Key control for fleets, dealerships and secure facilities

Know exactly who
took which key.

A security platform with a cabinet attached — every cabinet a connected IoT device, managed in the cloud.

  • High-security cabinets
  • Swedish engineering, UK support
  • Hosted on Microsoft Azure
KeyWin6 audit trail Live demo A real morning, replayed

    Some of our customers

      The range

      One platform, a cabinet for every scale.

      Every cabinet is built from 14-key strips, so one system scales from a single strip to several thousand keys across networked cabinets. The hardware is engineered in Scandinavia by Creone and integrated into the Smartbox platform. Rental guide prices for every size are in the configurator.

      120 keys

      Ask about this size

      Compare the range

      Pick two or three cabinets and see them side by side, guide prices included.

      Fixed or pooled. You choose.

      Two ways to set up your pegs. Fixed gives every peg a numbered home, so peg 3 only ever comes back to slot 3. Pooled lets a peg live in any linked cabinet, so a key taken in Birmingham can be handed back in London or Manchester, and the cloud keeps every site in step.

      Locking or unlocking pegs.

      Two peg types for the same strips. Locking pegs are held in place and release only for the right person. Unlocking pegs lift straight out, with every movement still identified and logged. Try it: click a peg below.

      Entry options to suit any business

      A badge on a lanyard, a MIFARE card, a PIN, and soon a palm: every user identifies before a single key moves, and each identification lands in the audit trail.

      Biometric Coming soon

      Palm readers

      Touchless palm vein recognition from 15 to 45 cm, authenticating in under 0.35 seconds. A palm cannot be lent to a colleague or left in a jacket pocket.

      • Up to 5,000 palm templates, 1:N matching
      • IP66, IK07 vandal resistant, cast aluminium
      • Outdoor rated, minus 26 to 55 °C
      MIFARE

      Cidron card readers

      Contactless identification for the smart cards your staff already carry, from MIFARE Classic to DESFire EV3, with AES128 encrypted card-to-reader communication.

      • 13.56 MHz, Classic, Plus, DESFire EV1 to EV3
      • OSDP Secure Channel, Wiegand, RS485
      • IP65, with or without PIN keypad, Swedish design
      Built in

      RFID and PIN

      Every intelligent cabinet supports RFID badge and PIN login as standard, with the branded readers as upgrades where sites need more.

      • Standard on the intelligent range
      • 13.56 MHz or 125 kHz card reader accessory

      Connected, not exposed

      Every cabinet connects to KeyWin6 over outbound-only communication to the Azure cloud. No inbound ports, no local server. And the platform plugs into the systems you already run.

      Web API

      Open API

      Create, update and remove users and groups from your own systems with the KeyWin6 web API, in bulk when you need to. The same API connects third-party access control, including ASSA ARX.

      • Users, groups and access over REST
      • Batch create, update and delete
      • Third-party access control, incl. ASSA ARX
      SAML 2.0

      Single sign-on

      Administrators sign in through your own identity provider using SAML 2.0. Every authentication request KeyWin6 sends is signed, and password login for administrators can be switched off.

      • SAML 2.0, SP-initiated
      • Signed authentication requests
      • Optional lockout of password login
      Azure IoT

      Native IoT

      Each cabinet carries the Azure IoT Hub SDK and speaks over one outbound, encrypted channel. Firmware and new features arrive several times a year, signed and verified.

      • Azure IoT Hub SDK on every cabinet
      • AMQP over WebSockets, ISO/IEC 19464
      • Outbound only: 443 TCP TLS, 123 NTP
      • Signed, verified firmware updates
      Azure

      Cloud security

      The platform is scanned and monitored continuously in Azure, with quick feedback whenever a risk is identified.

      • Azure Security Center resource scanning
      • Azure Monitor and alerts
      • keywin.app SSL, DigiCert Secure Site Pro SAN
      • Web front end and API tested against OWASP Top 10
      Real time

      Alerts and event log

      Email alerts reach staff and management in real time, and the full event log can be exported through the API.

