Dozens of People. Dozens of Sites. One Question: Who Are They?
UK facilities management market
of the UK workforce in FM roles
to verify per person with Certifyd
The reality of facilities management in the UK.
Identity verification for facilities management companies addresses the challenge of deploying large, diverse workforces across multiple client sites. Certifyd’s Organisation management lets FM companies register each worker as a member with a defined role, their identity cryptographically bound to their device. At each site, workers verify through bi-directional authentication — confirming their identity, FM company membership, and site-specific authorisation in real time. Every site visit creates a tamper-proof audit record that satisfies both client contracts and regulatory requirements.
Facilities management is a £140 billion industry in the UK, employing over 10% of the total workforce. FM companies deploy diverse teams — cleaners, security guards, maintenance engineers, grounds staff, and catering workers — across client sites that may include offices, hospitals, schools, data centres, and government buildings. Each site has its own security requirements, and each client expects the FM company to guarantee the identity of every person sent.
The supply chain complexity is significant. FM companies subcontract to specialist providers, who may in turn use agency labour. The person cleaning a bank’s server room at midnight may be employed by an agency, contracted through a cleaning subcontractor, managed by the FM company, and ultimately accountable to the bank. At each link in this chain, identity verification may be assumed rather than confirmed.
Client contracts increasingly require evidence of identity verification for every person accessing their sites. Insurance requirements, security standards (ISO 27001, BREEAM, PCI DSS), and regulatory obligations demand auditable proof. Certifyd provides this through device-bound, bi-directional authentication — creating tamper-proof records that flow through the entire supply chain, from the individual worker to the end client.
This is broken.
Here's why.
Multiple subcontractor layers mean the FM company can’t always verify who ends up on the client’s site.
Workers rotate across sites with different security requirements — the right person at the wrong site is still a breach.
Client contracts demand identity verification evidence, but FM companies rely on subcontractors to self-certify.
When incidents occur, establishing which specific individual was on which site at which time is difficult.
Simple verification.
Every time.
FM company registers as an Organisation on Certifyd; subcontractors register separately
Each worker registers their device, creating a cryptographic identity linked to their employer
At each site, workers verify through Certifyd — confirming identity, employer, and site-specific authorisation
A tamper-proof record is created for every site visit, auditable by the FM company and the end client
Ready to see it in action?
Book a demo or tell us about your needs.
“We manage 40 sites. On any given day, we’ve got subcontracted cleaners, agency guards, and maintenance engineers across all of them. When a client asks ‘who was in our building last night?’ — it takes us hours to piece it together.”— Operations Director, facilities management company
Common questions.
Each company in the supply chain registers as its own Organisation on Certifyd. Workers are members of their direct employer. When a worker arrives at a client site, verification confirms their identity, their employer, and their site-specific authorisation. The FM company can set verification requirements for each site and receive records for all workers, regardless of which subcontractor they work for. This creates transparency through the entire chain.
Yes. FM companies can share site-level verification records with clients, confirming who was on site, when, and under whose authority. This satisfies contract requirements for identity verification evidence and gives clients real-time visibility into who is accessing their premises. For security-sensitive sites, this is particularly valuable.
Certifyd is a verification layer, not an access control system. It verifies identity and organisational membership — confirming that the right person from the right company is at the right site. This can complement existing access control (key cards, biometrics, PIN codes) by adding an identity verification layer that links the person using the access method to their verified identity.
Workers verify at each site they access. A mobile engineer visiting three buildings in a day creates three verification records, each linked to the specific site and the specific time. This provides a complete, auditable trail of the worker’s movements across sites — valuable for both operational tracking and incident investigation.
Explore more use cases.
Related Solutions
Related Reading
External Resources
Verify every person on every site
Book a demo to see how Certifyd works for your team, or tell us about your verification needs and we'll get back to you within 24 hours.
Read: Audit Trails for Compliance