Smartbox is a security platform with a cabinet attached, not a cabinet with software bolted on. Every cabinet is a connected IoT device, managed in the cloud.
02:14, on a security camera: one hook on a pegboard is empty, labelled Van 2. A key is missing. A pegboard cannot tell you who.
The Smartbox Systems logo. Then the real cabinet: a security platform with a cabinet attached.
A strip of locking pegs, every light red. An unauthorised attempt on peg 5 is refused and logged. John Smith identifies at the cabinet, the light turns green and peg 3 is released: held in place, and released only for the right person.
Every user identifies first: RFID badge and PIN, built in; MIFARE cards with AES128 encrypted card-to-reader communication; palm readers, coming soon. Every identification is logged.
The audit trail is the product. One event answers who, which key, when and for how long: K. Shaw took Courtesy car 4 out at 08:02 and returned it 45 minutes later.
Built in, not bolted on: role-based access, two-factor sign-in, key reservation and compliance reports.
Email alerts, the moment it matters: Site van 2 is overdue, and a door has been left open at Cabinet 1.
Connected, not exposed. Cabinets in Birmingham, London and Manchester connect outbound only to KeyWin6 on Microsoft Azure IoT. An inbound connection attempt is stopped at the edge of your network: no inbound ports, nothing to install on site.
Encrypted in transit and at rest: AES256 encryption at rest, a separate database per customer, tested against the OWASP Top 10, and hosted in the EU by default on Microsoft Azure.
Power cut, network down. The cabinet keeps working on its battery: John Smith takes a key, the events are stored locally and synced to KeyWin6 when the network returns. Still working, still logging.
On your desk and in your pocket: the same live picture in any modern browser. Site van 2 comes back, and the laptop and the phone update at the same moment.
Built with Creone, making cabinets in Sweden since 1979, and Saab Combitech, part of the defence and security group Saab.
Some of our customers: Biffa, Cadbury, Amazon, Netflix, Bank of America, Go-Ahead Group, Marriott, Group 1 Automotive, Arnold Clark, Walsall Council, Hackney Council, Lookers, AG Barr, Vertu, Essex & Suffolk Water, Heathrow, Wates, Tom Hartley Jnr, Jaguar Land Rover, Scania, University of Sheffield, Tate & Lyle Sugars, Staffordshire Police and Mitie.
Who took the Van 2 key? The audit trail answers: at 02:14, D. Hayes removed Site van 2. Know exactly who took which key.
Book a remote demo. No visit, no obligation. smartboxsystems.co.uk
All names and events shown are sample data.
Some of our customers
The range
One platform, a cabinet for every scale.
Every cabinet is built from 14-key strips, so one system scales from a single strip to several thousand keys across networked cabinets. The hardware is engineered in Scandinavia by Creone and integrated into the Smartbox platform. Rental guide prices for every size are in the configurator.
Two ways to set up your pegs. Fixed gives every peg a numbered home, so peg 3 only ever comes back to slot 3. Pooled lets a peg live in any linked cabinet, so a key taken in Birmingham can be handed back in London or Manchester, and the cloud keeps every site in step.
KeyWin6 cloud
Birmingham
London
Manchester
KeyWin6live
KeyWin6
You, anywhere
3
Locking or unlocking pegs.
Two peg types for the same strips. Locking pegs are held in place and release only for the right person. Unlocking pegs lift straight out, with every movement still identified and logged. Try it: click a peg below.
Entry options to suit any business
A badge on a lanyard, a MIFARE card, a PIN, and soon a palm: every user identifies before a single key moves, and each identification lands in the audit trail.
BiometricComing soon
Palm readers
Touchless palm vein recognition from 15 to 45 cm, authenticating in under 0.35 seconds. A palm cannot be lent to a colleague or left in a jacket pocket.
Up to 5,000 palm templates, 1:N matching
IP66, IK07 vandal resistant, cast aluminium
Outdoor rated, minus 26 to 55 °C
MIFARE
Cidron card readers
Contactless identification for the smart cards your staff already carry, from MIFARE Classic to DESFire EV3, with AES128 encrypted card-to-reader communication.
13.56 MHz, Classic, Plus, DESFire EV1 to EV3
OSDP Secure Channel, Wiegand, RS485
IP65, with or without PIN keypad, Swedish design
Built in
RFID and PIN
Every intelligent cabinet supports RFID badge and PIN login as standard, with the branded readers as upgrades where sites need more.
Standard on the intelligent range
13.56 MHz or 125 kHz card reader accessory
Connected, not exposed
Every cabinet connects to KeyWin6 over outbound-only communication to the Azure cloud. No inbound ports, no local server. And the platform plugs into the systems you already run.
Web API
Open API
Create, update and remove users and groups from your own systems with the KeyWin6 web API, in bulk when you need to. The same API connects third-party access control, including ASSA ARX.
Users, groups and access over REST
Batch create, update and delete
Third-party access control, incl. ASSA ARX
SAML 2.0
Single sign-on
Administrators sign in through your own identity provider using SAML 2.0. Every authentication request KeyWin6 sends is signed, and password login for administrators can be switched off.