      • Real-time email alerts
      • Event log export via the API
      • Reports filtered by user, key or site
      EU

      Hosted in the EU

      Your data is held in Microsoft's Amsterdam data centre by default, inside the EU, with the region selectable if it needs to live elsewhere.

      • Microsoft data centre, Amsterdam by default
      • Region selectable on request
      • Continuous backup, 7-day point-in-time restore
      • Long-term retention: week, month, year
      2FA

      Two-factor authentication

      Two-factor login protects both ends of the platform: identification at the cabinet and administrator sign-in to KeyWin6.

      • Two-factor login at the cabinet
      • Two-factor sign-in to KeyWin6
      • Combine badge, PIN or card (palm coming soon)
      Resilience

      Power cut or network down

      Every cabinet has its own battery backup, so authorised users can still take and return keys through an outage. Events are stored locally and sync to KeyWin6 when the connection returns.

      • Built-in battery backup in every cabinet
      • Keys stay available through an outage
      • Local event store, synced on reconnection
      Coming later in 2026

      Active Directory Integration

      Active Directory integration arrives later in 2026, linking KeyWin6 user management directly to your directory.

      • Directory-linked user management
      • Arriving later in 2026

      Security

      The audit trail is the product.

      A key cabinet only earns its place if you can prove what happened. Every event in every cabinet is recorded, synced to the cloud and ready to export.

      Full audit trail

      Every removal and return recorded: who, which key, when, and for how long.

      Role-based access

      Each user sees only the keys their role allows, while trusted staff can hold wider standing access.

      Key reservation

      Reserve a key ahead of time, so it is waiting for the right person and nobody leaves empty-handed.

      Email alerts

      When a key is overdue or a door is left open, an email goes straight to the people who need to know.

      Encrypted communication

      Traffic between cabinets, the cloud and administrators is encrypted.

      Tamper alerts

      An alert the moment something is wrong, from a forced door to a key that has not come back.

      Compliance reporting

      Exportable reports filtered by user, key or site, ready for audit.

      KeyWin6 audit trail Live Sample data
      0Keys out
      0Overdue
      0Events today

        Why change

        A pegboard cannot tell you who.

        Hooks and log books work until the day you need an answer. Then the difference is stark.

        The old way With Smartbox
        Who has a key right now Ask around and check the book Live on any screen, wherever you are
        When it left and came back Only if someone wrote it down Logged automatically, to the minute
        The wrong key leaving Nothing stops it Only authorised keys release (locking strips)
        An overdue key Noticed when it is already a problem An email alert as it happens
        Proof for an audit A paper trail, if it exists An exportable event log
        Nights and weekends Keys in pockets and drawers Identify at the cabinet, any shift

        Partners

        Built with Creone and Saab Combitech.

        The hardware and the software each come from a specialist. Every cabinet is engineered and manufactured by Creone in Sweden, and the KeyWin6 platform behind it is developed and maintained in partnership with Combitech, part of the defence and security group Saab.

        Cabinet engineering and manufacture

        Creone

        Creone have made key and valuables cabinets since 1979, with manufacturing and the head office in Tranås, Sweden. Every Smartbox cabinet is a Creone build: the same steel, strips and pegs that secure keys in some 50 countries, mainly in Europe.

        • 1979Creone founded; made in Tranås, Sweden ever since
        • ~50countries supplied with Creone key and valuables cabinets

        Part of the Saab group

        Saab Combitech

        The KeyWin6 platform behind every Smartbox cabinet is developed and maintained in partnership with Combitech, part of the defence and security group Saab (founded 1937, around 28,000 employees worldwide). The same house delivers electronic warfare software to a NATO member state and works on the Swedish Armed Forces' digital command and control infrastructure.

        • 1982Combitech founded within Saab
        • 2,600+Combitech experts across 30+ locations in Sweden and Finland

        Enterprise IoT cloud. Nothing to install.

