looks like a rear delivery door propped for a ladder; the stop rule is close it, and if the work truly needs it open, tell keyholder 1. Hazard: an open door in an empty business at night invites someone in behind a tech who is up a ladder with their back turned.

8. Rearm on exit as the card instructs and confirm it took. After the full lockup (see related: The Business Lockup and Handback SOP), the tech arms the panel, leaves within the exit delay, and confirms the arm either from the keypad display before closing the door or by calling the monitoring company. Acceptance: armed display or the operator's confirmation, with the time. Wrong looks like a panel that will not arm because a zone reads open; the stop rule is never bypass a zone on your own judgment, call keyholder 1 and do what they decide, and never leave the panel silently disarmed. Hazard: leaving a business unarmed and unreported shifts every overnight loss onto the shop.

9. Lock, log the exit, and report. The tech locks and pulls the entry door, returns any key or lockbox key per the card, writes the exit time and arm status on the job, and sends keyholder 1 the same line. Acceptance: exit line on the job and a sent message before the truck leaves. Wrong looks like an exit logged as "done"; redo it with the time and status.

10. On any deviation, stop at the step and escalate. If no keyholder answers within 10 minutes, the tech calls the shop on-call manager, who decides whether the tech waits, leaves, or proceeds on a decision recorded by name. Acceptance: the decision and the person who made it are on the job with the time. Wrong looks like a tech improvising past a refused code because the call was a cooler down; the stop rule is the on-call manager decides, not the urgency.

The record this produces

The job carries the authorization message, the completed card, the call-in operator and time, the entry and exit lines with panel status, any refused code or alarm with each call made, and any step 10 decision with its owner. The office reads it when the business calls about the visit; the shop owner reads any alarm event; the business can match the shop's log against its own panel history, which records every user code by time.

A worked pass

A refrigeration tech is sent at 21:00 to a closed bakery whose walk-in cooler reads 46 F. The card shows keyholder 1 as the store manager, keyholder 2 as the owner, a monitoring call-in required, a 45-second entry delay, the keypad inside the rear door, and arm on exit by tech.

ENTRY AND ALARM LOG  Bakery  Job 5182
20:31 auth text from store mgr (keyholder)  ok
20:33 code confirmed by phone, tech's own   ok
21:06 call-in to monitoring, acct read
      passcode NOT ACCEPTED by operator     STOP
21:07 did not enter. call keyholder 1
      voicemail
21:11 call keyholder 2 (owner) answered
      owner: passcode changed last month
      owner calls monitoring, adds tech
21:18 call-in again, operator confirms     ok
      operator ID 22, visit noted
21:20 rear door, keypad located, 45 sec
21:20 code entered, display READY           ok
21:22 text to mgr+owner: in 21:20, disarmed
23:40 lockup done, panel armed, display
      ARMED AWAY 23:41                      ok
23:42 door locked and pulled, key to box
23:43 text to mgr+owner: out, armed

Step 3's stop rule triggered. The operator did not recognize the verbal passcode on the card, so the tech stayed outside, which is what the stop rule requires: entering at that point would have meant opening a door the monitoring company had just been told was being approached by someone it could not verify. Keyholder 1 went to voicemail and the tech moved to keyholder 2 at 4 minutes, well inside the 10-minute line. The owner had changed the passcode a month earlier and never told the shop. The fix after the visit went to the office, not the tech: the card was updated, and the office now reconfirms the passcode with keyholder 1 whenever a card is more than 90 days old.

References

• ANSI/SIA CP-01, the false alarm reduction standard written for control panel manufacturers, for how entry delay, exit delay and abort windows are designed to work
• The alarm system's user guide for the panel on site, for arming, zone status and alarm memory
• See related: Keys, Alarm Codes and Access Cards at a Business
• See related: The Business Lockup and Handback SOP
• See related: Who Can Actually Authorize Work in a Business