SAML 2.0, SP-initiated
Signed authentication requests
Optional lockout of password login
Azure IoT
Native IoT
Each cabinet carries the Azure IoT Hub SDK and speaks over one outbound, encrypted channel. Firmware and new features arrive several times a year, signed and verified.
Azure IoT Hub SDK on every cabinet
AMQP over WebSockets, ISO/IEC 19464
Outbound only: 443 TCP TLS, 123 NTP
Signed, verified firmware updates
Azure
Cloud security
The platform is scanned and monitored continuously in Azure, with quick feedback whenever a risk is identified.
Azure Security Center resource scanning
Azure Monitor and alerts
keywin.app SSL, DigiCert Secure Site Pro SAN
Web front end and API tested against OWASP Top 10
Real time
Alerts and event log
Email alerts reach staff and management in real time, and the full event log can be exported through the API.
Real-time email alerts
Event log export via the API
Reports filtered by user, key or site
EU
Hosted in the EU
Your data is held in Microsoft's Amsterdam data centre by default, inside the EU, with the region selectable if it needs to live elsewhere.
Microsoft data centre, Amsterdam by default
Region selectable on request
Continuous backup, 7-day point-in-time restore
Long-term retention: week, month, year
2FA
Two-factor authentication
Two-factor login protects both ends of the platform: identification at the cabinet and administrator sign-in to KeyWin6.
Two-factor login at the cabinet
Two-factor sign-in to KeyWin6
Combine badge, PIN or card (palm coming soon)
Resilience
Power cut or network down
Every cabinet has its own battery backup, so authorised users can still take and return keys through an outage. Events are stored locally and sync to KeyWin6 when the connection returns.
Built-in battery backup in every cabinet
Keys stay available through an outage
Local event store, synced on reconnection
Coming later in 2026
Active Directory Integration
Active Directory integration arrives later in 2026, linking KeyWin6 user management directly to your directory.
Directory-linked user management
Arriving later in 2026
Security
The audit trail is the product.
A key cabinet only earns its place if you can prove what happened. Every event in every cabinet is recorded, synced to the cloud and ready to export.
Full audit trail
Every removal and return recorded: who, which key, when, and for how long.
Role-based access
Each user sees only the keys their role allows, while trusted staff can hold wider standing access.
Key reservation
Reserve a key ahead of time, so it is waiting for the right person and nobody leaves empty-handed.
Email alerts
When a key is overdue or a door is left open, an email goes straight to the people who need to know.
Encrypted communication
Traffic between cabinets, the cloud and administrators is encrypted.
Tamper alerts
An alert the moment something is wrong, from a forced door to a key that has not come back.
Compliance reporting
Exportable reports filtered by user, key or site, ready for audit.
KeyWin6 audit trailLiveSample data
0Keys out
0Overdue
0Events today
Cyber Essentials [CONFIRM: certification held?]
GDPR [CONFIRM: wording of claim]Badge slots shown for layout only. Confirm every credential before go-live.
Why change
A pegboard cannot tell you who.
Hooks and log books work until the day you need an answer. Then the difference is stark.
The old wayWith Smartbox
Who has a key right now✕Ask around and check the bookLive on any screen, wherever you are
When it left and came back✕Only if someone wrote it downLogged automatically, to the minute
An overdue key✕Noticed when it is already a problemAn email alert as it happens
Proof for an audit✕A paper trail, if it existsAn exportable event log
Nights and weekends✕Keys in pockets and drawersIdentify at the cabinet, any shift
Partners
Built with Creone and Saab Combitech.
The hardware and the software each come from a specialist. Every cabinet is engineered and manufactured by Creone in Sweden, and the KeyWin6 platform behind it is developed and maintained in partnership with Combitech, part of the defence and security group Saab.
Cabinet engineering and manufacture
Creone
Creone have made key and valuables cabinets since 1979, with manufacturing and the head office in Tranås, Sweden. Every Smartbox cabinet is a Creone build: the same steel, strips and pegs that secure keys in some 50 countries, mainly in Europe.
1979Creone founded; made in Tranås, Sweden ever since
~50countries supplied with Creone key and valuables cabinets
Part of the Saab group
Saab Combitech
The KeyWin6 platform behind every Smartbox cabinet is developed and maintained in partnership with Combitech, part of the defence and security group Saab (founded 1937, around 28,000 employees worldwide). The same house delivers electronic warfare software to a NATO member state and works on the Swedish Armed Forces' digital command and control infrastructure.
1982Combitech founded within Saab
2,600+Combitech experts across 30+ locations in Sweden and Finland
Enterprise IoT cloud. Nothing to install.
KeyWin6 runs on Microsoft Azure IoT. Cabinets connect via outbound-only communication to the cloud service, so there is nothing to install on-site and no server to maintain. Administrators manage every cabinet, key and user from anywhere.
