6. Evacuation QR code best practices

For: QHSE Managers, Safety Officers, Site Managers
Application: Admin (app.anghello.co)
Estimated time: 3-minute read

The Emergency Evacuation QR code provides fast, passwordless access to the evacuation dashboard. A few best practices will help you get the most out of it while staying in control.

What Anghello handles for you

Several built-in mechanisms let you use the QR code with confidence:

• Access limited to the essentials: the QR code only gives access to the on-site list and the roll call — never to the visitor register or the settings
• Notification on every scan: an email is sent to the administrator every time the QR code is used (with IP address and timestamp)
• Automatic revocation: if you change an Evacuation member's role to another role, the QR code is automatically invalidated

Storing and sharing the QR code safely

The QR code works like an access badge: whoever scans it gets access to the evacuation dashboard. A few simple habits:

• Store the posters in access-controlled locations: sealed evacuation pack, secure box, locked office
• Never display it in an area open to the public or to visitors
• Avoid photographing it or sharing it through messaging tools (email, WhatsApp, Teams)
• Keep the number of physical copies to the strict minimum

The poster printed from Anghello carries the notice "Internal use only - Do not distribute".

When to regenerate a QR code

Regenerating a QR code immediately invalidates the previous one. Think of it as changing a password:

• When someone who knew the QR code's location leaves the company
• After every real evacuation or drill
• Periodically, as part of your security reviews

How: from the user list, open the Evacuation member's menu, then View/Manage QR code > Regenerate. The old QR code stops working immediately. Print and deploy the new poster.

Briefing your teams

The QR code is only as safe as the people who have access to it. A few points to include in your briefings:

• The QR code is an access badge. Scanning it gives access to the list of people on site and allows triggering an evacuation.
• No digital sharing. It's never sent by message — it's accessed physically.
• When in doubt, regenerate. A new code from Anghello invalidates the old one immediately.
• Everyone is accountable. Anyone who knows where the QR code is stored is responsible for keeping it confidential.

Compliance and good practices

• Traceability: Anghello provides what you need (timestamped reports, history, identification of responders) for your regulatory obligations and audits.
• Least privilege: only grant access to people who genuinely need it.
• Regular review: delete the accounts of people who have left the site or changed roles.
• GDPR consistency: the visitor data you collect must be covered by your records of processing activities. Consult your DPO if needed.
• Report confidentiality: evacuation reports contain personal data. Restrict their distribution to authorized people.

Next page → Evacuation FAQ

Updated on: 27/07/2026