Skip to content
Buffr Checkpoint
Built in Namibia for governed access

Know who is in.Keep their data private.

Every visitor recorded. Every door governed. Every incident answered.

For banks, clinics, government offices and other Namibian sites where visitors still sign in on paper, Checkpoint is the visitor and access management platform for knowing who is on the premises and answering an auditor: it gives a private, encrypted record for every visitor, with the data protection work done for you.

Create account See pricing
  • No visitor directory
  • Offline continuity
  • Evidence for your auditor
Private by defaultOther visitors never see your details.
Horizon House

Visitor check-in

Welcome to
Horizon House

Check in privately using this phone. Your host will know when you arrive.

Your details are private. They are visible only to authorised staff.
Offline continuityA kiosk keeps arrivals and sends them when the connection returns.
Photo by Aalo Lens
AES-256-GCM
Every visitor record is encrypted
365 days
Default retention, applied from the first day
1 month
Data request deadline, tracked for you
24 / 72h
Incident notification clocks, shown from first suspicion

Every visitor recorded

A shared book shows every visitor to the next.

The next visitor reads every line while they sign, and nobody logs who photographed the page. When an auditor asks who saw a record last March, the book has no answer.

Shared paper book

VISITORS REGISTER Friday, 16 October
Shared paper book
No.NamePhoneTo seeInOut
1Johannes K.081 ••• 0142M. Amutenya07:55
2Ndapewa S.081 ••• 0178Finance08:1008:47
3Maria T.085 ••• 0119J. Shikongo08:32
4Tobias N.081 ••• 0163Workshop09:05

Names and phone numbers stay open to the next person who signs.

Checkpoint register

VISITORS REGISTER Seen by Johannes K.
Checkpoint register
No.NamePhoneTo seeInOut
1Johannes K.081 ••• 0142M. Amutenya07:55 On site
2Another visitor, protected
3Another visitor, protected
4Another visitor, protected

Each visitor sees only their own check-in.

An illustration. The visitors are fictional, and Checkpoint holds every answer encrypted.

Every door governed

Every visitor. Every door. One governed record.

The channel changes and the privacy standard does not. Checkpoint joins the front desk, the visitor and your existing systems.

  • Site QROn the visitor's phone

  • Assisted entryAlways available

  • KioskKeeps working offline

  • Pre-registrationExpected visitors

  • NFC credentialWhen enabled

  • SMS add-onWhen enabled

One encrypted
visit record
  • Host notified
  • Audit evidence
  • Retention applied

Protect by default

Records are isolated by organisation and site, with restricted fields held in protected envelopes.

Read how it works

Verify proportionately

Identity checks and host approval match the risk of the site, the visit and the zone.

Read how it works

Operate anywhere

Arrivals keep being recorded through low bandwidth and outages, then sync safely when the connection returns.

Read how it works

Prove control

Evidence for permissions, retention, incidents, data requests and the audit trail, ready when an auditor asks.

Read how it works

Explore the working surfaces

See how Checkpoint runs from arrival to audit.

Process

How it works

  1. A counter kiosk showing the Checkpoint welcome screen and its check-in code
  2. A scanner reading a one-time invitation code on a visitor's phone
  3. The Front Desk roster in the Checkpoint admin, with a minimal record per visitor
  4. A host's phone with an arrival notification beside a visitor's check-in receipt
  5. A Checkpoint lanyard holding a visitor pass
A counter kiosk showing the Checkpoint welcome screen and its check-in code
01 Arrival

At your front desk

Branded hardware, or none at all.

Most sites start with a printed code and the visitor's own phone. Where a door is busy, a Checkpoint kiosk takes the same check-in to a tablet, a tap reader and a badge printer.

A Checkpoint floor kiosk: a branded board with a tap zone, and a tablet showing the welcome screen with its check-in code
Floor kiosk with a branded board and a tap zone for badges.
  • A white counter kiosk showing the Checkpoint welcome screenCounter kioskA tablet locked in a counter stand.
  • A rugged Zebra tablet showing the Checkpoint welcome screenRugged tabletFor a gate or a busy door.
  • An ACS NFC readerBadge readerReads a random badge reference only.
  • A Zebra label printer with a printed Checkpoint visitor badgeBadge printerA pass with no phone number on it.

Kiosk hardware is optional and assessed per model, with type approval held before any order. The QR-first route needs no device.

Integrates with what you have

Your systems stay in charge of their own data.

Property management, staff directory and access control carry on as they are. Checkpoint connects to each at its boundary and sits in front as the front desk.

  • Property management
  • Staff directory
  • Access control
Ask about an integration

Every incident answered

Incident response is part of the product.

Start every clock from first suspicion. Classify the incident, contain it, preserve evidence, assign actions, record each notification decision and complete the impact assessment before closure. You decide whom to notify and when.

  • Incident register with classification and sharing labels
  • Owners, due dates, reminders and closure blockers
  • Customer breach notice and impact assessment templates
  • Incident extract inside the evidence pack
Ask about incident response
Incident INC-2026-014High priority
  1. Suspicion loggedToday, 08:42Complete
  2. Classify incident18 hours remaining24h clock
  3. Notification decisionRecord reason and facts72h clock
  4. Impact assessmentDue 16 November1 month

An example incident on a synthetic organisation.

