Intelligent, digital key management technology

Know exactly who took which key.

Smartbox is a security platform with a cabinet attached, not a cabinet with software bolted on. Every cabinet is a connected IoT device, managed in the cloud.

  • High-security cabinets
  • Swedish engineering, UK support
  • Hosted on Microsoft Azure
Read the film as text
  1. 02:14, on a security camera: one hook on a pegboard is empty, labelled Van 2. A key is missing. A pegboard cannot tell you who.
  2. The Smartbox Systems logo. Then the real cabinet: a security platform with a cabinet attached.
  3. A strip of locking pegs, every light red. An unauthorised attempt on peg 5 is refused and logged. John Smith identifies at the cabinet, the light turns green and peg 3 is released: held in place, and released only for the right person.
  4. Every user identifies first: RFID badge and PIN, built in; MIFARE cards with AES128 encrypted card-to-reader communication; palm readers, coming soon. Every identification is logged.
  5. The audit trail is the product. One event answers who, which key, when and for how long: K. Shaw took Courtesy car 4 out at 08:02 and returned it 45 minutes later.
  6. Built in, not bolted on: role-based access, two-factor sign-in, key reservation and compliance reports.
  7. Email alerts, the moment it matters: Site van 2 is overdue, and a door has been left open at Cabinet 1.
  8. Connected, not exposed. Cabinets in Birmingham, London and Manchester connect outbound only to KeyWin6 on Microsoft Azure IoT. An inbound connection attempt is stopped at the edge of your network: no inbound ports, nothing to install on site.
  9. Encrypted in transit and at rest: AES256 encryption at rest, a separate database per customer, tested against the OWASP Top 10, and hosted in the EU by default on Microsoft Azure.
  10. Power cut, network down. The cabinet keeps working on its battery: John Smith takes a key, the events are stored locally and synced to KeyWin6 when the network returns. Still working, still logging.
  11. On your desk and in your pocket: the same live picture in any modern browser. Site van 2 comes back, and the laptop and the phone update at the same moment.
  12. Built with Creone, making cabinets in Sweden since 1979, and Saab Combitech, part of the defence and security group Saab.
  13. Some of our customers: Biffa, Cadbury, Amazon, Netflix, Bank of America, Go-Ahead Group, Marriott, Group 1 Automotive, Arnold Clark, Walsall Council, Hackney Council, Lookers, AG Barr, Vertu, Essex & Suffolk Water, Heathrow, Wates, Tom Hartley Jnr, Jaguar Land Rover, Scania, University of Sheffield, Tate & Lyle Sugars, Staffordshire Police and Mitie.
  14. Who took the Van 2 key? The audit trail answers: at 02:14, D. Hayes removed Site van 2. Know exactly who took which key.
  15. Book a remote demo. No visit, no obligation. smartboxsystems.co.uk
  16. All names and events shown are sample data.

Some of our customers

    The range

    One platform, a cabinet for every scale.

    Every cabinet is built from 14-key strips, so one system scales from a single strip to several thousand keys across networked cabinets. The hardware is engineered in Scandinavia by Creone and integrated into the Smartbox platform. Rental guide prices for every size are in the configurator.

    120 keys

    Ask about this size

    Fixed or pooled. You choose.

    Two ways to set up your pegs. Fixed gives every peg a numbered home, so peg 3 only ever comes back to slot 3. Pooled lets a peg live in any linked cabinet, so a key taken in Birmingham can be handed back in London or Manchester, and the cloud keeps every site in step.

    Locking or unlocking pegs.

    Two peg types for the same strips. Locking pegs are held in place and release only for the right person. Unlocking pegs lift straight out, with every movement still identified and logged. Try it: click a peg below.

    Entry options to suit any business

    A badge on a lanyard, a MIFARE card, a PIN, and soon a palm: every user identifies before a single key moves, and each identification lands in the audit trail.

    Biometric Coming soon

    Palm readers

    Touchless palm vein recognition from 15 to 45 cm, authenticating in under 0.35 seconds. A palm cannot be lent to a colleague or left in a jacket pocket.

    • Up to 5,000 palm templates, 1:N matching
    • IP66, IK07 vandal resistant, cast aluminium
    • Outdoor rated, minus 26 to 55 °C
    MIFARE

    Cidron card readers

    Contactless identification for the smart cards your staff already carry, from MIFARE Classic to DESFire EV3, with AES128 encrypted card-to-reader communication.