Secure cloud hosting on Microsoft Azure
Outbound-only communication, no inbound ports
Resilient infrastructure, maintained by Microsoft
Scales to thousands of keys across multiple sites
US$20bnMicrosoft's five-year security investment, announced 2021
35,000Engineers working on security under Microsoft's Secure Future Initiative (2025)
100tnSecurity signals Microsoft processes every day (2025)
90+Azure compliance offerings, the industry's largest portfolio
Outbound-only, encrypted443 TCP · TLS · 123 NTP
Secure sign-inany browser · TLS
No inbound ports are opened on your network: cabinets call out to the Azure IoT Hub and nothing calls in. Each customer runs on a separate SQL database, encrypted at rest with AES256 and backed up continuously with seven-day point-in-time restore. The KeyWin6 web front end and API are tested against the OWASP Top 10.
How it works
From key to audit report.
Any screen
On your desk. In your pocket.
The admin portal runs in any modern browser, so the same live picture follows you from the office to the site floor: every cabinet, every key, every user.
DesktopMobile
Live cabinet status, with keys out and keys in cabinet at a glance
Open any key to see where it lives and its full activity history
Manage users and access on the move
Customers
In their words.
Industries
Wherever keys change hands.
Sample
About us
Our people, across the UK.
Smartbox is deployed and supported by our own UK-based team, with field engineers reaching customers from Truro to Inverness.
UK coverageIllustrative
Field engineer coverageFull support desk, Birmingham
Rentals
One price. The whole system.
Rent Smartbox for one fixed monthly price: hardware on the wall, software in the cloud and support behind it, with everything kept current automatically.
System rental
One fixed monthly price.
Predictable from day one. Everything listed is in the price.
36-month agreement · hardware · software · support
Tell us how many keys you manage and the right cabinet picks itself. Choose your strips and entry option, and an exact quotation follows within one working day.
keys
427098126154210
Slide to the number of keys you have and we put you in the next cabinet up: 42, 70, 98, 126, 154 or 210.
Strip type
Unlocking strips: any peg lifts straight out, with every movement identified and logged.
Entry option
PIN code entry is included. A fitted RFID card reader adds £16 a month.
Getting started
From order to live.
01
Enquire
Tell us your key count and an exact quotation follows within one working day.
02
Install
Cabinets are wall-mounted and run from a standard 230 V supply. Installation is available at an additional cost.
03
Connect
The cabinet connects outbound-only to the Smartbox cloud, so nothing is installed on your network.
04
Load your users
Users, groups and access rules are set up in KeyWin6, in bulk through the web API if you have many.
Updates
Always current. Automatically.
Firmware and software updates arrive over the air: security fixes, improvements and new features, live on every cabinet without anyone lifting a finger.
KeyWin6 cloud
encrypted · over the air
Your cabinets
Remote demonstration
See your keys on the platform.
Tell us how you manage keys today and we will show you KeyWin6 live on a remote demonstration, with your own setup on screen. No visit, no obligation.
Not ready for a demo? Choose Talk to us on the form.
Music only, no narration. Use the Text button for a written version of the film.
02:14, on a security camera: one hook on a pegboard is empty, labelled Van 2. A key is missing. A pegboard cannot tell you who.
The Smartbox Systems logo. Then the real cabinet: a security platform with a cabinet attached.
A strip of locking pegs, every light red. An unauthorised attempt on peg 5 is refused and logged. John Smith identifies at the cabinet, the light turns green and peg 3 is released: held in place, and released only for the right person.
Every user identifies first: RFID badge and PIN, built in; MIFARE cards with AES128 encrypted card-to-reader communication; palm readers, coming soon. Every identification is logged.
The audit trail is the product. One event answers who, which key, when and for how long: K. Shaw took Courtesy car 4 out at 08:02 and returned it 45 minutes later.
Built in, not bolted on: role-based access, two-factor sign-in, key reservation and compliance reports.
Email alerts, the moment it matters: Site van 2 is overdue, and a door has been left open at Cabinet 1.
Connected, not exposed. Cabinets in Birmingham, London and Manchester connect outbound only to KeyWin6 on Microsoft Azure IoT. An inbound connection attempt is stopped at the edge of your network: no inbound ports, nothing to install on site.
Encrypted in transit and at rest: AES256 encryption at rest, a separate database per customer, tested against the OWASP Top 10, and hosted in the EU by default on Microsoft Azure.
Power cut, network down. The cabinet keeps working on its battery: John Smith takes a key, the events are stored locally and synced to KeyWin6 when the network returns. Still working, still logging.
On your desk and in your pocket: the same live picture in any modern browser. Site van 2 comes back, and the laptop and the phone update at the same moment.
Built with Creone, making cabinets in Sweden since 1979, and Saab Combitech, part of the defence and security group Saab.
Some of our customers: Biffa, Cadbury, Amazon, Netflix, Bank of America, Go-Ahead Group, Marriott, Group 1 Automotive, Arnold Clark, Walsall Council, Hackney Council, Lookers, AG Barr, Vertu, Essex & Suffolk Water, Heathrow, Wates, Tom Hartley Jnr, Jaguar Land Rover, Scania, University of Sheffield, Tate & Lyle Sugars, Staffordshire Police and Mitie.
Who took the Van 2 key? The audit trail answers: at 02:14, D. Hayes removed Site van 2. Know exactly who took which key.
Book a remote demo. No visit, no obligation. smartboxsystems.co.uk