Operations · Key Control
A key is either in a known place or it is an incident waiting.
Valet teams often have a key system that works until volume rises, a supervisor leaves, or somebody makes one reasonable exception. The system is not the board or lockbox. It is the rule that keeps custody knowable through every transfer.
The standard
A stranger to the shift should be able to locate any active key without asking who last touched it.
That requires one source of truth, one normal home for each key, and a visible record when a key leaves that home. Memory, pockets, and verbal borrowing cannot be part of the control design.
Choose the failure
Every storage method trades speed for a different risk
Know what your physical system is good at
Board
Fast and visible
Easy to scan and audit, but exposure rises if the board is accessible or labels reveal too much.
Lockbox
Secure and deliberate
Stronger access control, but shared codes, crowding, and slow relocking can erode the design.
Fastest for one runner
Useful only as a recorded, temporary transfer. Unrecorded pocket custody vanishes when the runner moves.
Vehicle
Tempting shortcut
Leaving keys with a staged vehicle couples two assets and makes a moved car look like a lost key.
→No container fixes an undocumented transfer. Control lives in the movement record.
Write rules for the exception, not only the normal case
Most losses begin with a sensible deviation: a guest is waiting, the board is full, or another valet needs the key now.
Informal transfer
Invisible- Hand the key to the nearest runner
- Plan to remember the new location
- Search people when the guest returns
Controlled transfer
Traceable- Record who received it and why
- Set the temporary location
- Close the transfer when it returns
Run two audits. A continuous audit asks whether every key movement is recorded as it happens. A boundary audit happens at shift change and close: count active sessions, count controlled keys, reconcile exceptions, and resolve any mismatch before responsibility changes.
Keep key labels minimally identifying. A key control system should help the team match custody to a session without turning a lost tag into a guide to the vehicle. Access to storage should also be role-based in practice, not merely written in a binder.
If a key cannot be found, stop casual searching quickly. Assign one lead, preserve the last known record, control guest communication, and follow the operation's incident and insurance process. The disciplined response matters because scattered searching destroys the very timeline needed to resolve the event.