    • 13.56 MHz, Classic, Plus, DESFire EV1 to EV3
    • OSDP Secure Channel, Wiegand, RS485
    • IP65, with or without PIN keypad, Swedish design
    Built in

    RFID and PIN

    Every intelligent cabinet supports RFID badge and PIN login as standard, with the branded readers as upgrades where sites need more.

    • Standard on the intelligent range
    • 13.56 MHz or 125 kHz card reader accessory

    Connected, not exposed

    Every cabinet connects to KeyWin6 over outbound-only communication to the Azure cloud. No inbound ports, no local server. And the platform plugs into the systems you already run.

    Web API

    Open API

    Create, update and remove users and groups from your own systems with the KeyWin6 web API, in bulk when you need to. The same API connects third-party access control, including ASSA ARX.

    • Users, groups and access over REST
    • Batch create, update and delete
    • Third-party access control, incl. ASSA ARX
    SAML 2.0

    Single sign-on

    Administrators sign in through your own identity provider using SAML 2.0. Every authentication request KeyWin6 sends is signed, and password login for administrators can be switched off.

    • SAML 2.0, SP-initiated
    • Signed authentication requests
    • Optional lockout of password login
    Azure IoT

    Native IoT

    Each cabinet carries the Azure IoT Hub SDK and speaks over one outbound, encrypted channel. Firmware and new features arrive several times a year, signed and verified.

    • Azure IoT Hub SDK on every cabinet
    • AMQP over WebSockets, ISO/IEC 19464
    • Outbound only: 443 TCP TLS, 123 NTP
    • Signed, verified firmware updates
    Azure

    Cloud security

    The platform is scanned and monitored continuously in Azure, with quick feedback whenever a risk is identified.

    • Azure Security Center resource scanning
    • Azure Monitor and alerts
    • keywin.app SSL, DigiCert Secure Site Pro SAN
    • Web front end and API tested against OWASP Top 10
    Real time

    Alerts and event log

    Email alerts reach staff and management in real time, and the full event log can be exported through the API.

    • Real-time email alerts
    • Event log export via the API
    • Reports filtered by user, key or site
    EU

    Hosted in the EU

    Your data is held in Microsoft's Amsterdam data centre by default, inside the EU, with the region selectable if it needs to live elsewhere.

    • Microsoft data centre, Amsterdam by default
    • Region selectable on request
    • Continuous backup, 7-day point-in-time restore
    • Long-term retention: week, month, year
    2FA

    Two-factor authentication

    Two-factor login protects both ends of the platform: identification at the cabinet and administrator sign-in to KeyWin6.

    • Two-factor login at the cabinet
    • Two-factor sign-in to KeyWin6
    • Combine badge, PIN or card (palm coming soon)
    Resilience

    Power cut or network down

    Every cabinet has its own battery backup, so authorised users can still take and return keys through an outage. Events are stored locally and sync to KeyWin6 when the connection returns.

    • Built-in battery backup in every cabinet
    • Keys stay available through an outage
    • Local event store, synced on reconnection
    Coming later in 2026

    Active Directory Integration

    Active Directory integration arrives later in 2026, linking KeyWin6 user management directly to your directory.

    • Directory-linked user management
    • Arriving later in 2026

    Security

    The audit trail is the product.

    A key cabinet only earns its place if you can prove what happened. Every event in every cabinet is recorded, synced to the cloud and ready to export.

    Full audit trail

    Every removal and return recorded: who, which key, when, and for how long.

    Role-based access

    Each user sees only the keys their role allows, while trusted staff can hold wider standing access.

    Key reservation

    Reserve a key ahead of time, so it is waiting for the right person and nobody leaves empty-handed.

    Email alerts

    When a key is overdue or a door is left open, an email goes straight to the people who need to know.

    Encrypted communication

    Traffic between cabinets, the cloud and administrators is encrypted.

    Tamper alerts

    An alert the moment something is wrong, from a forced door to a key that has not come back.

    Compliance reporting

    Exportable reports filtered by user, key or site, ready for audit.

    KeyWin6 audit trail Live Sample data
    0Keys out
    0Overdue
    0Events today

      Why change

      A pegboard cannot tell you who.

      Hooks and log books work until the day you need an answer. Then the difference is stark.

      The old way With Smartbox
      Who has a key right now Ask around and check the book Live on any screen, wherever you are
      When it left and came back Only if someone wrote it down Logged automatically, to the minute
      The wrong key leaving Nothing stops it Only authorised keys release (locking strips)
      An overdue key Noticed when it is already a problem An email alert as it happens
      Proof for an audit A paper trail, if it exists An exportable event log
      Nights and weekends Keys in pockets and drawers Identify at the cabinet, any shift

      Partners

      Built with Creone and Saab Combitech.

