CSCS Smart Check explained: how turnstile access control verifies cards in real time

CSCS Smart Check explained

CSCS Smart Check has changed how UK construction sites verify workers at the gate. Where the gateman once held a card, glanced at the photo, glanced at the worker and waved them through, turnstile access control integrated with Smart Check now performs a live database lookup in seconds — confirming the card is genuine, in date, and the right card for the role the worker is performing. An expired or fraudulent card simply doesn’t unlock the rotor.

Veritech installs, integrates and monitors CSCS Smart Check-enabled access control on construction sites across the UK. This article explains how the platform works, how it integrates with site turnstiles, what happens when a card fails verification, and how Smart Check supports CDM 2015 and Building Safety Act 2022 compliance.

What is CSCS Smart Check?

CSCS Smart Check is the verification platform run by CSCS Group that allows employers, principal contractors and site managers to verify any card carrying the CSCS logo against the live CSCS database. It launched as a mobile app in April 2022 and replaced the older Go Smart card-checking app on 1 April 2024 as the sector’s single platform for card verification.

Smart Check is the only platform that can verify all 2.3 million cards displaying the CSCS logo, covering the CSCS Alliance of 37 affiliated card schemes — not only the cards issued directly by CSCS, but those issued by partner schemes including ECS (electrotechnical), CPCS (plant operators), CISRS (scaffolders), and others.

The platform is available three ways: – As an API that approved CSCS Smart Check IT Partners build into site access systems, induction software and turnstile readers – As a free mobile app for iOS and Android, using NFC tap or QR code scan – As a web platform at CSCSSmartCheck.co.uk for desktop checks

For construction sites running turnstile access control, the API integration is the one that matters. It is what turns Smart Check from “a thing the gateman has on his phone” into a live, automated check at the turnstile rotor.


How a Smart Check verification works

A Smart Check verification follows three steps, every time.

Step 1 — The card is read. A worker presents their CSCS-logoed card to the reader, either by tapping the embedded NFC chip against an NFC-enabled reader or by presenting the QR code printed on the back of the card to a camera-equipped reader. Both physical plastic cards and digital cards held in the My CSCS app are supported.

Step 2 — The Smart Check platform performs a live lookup. The reader sends the card’s identifier to the Smart Check API. The API queries the live CSCS database — not a downloaded copy, not a cache, but the live record — and returns the card’s status in real time.

Step 3 — The result is returned and applied. Smart Check returns the cardholder’s photograph, occupation, qualification level, card type, expiry date and current status. Where the verification is integrated with a turnstile, a valid result unlocks the rotor; a failed result keeps the rotor locked and triggers an alert at the site office.

The entire round-trip — read, lookup, response, decision at the turnstile — happens in seconds. That is what makes Smart Check viable as a gate-side verification step on a busy site at 7am, when fifty workers are arriving in a fifteen-minute window.


Why visual card checks are no longer enough

Visual card checks have three weaknesses, all of which Smart Check addresses.

They miss expired cards. A CSCS card typically expires after five years. A gateman comparing a face to a photo cannot tell at a glance that the card was valid in 2021 but expired last March. Smart Check returns the expiry date and current status with every check.

They miss cancelled cards. Cards can be cancelled by CSCS where fraud is identified at a testing centre, or where a holder has lost their right to work. A cancelled card looks identical to a valid one. Smart Check returns the current cancellation status; the older visual check does not.

They miss counterfeits. CSCS itself estimates the number of fraudulent cards in circulation as under 1%, but on a workforce of fifty per day across a year that is a meaningful number, and counterfeits have improved over time. Smart Check is the only verification method that catches them, because the underlying check is against the CSCS database rather than against the card’s printed face.

Beyond catching what visual checks miss, Smart Check now matters for a separate reason — the Building Safety Act 2022. The Act places a legal duty on individuals carrying out construction work to be competent for their roles, with competence defined as the appropriate skills, knowledge, experience and behaviours. For principal contractors, that means evidencing — not assuming — that every worker on site holds the correct card for the work they are doing. Smart Check’s automated, logged verification is the cleanest available evidence trail.


