Evacuation roll call vs the paper visitor book.

Failure 1: the book is inside the evacuated zone

Reception is often at the front of the building, near the entrance. The entrance is often the location the fire alarm is signalling people to move away from. So when the marshal runs to grab the book, they are running into the zone everyone else is running out of. Depending on the alarm severity, marshals face a choice: retrieve the book or evacuate themselves.

Consequences we see reported after post-evacuation debriefs:

• Marshal exposed to smoke or heat while retrieving book.
• Book left behind; roll call done from memory, with predictable gaps.
• Book retrieved but is now the only physical copy; if the marshal loses it or drops it in a puddle, no fallback.

Failure 2: the book is not the source of truth

A busy site often has more people on-site than the visitor book reflects at any given moment:

• Employees swipe in via access control but never sign the visitor book.
• Delivery drivers arrive at goods-in, get signed off separately, never appear on the visitor book.
• Contractors on a maintenance rota show up at the workshop entrance, not reception.
• Visitors who left mid-day forgot to sign out, so the book shows them as still on-site.

The roll call ends with people apparently missing who left an hour ago, and people apparently present who never signed in. Fire and rescue services get an inaccurate count.

Failure 3: single marshal serialises the process

At a large muster point, one marshal reading names aloud is a queue of hundreds. As people arrive at the muster from different directions, the marshal cannot mark them all instantly. Some people report and then wander off before their name is called. Others arrive after their name has been called and are recorded as still missing.

Multiple muster points at the same site amplify this: no single marshal knows the total picture until they radio each other, which is often the least reliable communication in an actual emergency.

What live phone-based roll call does differently

When roll call runs on marshals' phones, three things change:

• The record is not in the building. The list of everyone on-site lives in cloud infrastructure, delivered to every marshal's phone the moment the alarm triggers. Nobody re-enters the evacuated zone to fetch a book.
• All entry paths feed the same list. Visitors at reception, contractors at workshop entrance, delivery drivers at goods-in, employees badging in via access control, all sync to the same roll call. If a person is on-site at the alarm time, they appear.
• Marshals mark in parallel. Each muster point marshal works their own zone. When one person appears at a muster point, one tap moves them to "safe". Progress is visible in real time to every marshal and the incident lead.
• The missing list surfaces. When everyone reported has been marked safe, only the unaccounted-for remain. That list, with photos where available, goes straight to the fire officer.

What the fire officer wants after the event

Post-incident briefing typically asks for:

• Time from alarm trigger to full evacuation complete.
• Total number on-site at trigger.
• Number reported at each muster point.
• Timeline of when each person was marked safe.
• Any names that remained unaccounted-for at the end of the incident.

Digital roll call systems produce this automatically as an incident report. Paper visitor books produce nothing.

Related reading

• Evacuation roll call feature deep-dive
• Visitor and contractor management for manufacturing sites
• OFAC visitor screening: what facilities must do
• Contractor insurance verification at the gate

Run a mock evacuation in your demo.

We set up a fake check-in, trigger a test alarm, and walk the marshal flow on a phone. 30 minutes.