The 24/7 Engine: after-hours access, CCTV, incidents and overnight failure states

The failure mode this prevents

It is 2:50am. A member's training partner is on the floor, conscious but grey. The person with them has never noticed the duress button, does not know the street address to give the operator, and is ringing the gym's landline, which is ringing in an empty office. Or the failure is quieter: the access controller drops offline at 11pm, the door fails open, and by morning your unstaffed gym has hosted a party's worth of strangers on camera nobody was watching. 24/7 access is a genuine product advantage, and it is also a set of failure states that will each occur eventually. The 24/7 Engine's premise: none of them should be handled for the first time at 3am. Operator experience We run our own gym 24/7, so the failure states below are the ones we plan and drill for ourselves, not hypotheticals.

The operating system

Parameters you set

Your numbers, not benchmarks. Saved in this browser only — nothing you type here is sent anywhere.

ONCALL_ROSTERWho answers the phone overnight, in what order, with numbers written where staff and signage need them.CCTV_RETENTIONHow long footage is kept (check your insurer's and any code requirements before choosing).LOG_REVIEWHow often access logs and overnight footage get sampled, and by whom.DRILL_INTERVALHow often each failure-state drill is re-run.daysTAILGATE_POLICYYour written rule and member messaging on letting others in.

The procedure

Access is earned through induction. No after-hours access until the member has been walked through the emergency exits, the duress point or emergency phone, the first-aid and defibrillator locations if fitted, and the tailgating rule. Operator experience At our gym a staffed induction comes before the fob works after hours; the induction is the price of the key.
Tailgating is fought with design and messaging, not hope. Signage at the door, a written policy per TAILGATE_POLICY, and follow-up when the access log and footage show it happening. Every tailgater is an untraceable person in your building at night.
CCTV that someone actually looks at. A written camera coverage list (entry, floor, blind spots identified honestly), retention per CCTV_RETENTION, and a sampling review per LOG_REVIEW. Cameras nobody reviews are an archaeology tool, not a control.
Emergency communications members can find. The street address posted large near the phone or duress point (callers to 000 blank on addresses under stress), emergency instructions at eye height, equipment (duress button, phone, defibrillator if fitted) tested on a logged schedule.
The incident runbook. One page: the ONCALL_ROSTER, what gets a call now versus a morning report (use the Staff Engine thresholds), the incident form, and the rule that anything involving an ambulance, police or the media gets the owner woken, no judgement calls.
Drill the failure states. The three below, re-run every DRILL_INTERVAL using the drill sheet.

The three overnight failure states

Access system down. Decide in advance: does your door fail secure (nobody in, paying members locked out and messaging you) or fail open (building unsecured)? Know which it is, have the answer from your installer in writing, and have a comms template ready for members either way, plus the installer's after-hours number on the runbook.
Medical event. The plan is short and absolute: 000 first, always, before any callout to staff. Then the on-call chain, then meet-the-ambulance instructions (door access for paramedics is a detail that costs minutes if unplanned). Everything on signage a stressed stranger can follow.
Door fault or break-in. Who attends in person and in what timeframe, which locksmith or board-up contractor is pre-agreed with after-hours rates, when police are called, and who reviews the footage before opening.

Boundary: safety and security are regulated territory

You owe duties under work health and safety law to workers and, in various ways, to people in your premises, and those duties do not clock off when staff do. What that requires of an unstaffed facility is exactly the kind of thing owners should not take from a website summary: talk to your state WHS regulator (SafeWork NSW, WorkSafe Victoria, or your state's equivalent), and get a WHS consultant's review of your unstaffed-hours operation. Additionally: your development approval or lease may condition 24/7 operation, your insurer will have views on unstaffed hours and CCTV and will punish unpleasant surprises, security installation is licensed work in Australian states, and CCTV plus access logs are personal information with privacy obligations attached (OAIC). Verify all five for your site; none of this page is legal or safety advice.

Tool: the overnight failure-state drill sheet

Three fill-in cards, one per failure state. The sheet compares last-drilled dates against your own DRILL_INTERVAL and flags any overdue card. Printable, because the place this sheet matters is on the wall, not in a browser.

Access system down

never drilled

This plan is currently a guess.

First responder (name, phone)Decision owner if first responder unreachableThe pre-made decision: does your door fail secure or fail open? Your installer's answer, in writing.Contractor contactsAfter-hours rates confirmed with contractorMember comms templateLast drilledWhat broke in the last drill

Medical event

never drilled

This plan is currently a guess.

First responder (name, phone)Decision owner if first responder unreachableThe pre-made decision: 000 first, always, before any callout to staff. Then the on-call chain, then meet-the-ambulance instructions.Contractor contactsAfter-hours rates confirmed with contractorMember comms templateLast drilledWhat broke in the last drill

Door fault or break-in

never drilled

This plan is currently a guess.

First responder (name, phone)Decision owner if first responder unreachableThe pre-made decision: who attends in person and in what timeframe, when police are called, who reviews the footage before opening.Contractor contactsAfter-hours rates confirmed with contractorMember comms templateLast drilledWhat broke in the last drill

Set DRILL_INTERVAL above (in days) and the sheet will flag overdue cards.

What we could not verify, and what varies by gym

No credible published data exists on overnight incident frequency in Australian 24/7 gyms; anyone selling you safety hardware off a scary statistic should be asked for the source. Access-control and door hardware failure behaviour varies by product and install, which is why the fail-secure question must be answered by your installer for your door, not by this page. Requirements also genuinely differ by state, council and insurer, so the boundary list above is a checklist of who to ask, not what they will say.

Do this now

If your access control, cameras or duress hardware predate your 24/7 decision, treat it as a fit-out project with a spec, not a string of call-out fees: plan it properly in Upgrade a Gym.

Email me this system

The 24/7 Engine as a working document, with the three drill cards as printable sheets, ready for the wall by the front desk. So it does not die in a browser tab.