How turnstile access control integrates with Smart Check

Smart Check integration with construction site turnstiles works the same way at every site, with three components.

A reader on the turnstile. Most modern construction turnstiles can be fitted with an NFC reader, a QR code scanner, or both. The reader sits at face height alongside any biometric reader the site uses for the day-to-day access credential.

A controller that handles the API call. Inside the turnstile or in a nearby weatherproof enclosure, a controller sends the card data to the Smart Check API and receives the response. Controllers cache previous successful verifications locally so the turnstile keeps working through brief network interruptions, with re-verification on reconnect.

A workforce management platform that holds the result. The verified card data — name, qualification, expiry, status — sits in the cloud-based platform that runs the site’s access control. From there it flows into the time-and-attendance record, the induction system, and the muster report.

The integration is delivered through approved CSCS Smart Check IT Partners. Most of the major UK construction access control platforms operate as IT Partners; some smaller or older platforms integrate via a third-party bridge. We cover the wider integration picture — Smart Check, online inductions, time and attendance, payroll — in our access control integration article.

Pre-enrolment is the workflow that gets the most value from the integration. A worker uploads their card data during online induction, before they ever reach site. Smart Check verifies the card at that point. By the time the worker arrives at the gate on day one, the system already knows the card is valid; the gate-side check is then simply identity verification.


What happens when a card fails verification

Smart Check returns one of three failure conditions, each handled differently.

Expired card. The card was genuine but has passed its expiry date. The turnstile remains locked. The worker is directed to the site office. Most principal contractors operate a defined grace period — typically 5 to 10 working days during which the worker’s qualification is independently confirmed while a replacement card is processed. The grace period is documented in the site access policy and the access log.

Cancelled card. CSCS has cancelled the card, usually for fraud-related reasons. The turnstile remains locked. The worker is directed to the site office, the site manager is alerted, and the case is reviewed before any access is granted.

Counterfeit or unrecognised card. Smart Check returns “not found” against the database. The turnstile remains locked. Where a counterfeit is suspected, CSCS asks principal contractors to retain the card where it is safe to do so, and to report the case. Smart Check’s audit log captures the attempt with timestamp, card number presented and outcome — useful evidence in any subsequent investigation.

In all three cases, the failed verification is logged. That log is part of the site’s CDM 2015 evidence trail.


CSCS Smart Check and CDM 2015 compliance

Regulation 13(4)(b) of the Construction (Design and Management) Regulations 2015 places a specific duty on the principal contractor to ensure that the necessary steps are taken to prevent access by unauthorised persons to the construction site. HSE’s position is that this duty is evidenced — typically through a controlled perimeter, a defined entry point, an induction process and an auditable access log.

Smart Check sits inside that evidence trail. Where access control is integrated with Smart Check:

  • Every entry attempt is timestamped and logged
  • Every card validation is logged against the live CSCS database
  • Failed validations are logged with reason
  • The audit log is exportable for HSE inspection

This is a step up from the older approach — induction sign-in sheets, manual card photocopies, gateman’s diary — both in compliance robustness and in the time it takes to produce the evidence when HSE asks for it. Our CDM 2015 article maps each principal-contractor duty to the corresponding access-control evidence, including Smart Check.

The Building Safety Act 2022 layers on top. Where CDM 2015 asks “did you keep unauthorised people out”, the Building Safety Act adds “did you verify that the people you let in were competent for their roles”. Smart Check’s card-by-card competence verification — qualification level, occupation, expiry, status, all logged — is currently the most direct way of evidencing that duty for the workforce on site.


Smart Check adoption across the UK construction industry

Smart Check adoption has accelerated since the Go Smart withdrawal in April 2024. The platform’s API is embedded in the site access and induction systems used by several of the UK’s largest contractors and housebuilders — CSCS publicly cites Wates, Vinci, Balfour Beatty, Persimmon Homes, Taylor Wimpey and BAM among them.

In January 2026, CSCS Group announced that Smart Check had reached its 60 millionth scan, reflecting a sustained shift across the industry from visual checks toward digital verification. The trend is clear: principal contractors are moving from “check at induction, hope for the best after” to “check at every site entry, log everything, prove it later”.

