Cash Office Setup: Layout, Security and Daily Workflow

By Zynthio. Published 5 October 2026. Editorial policy

General information for UK hospitality operators, not legal advice. If something here is wrong or out of date, the editorial policy explains how to report it.

A working cash office standard for UK venues: who may enter, which safe to use, how money moves from till lift to banking, and when to open a variance.

A cash office is the secured room where a venue counts its takings, holds money between count and banking, and makes up the floats that go back out to the tills. A cash office works when three things are settled in writing before trade starts: who may enter, how money moves from drawer to bank, and what record each movement leaves behind.

What a cash office is for, and who may enter

Keep the room to those three jobs. Stock paperwork, rota printing and the spare cellar keys each give somebody another reason to open the door. Site the room away from the trading floor and away from any external door or window facing the street. It needs a solid door that locks from the inside while a count is in progress, no line of sight from customer areas, good lighting, a counting surface and a lockable drawer. Nothing on the door should announce what the room is.

Access is a named list rather than a job title. Record who may enter alone, who may enter only with a second person, and who holds nothing, and keep that list with the key register. Cash handling is a workplace risk like any other. The Health and Safety at Work etc. Act 1974 places a legal duty on employers to protect workers so far as is reasonably practicable, and HSE states that health and safety law applies to risks from work-related violence, just as it does to other risks from work. Under regulation 3 of the Management of Health and Safety at Work Regulations 1999, every employer shall make a suitable and sufficient assessment of the risks to the health and safety of employees at work, and where the employer employs five or more employees the significant findings must be recorded. That regulation extends to England, Wales and Scotland, so a Northern Ireland site is outside its extent and should check the Northern Ireland position.

Choosing safes, time delays and drop boxes

Two safes suit most single sites. A deposit safe takes till lifts through a one-way chute and cannot be opened by the person making the drop. A main safe holds floats, the banking bag and the change order, and is opened only during the office routine. Where only one safe is affordable, a deposit slot in its door does most of the same work.

A duty manager who can secure money mid-shift without holding the main combination cannot be forced to open it, and a chute drop ends the argument about whether a lift reached the safe.

Time-delay locks hold the door shut for a set period after the correct code is entered, and a delay only deters if it is advertised. A notice stating that the safe runs on a time delay and holds a limited amount is part of the control rather than decoration.

Fix the safe to the structure of the building rather than to floorboards, keep it out of sight of any window, and set the maximum the office will hold from the venue's own insurance schedule and banking frequency.

Floats, change orders and till openings

A float belongs to a till, not to a person. Fix the value and the denomination mix, weight it towards coin and small notes, and seal each float in a numbered bag with a slip showing the make-up and who counted it. At handover the incoming operator counts the drawer in front of the outgoing one and both sign, which ends the claim that a shortage was inherited.

A float is never used to pay a supplier, settle a taxi or advance wages: payouts go on a payout slip, are entered against the day's cash-up, and carry a receipt.

Change ordering runs off trade rather than off a hunch. Take the last four matching trading days, look at coin and small-note usage rather than total takings, and order enough for the coming week plus one busy service. Order too little and the bar breaks notes it needs for float; order too much and the office sits above its holding limit. The order arrives into the main safe, is counted in by two people, and is entered as a movement rather than folded into the float.

The daily flow from till lift to banking

Set a lift threshold for each till and lift at it, not at closing time. A drawer that never holds more than the threshold limits what a robbery or a miscount can cost, and keeps the end-of-night count accurate.

Have the operator declare the drawer total before the office counts it. A figure written down before the count turns a difference into information; a count that already knows the expected number tends to arrive at it. Takings by tender come off the till at the same time, and reading those EPOS figures the same day is what catches a drifting card-to-cash split while the shift can still be recalled.

Banking is a separate decision from the count. Fix the days, fix who goes, and record the deposit reference the same evening.

Two-person rules and separation of duties

One person should never be able to complete a full cycle alone. The rule that does most of the work is that nobody witnesses their own count: one person counts, a second named person watches the denomination sheet being written, and both sign it. Separation of duties settles the rest. Whoever counts does not approve the cash-up, whoever carries the bag to the bank does not reconcile the account, and keys and combinations sit with different people where the safe allows it.

Two-person working is a safety control as much as a fraud control. Counting alone behind a locked door, late at night, with the takings on the desk, is lone working, and HSE lists managing lone working by making arrangements to keep in touch with people who work away from their base among its control measures. In a venue that means a check-in time, somebody who knows the count has started, and an alarm within reach.

Tolerances and how a variance is investigated

A tolerance is the point at which a difference stops being noise and becomes a job. Set it as a cash figure for each till and session, low enough that a genuine error surfaces the same day. Banking is the exception: a deposit either agrees to the slip or it does not, so the tolerance there is zero. Investigate in a fixed order, because a fixed order stops the conversation starting with a person.

1. Recount the drawer and the float in denominations, with a different witness.
2. Check payouts, petty cash and any change issued from the safe during service.
3. Read the Z-read for voids, refunds, no-sales and training-mode transactions and match each to a slip.
4. Check the tender split for a card sale keyed as cash, or an order settled twice.
5. Check the change order and any transfer between tills that nobody wrote down.
6. Only then look at who was on, and whether one name sits behind a run of one-way differences.

Pattern tells more than size. A single large difference is usually an entry error, while a run of small shortages on the same till, operator or day of the week is the shape worth pulling apart, and it rewards the discipline a venue already applies to till reconciliation and to weekly stock counts. Write the outcome on the cash-up, name whoever investigated it, and keep the note with the count sheet.

Layout, CCTV and key control

Layout is a control rather than decoration. HSE guidance on preventing violence at work treats the design of the workplace as something that can increase the risk of violence, and names good lighting that removes blind spots alongside security measures, like CCTV, trained security personnel, body-worn cameras, alarm systems, building security. In a cash office that means a camera covering the counting surface and the safe door rather than the corridor, and a chair placed so the counter faces the door. Footage earns its place only when it is kept long enough to be useful, so record the retention period and who can export a clip. HSE also asks employers to keep records of incidents and examine them regularly to understand if your control measures are working.

Key control is the weakest link in most venues. Number the keys, hold them in a cabinet with its own code, sign them in and out in a register, and stop keys leaving the building. A leaver hands back a key and the combination changes the same day, and spares live off site rather than in the drawer beside the safe.

Banking runs deserve the same thought: vary the time and the route, use a plain bag, and send two people or a cash-in-transit carrier rather than the same person every Tuesday.

Where Zynthio fits

Cash office paperwork is a business record as well as an operational one. VAT records must be kept for six years, and a limited company must keep records for 6 years from the end of the last company financial year they relate to, with till rolls named among the records of money received. Count sheets, payout slips and variance notes sit inside that duty.

Zynthio holds multiple safes per site plus rolling till floats tied to a specific EPOS terminal, and writes one append-only ledger of typed rows, so a correction is an adjustment rather than an edit. Counts carry a denomination breakdown that moves no money, under a rule that nobody witnesses their own count. Banking is tracked with a deposit reference, days-since-banking and maximum holding alerts, and a £5 variance tolerance applies by default with zero on banking. The daily cash-up runs per site with takings by tender, payouts, covers, labour from the rota and a Z-read photo, rolled up weekly and emailed on Monday. There is no bank feed and no statement import, so the bank side is still agreed by hand. What that covers in full is set out on the cash management software page.

See how Zynthio handles this