        KeyWin6 runs on Microsoft Azure IoT. Cabinets connect via outbound-only communication to the cloud service, so there is nothing to install on-site and no server to maintain. Administrators manage every cabinet, key and user from anywhere.

        • Secure cloud hosting on Microsoft Azure
        • Outbound-only communication, no inbound ports
        • Resilient infrastructure, maintained by Microsoft
        • Scales to thousands of keys across multiple sites
        • US$20bnMicrosoft's five-year security investment, announced 2021
        • 35,000Engineers working on security under Microsoft's Secure Future Initiative (2025)
        • 100tnSecurity signals Microsoft processes every day (2025)
        • 90+Azure compliance offerings, the industry's largest portfolio

        No inbound ports are opened on your network: cabinets call out to the Azure IoT Hub and nothing calls in. Each customer runs on a separate SQL database, encrypted at rest with AES256 and backed up continuously with seven-day point-in-time restore. The KeyWin6 web front end and API are tested against the OWASP Top 10.

        How it works

        From key to audit report.

        Any screen

        On your desk. In your pocket.

        The admin portal runs in any modern browser, so the same live picture follows you from the office to the site floor: every cabinet, every key, every user.

        The portal on desktop: a cabinet's key list beside one key's location, holder and activity history
        Desktop
        The portal on a phone: the key list with each key's holder and position
        Mobile
        • Live cabinet status, with keys out and keys in cabinet at a glance
        • Open any key to see where it lives and its full activity history
        • Manage users and access on the move

        Customers

        In their words.

        Industries

        Wherever keys change hands.

        Sample

        About us

        Our people, across the UK.

        Smartbox is deployed and supported by our own UK-based team, with field engineers reaching customers from Truro to Inverness.

        Rentals

        One price. The whole system.

        Rent Smartbox for one fixed monthly price: hardware on the wall, software in the cloud and support behind it, with everything kept current automatically.

        System rental

        One fixed monthly price.

        Predictable from day one. Everything listed is in the price.

        36-month agreement · hardware · software · support

        Get a rental quote See the guide price for your size

        Installation available at an additional cost.

        What is included

          Configurator

          Build your Smartbox.

          Tell us how many keys you manage and the right cabinet picks itself. Choose your strips and entry option, and an exact quotation follows within one working day.

          keys

          Slide to the number of keys you have and we put you in the next cabinet up: 42, 70, 98, 126, 154 or 210.

          Strip type

          Unlocking strips: any peg lifts straight out, with every movement identified and logged.

          Entry option

          PIN code entry is included. A fitted RFID card reader adds £16 a month.

          Payback

          What do lost keys actually cost?

          Put your own numbers in — every figure is editable and the sums are shown in full. The total compares against the live rental guide price from the configurator above.

          01 — Staff time at the key book

          £0 a month

          02 — Management time

          £0 a month

          03 — Lost keys and re-locks

          £0 a month

          Estimated cost of manual keys across site £0 a month · £0 a year

          Working assumptions: 21 working days a month. Defaults are illustrative — change any figure to your own. Rental guide price ex VAT.

          Getting started

          From order to live.

          01

          Enquire

          Tell us your key count and an exact quotation follows within one working day.

          02

          Install

          Cabinets are wall-mounted and run from a standard 230 V supply. Installation is available at an additional cost.

          03

          Connect

          The cabinet connects outbound-only to the Smartbox cloud, so nothing is installed on your network.

          04

          Load your users

          Users, groups and access rules are set up in KeyWin6, in bulk through the web API if you have many.

          Updates

          Always current. Automatically.

          Firmware and software updates arrive over the air: security fixes, improvements and new features, live on every cabinet without anyone lifting a finger.

          Remote demonstration

          See your keys on the platform.

          Tell us how you manage keys today and we will show you KeyWin6 live on a remote demonstration, with your own setup on screen. No visit, no obligation.

          Not ready for a demo? Choose Talk to us on the form.