      The hardware and the software each come from a specialist. Every cabinet is engineered and manufactured by Creone in Sweden, and the KeyWin6 platform behind it is developed and maintained in partnership with Combitech, part of the defence and security group Saab.

      Cabinet engineering and manufacture

      Creone

      Creone have made key and valuables cabinets since 1979, with manufacturing and the head office in Tranås, Sweden. Every Smartbox cabinet is a Creone build: the same steel, strips and pegs that secure keys in some 50 countries, mainly in Europe.

      • 1979Creone founded; made in Tranås, Sweden ever since
      • ~50countries supplied with Creone key and valuables cabinets

      Part of the Saab group

      Saab Combitech

      The KeyWin6 platform behind every Smartbox cabinet is developed and maintained in partnership with Combitech, part of the defence and security group Saab (founded 1937, around 28,000 employees worldwide). The same house delivers electronic warfare software to a NATO member state and works on the Swedish Armed Forces' digital command and control infrastructure.

      • 1982Combitech founded within Saab
      • 2,600+Combitech experts across 30+ locations in Sweden and Finland

      Enterprise IoT cloud. Nothing to install.

      KeyWin6 runs on Microsoft Azure IoT. Cabinets connect via outbound-only communication to the cloud service, so there is nothing to install on-site and no server to maintain. Administrators manage every cabinet, key and user from anywhere.

      • Secure cloud hosting on Microsoft Azure
      • Outbound-only communication, no inbound ports
      • Resilient infrastructure, maintained by Microsoft
      • Scales to thousands of keys across multiple sites
      • US$20bnMicrosoft's five-year security investment, announced 2021
      • 35,000Engineers working on security under Microsoft's Secure Future Initiative (2025)
      • 100tnSecurity signals Microsoft processes every day (2025)
      • 90+Azure compliance offerings, the industry's largest portfolio

      No inbound ports are opened on your network: cabinets call out to the Azure IoT Hub and nothing calls in. Each customer runs on a separate SQL database, encrypted at rest with AES256 and backed up continuously with seven-day point-in-time restore. The KeyWin6 web front end and API are tested against the OWASP Top 10.

      How it works

      From key to audit report.

      Any screen

      On your desk. In your pocket.

      The admin portal runs in any modern browser, so the same live picture follows you from the office to the site floor: every cabinet, every key, every user.

      The portal on desktop: a cabinet's key list beside one key's location, holder and activity history
      Desktop
      The portal on a phone: the key list with each key's holder and position
      Mobile
      • Live cabinet status, with keys out and keys in cabinet at a glance
      • Open any key to see where it lives and its full activity history
      • Manage users and access on the move

      Customers

      In their words.

      Industries

      Wherever keys change hands.

      Sample

      About us

      Our people, across the UK.

      Smartbox is deployed and supported by our own UK-based team, with field engineers reaching customers from Truro to Inverness.

      Rentals

      One price. The whole system.

      Rent Smartbox for one fixed monthly price: hardware on the wall, software in the cloud and support behind it, with everything kept current automatically.

      System rental

      One fixed monthly price.

      Predictable from day one. Everything listed is in the price.

      36-month agreement · hardware · software · support

      Get a rental quote See the guide price for your size

      Installation available at an additional cost.

      What is included

        Configurator

        Build your Smartbox.

        Tell us how many keys you manage and the right cabinet picks itself. Choose your strips and entry option, and an exact quotation follows within one working day.

        keys

        Slide to the number of keys you have and we put you in the next cabinet up: 42, 70, 98, 126, 154 or 210.

        Strip type

        Unlocking strips: any peg lifts straight out, with every movement identified and logged.

        Entry option

        PIN code entry is included. A fitted RFID card reader adds £16 a month.

        Getting started

        From order to live.

        01

        Enquire

        Tell us your key count and an exact quotation follows within one working day.

        02

        Install

        Cabinets are wall-mounted and run from a standard 230 V supply. Installation is available at an additional cost.

        03

        Connect

        The cabinet connects outbound-only to the Smartbox cloud, so nothing is installed on your network.

        04

        Load your users

        Users, groups and access rules are set up in KeyWin6, in bulk through the web API if you have many.

        Updates

        Always current. Automatically.

        Firmware and software updates arrive over the air: security fixes, improvements and new features, live on every cabinet without anyone lifting a finger.

        Remote demonstration

        See your keys on the platform.

        Tell us how you manage keys today and we will show you KeyWin6 live on a remote demonstration, with your own setup on screen. No visit, no obligation.

        Not ready for a demo? Choose Talk to us on the form.