Emergency roll call, physical access add-on

Account for the site while the response is still moving.

Declaring an emergency takes a snapshot of everyone on site, emails the published assembly instructions to every reachable visitor, active host and staff user, and gives coordinators one grouped roll call.

  • Every mark is an immutable log entry
  • Anyone not marked safe stays on the list
  • Alert delivery and every outcome are audited
Horizon House, active emergencyAssembly point: South car park
Started 09:42
32
People
19
Safe
2
Need help
11
Not found
Operations8 of 11 safe
Selma N.Visitor, host Maria AmutenyaSafe
Tomas A.Host, OperationsNeeds help
Julia M.Visitor, host Paulus NdeitungaNot found

Synthetic data.

Simple pricing by site

Start where you are. Add assurance as you grow.

One predictable subscription per site, with assisted check-in included in every plan. Annual billing charges ten months for twelve.

Billing period

Site

One office, branch, or clinic

N$1,500/ month

Priced for 1 site

1 site included

Create account
  • Unlimited visits
  • Public site QR and phone web check-in
  • Assisted front-desk entry
  • Visitor records and sign-out
  • Reports and encrypted visitor record
  • Owner-Operator from the fixed role catalogue
  • Tablet not required

Recommended

Network

Branch networks, clinic groups, corporate offices

N$4,500/ month

Priced for 1 site

3 sites included, then N$950 per extra site a month

Create account
  • Everything in Site
  • Multi-site dashboard
  • Host notification by email
  • Pre-registration via QR
  • NFC badge and phone check-in when enabled
  • Kiosk entitlements when live
  • Site-manager reporting
  • Granular roles from the fixed catalogue
  • Audit export

Assure

Government and regulated institutions

N$9,500/ month

Priced for 1 site

3 sites included, then N$1,500 per extra site a month

Create account
  • Everything in Network
  • Identity checks graded by site and visit risk
  • High-risk visit policies
  • Compliance dashboard and evidence packs

How to start

  1. 01Create your account

    Register your organisation, verify your email, and start setting up right away.

  2. 02Set up your sites

    Add your sites, hosts, and staff, then print your site QR code.

  3. 03Verify your business

    Upload your registration, a bank confirmation letter, an ID for each owner and proof of address. We read them and fill in the details for you to check.

  4. 04Pay by EFT

    Pick a plan under Billing, pay the invoice by EFT, and upload your proof of payment.

  5. 05Go live

    We confirm your business and your payment, your subscription turns active, and visitors start checking in.

Namibia-built

Designed for the places where connectivity, privacy and proof all matter.

Checkpoint is built first for banks, government offices, clinics and other sites where a visitor's details are sensitive and someone is asked to account for them. It also suits any corporate office, school or community organisation wanting the same care.

  • We do the work for youWhere a task would fall to the customer, we build it and switch it on.
  • We connect to what you runYour property, directory and access systems remain the record of their own data, with Checkpoint as the front desk in front of them.
  • We show what the product doesEvery capability is described as it works today, and the sections of this page show how each one works.
  • Built for the conditions hereRural sites, patchy networks and visitors without a smartphone are the normal case in Namibia, so the product is designed for them first.

Questions buyers ask

Straight answers to the first questions.

What is a digital visitor register?

A digital visitor register records each arrival as its own private entry instead of a line on a shared page. With Checkpoint a visitor checks in on their own phone, at a kiosk or with reception, and only authorised staff open the record.

See how it works

Do visitors need a smartphone to check in?

No. Reception checks in any visitor on a private screen, and assisted check-in is part of every plan. Visitors who have a phone scan the code printed for the site, and a busy door adds a Checkpoint kiosk when the queue grows.

See every way in

Does check-in keep working when the internet drops?

On a Checkpoint kiosk, yes. The tablet keeps each arrival encrypted on the device and sends it once the connection returns, and its screen says plainly the host has not been told yet. Check-in on a visitor's own phone needs mobile data to send.

See the kiosk

How long are visitor records kept?

Unless your organisation sets another period for a site, a visit record is removed 365 days after the visitor signs out. Removal runs by itself from the first day, a record under a legal hold stays until the hold ends, and each removal is written to the audit log.

See the evidence it keeps

What does the draft Data Protection Bill ask of a visitor log?

Namibia's draft Data Protection Bill asks an organisation to collect only what a purpose needs, keep it no longer than necessary, keep it secure, answer a person's request within one month and report a breach within 72 hours. Checkpoint is designed to support those duties while the Bill remains a draft.

See what a paper book exposes

How is Checkpoint priced?

Checkpoint is priced per site, per month, on three plans set out in the pricing section. Every plan includes assisted check-in at the front desk, and a larger plan adds more sites and the assurance features regulated organisations ask for.

See the plans

Start with Checkpoint

Replace the paper register before it becomes your next privacy incident.

Tell us about your sites and your visitor process. We will help you choose the right starting point.

General enquiriesteam@buffranalytics.com

Send us a message

Choosing a topic fills in a few prompts. Replace them with your own words.

A street in Windhoek with city buildings and everyday traffic

Built in Namibia

A safer welcome at every door.

Give every visitor privacy and give your organisation proof of who has access.

Create account
Photo by Peinge Nakale

We use privacy-preserving product analytics only after you accept. No visitor names or phone numbers are sent. Essential cookies do not require consent.