AJC Visitor Log Audit Checklist

1. Capture and identity

• Every visitor is recorded on entry (no "I'll add them later")
• Each record ties to a single identifiable person (name plus at least one identifier)
• Repeat participants are matched to their prior visits, not double-counted
• Visit purpose or service category is captured, not just a name

2. Time and accuracy

• Arrival time is recorded automatically, not handwritten
• Departure or duration is captured where required
• Records cannot be back-dated or altered without a trace
• The clock source is consistent across all sign-in points

3. Multi-site and oversight

• Every location reports into one consistent system
• A coordinator can see all sites without visiting each front desk
• Totals roll up automatically across locations

4. Reporting and retention

• You can produce a date-range foot-traffic report in minutes, not days
• Reports export to a format a funder accepts (PDF or CSV)
• Logs are retained for the full required period and are retrievable on request
• You can show the underlying records behind any reported number

5. Privacy and access

• Visitor data is access-controlled, not an open notebook on the counter
• No biometric or facial-recognition data is collected (avoids BIPA-style exposure)
• Staff access can be revoked when someone leaves