For smaller principal contractors and tier-2 contractors, the move is slower, often constrained by legacy access control hardware that wasn’t designed with a Smart Check API in mind. The solution at most UK sites is either a software update to bring older controllers in line, or a fresh deployment of integrated hardware. Either way, the destination is the same: the gateman’s glance is being replaced by the database lookup.


Frequently asked questions

What is CSCS Smart Check? CSCS Smart Check is the verification platform that lets employers, principal contractors and site managers verify any card carrying the CSCS logo against the live CSCS database. It is available as a free mobile app, as a web platform at CSCSSmartCheck.co.uk, and as an API that approved CSCS Smart Check IT Partners build into site access systems, online induction platforms and turnstile readers.

How does Smart Check work at a construction site turnstile? The worker presents their CSCS-logoed card to a reader on the turnstile (NFC tap or QR scan). The reader’s controller sends the card identifier to the Smart Check API, which queries the live CSCS database and returns the cardholder’s photograph, occupation, qualification, expiry date and status. A valid card unlocks the rotor; an expired, cancelled or unrecognised card keeps it locked.

Is Smart Check legally required on UK construction sites? There is no UK regulation that explicitly mandates Smart Check. However, Regulation 13(4)(b) of CDM 2015 requires principal contractors to prevent unauthorised access, and the Building Safety Act 2022 places a legal duty on individuals to be competent for their roles. Smart Check is the most direct way of evidencing both duties simultaneously for the workforce arriving at the gate.

What CSCS cards does Smart Check work with? Smart Check verifies all 2.3 million cards across the CSCS Alliance of 37 card schemes. That includes CSCS-issued cards (green labourer, blue skilled, gold supervisor or advanced craft, black manager, white professional, red trainee) and partner-scheme cards including ECS (electrotechnical), CPCS (plant operators) and CISRS (scaffolders).

Can Smart Check verify digital CSCS cards held on a phone? Yes. CSCS launched digital cards via the My CSCS app, and Smart Check verifies both physical plastic cards and digital cards in exactly the same way. The verification process and the data returned are identical.

What happens if a worker’s card fails Smart Check at the gate? The turnstile remains locked, the verification is logged with its reason code (expired, cancelled, not found), and the worker is directed to the site office. Most principal contractors operate a defined grace period of 5 to 10 working days during which qualifications can be independently confirmed while a replacement card is processed.

Does Smart Check replace site inductions and other competence checks? No. Smart Check verifies that the worker holds the right card for the right occupation, but a site-specific induction is still a CDM 2015 requirement under Regulation 13(4)(a). Smart Check is typically integrated with the induction platform so that one event flows into the other.


How Veritech supports CSCS Smart Check integration

Veritech Security works with principal contractors, project managers, and construction businesses across the UK to design, install, integrate and manage construction site access control systems that protect sites throughout the full project lifecycle.

Our services relevant to CSCS Smart Check integration include turnstile access control with real-time CSCS Smart Check verification at the gate; integration with online induction platforms so workers are blocked at the turnstile until induction is complete; biometric and RFID credential management linked to verified CSCS records; time-and-attendance integration that uses the Smart Check identity for payroll and CIS reconciliation; cloud-based workforce management with central card revocation across multiple sites; and SIA-licensed manned guarding and 24/7 remote monitoring to back up gate-side verification.

We hold SIA approved contractor status alongside ISO 9001, ISO 14001, Constructionline, SafeContractor, RISQS, Achilles, and Cyber Essentials accreditations — the credentials that principal contractors and their insurers expect to see.

If you have a construction project that needs a security solution, speak to Veritech before the plant goes on site.

Call: 0800 799 9800 (available 24/7) Email: info@veritech-security.com Or: request a site security consultation online.


Related articles

Our Quick Quote Request

Simply complete our quick survey below

Step 1
Step 2
Step 3
Submit
Select a Property Type*

If your property is not a commercial property, please call us on 02380 000 400

Select your Services*
Are you looking to upgrade an existing system, or install a new one?
Make an enquiry