Controlled dispensing on a harm reduction vending machine is a promise that every unit leaves the cabinet one at a time, against a rule, and is counted. The user cannot reach the stock or choose how much to take. The machine decides whether to release, how many units, and to whom, and it writes a record each time. This page explains the mechanism, compares the access methods real programs use, sets out how per-vend and per-period limits work, and covers what the machine should do at the limit, when it is offline, and when stock does not add up.
Quick answer
- No self-selection. Stock sits in a locked cabinet; a coil or cell releases a fixed number of units into a delivery bin per vend.
- Access methods range from none to registration: an open button, a token, a ZIP or postcode, a code from staff or a phone, a QR scan, or a program card and PIN.
- Two kinds of limit. A per-vend cap needs no identity. A per-week or per-month quota needs a code or card to count against.
- At the limit, redirect, never refuse. Show when more is available and where else to go. Keep naloxone open or allow it above the cap.
- Offline is a design decision. Code- and quota-checked releases pause offline on our builds; open selections can keep working.
- Every release is a record: item, machine, time and state, reconciled against what was loaded.
What controlled dispensing means mechanically
A harm reduction machine and a snack machine look alike from the front. The difference is in what the machine will and will not let happen.
- Locked stock. Supplies sit behind a locked door on spiral coils or in cells. Only authorised staff open the door to restock.
- One unit per release. Each coil position is pitched to the pack as loaded, so one rotation pushes one carton, kit or sharps container forward. Our compact wall-mount machines take narrow coils of 40–50 mm and wide coils of 70–90 mm in the same cabinet, so a naloxone carton and a slim test-strip pack can share a machine.
- Delivery bin, not a shelf. The item drops into a bin the user can reach. The stock above it stays out of reach.
- A decision before the motor turns. The machine checks the rule first: a button press, a valid code, a card with quota left. If the check fails, nothing moves.
- Vend confirmation. On a plain coil position the machine knows the motor turned, not that the pack fell. Builds with an elevator carry a drop sensor that confirms the item reached the delivery bin. Choose the method at quotation. Our dispense reliability guide explains the options.
- Empty positions stop being offered. On our machines, a selection that runs out is disabled automatically until it is restocked, so users are not left pressing a button for nothing.
Victoria’s tender for naloxone dispensing machines put the requirement in one line, as quoted in our harm reduction vending post: stock must be dispensed “without any ability for self-selection”.
Why programs want controlled dispensing
- Fair share of a limited stock. One person cannot empty a machine that serves a whole neighbourhood.
- Counting. Every release is a data point for the funder: what, where, when.
- Child deterrence. NSW’s needle and syringe guideline requires dispensing chutes to be placed “at a height to deter access by children”, with a disposal bin nearby. A locked cabinet with a code adds a second barrier.
- Security. Stock behind a locked door is harder to steal in bulk than stock on a shelf.
Access methods compared
| Access method | What the user does | Published program using it | What it allows | Friction |
|---|---|---|---|---|
| Anonymous push button | Presses a button or taps a selection | Half of the 12 US syringe services programs interviewed by RTI/CDC ran machines needing no information | Per-vend cap only | None |
| Token | Inserts a token handed out by a service | Scotland: residents of four homeless accommodation services in Edinburgh and Glasgow get tokens from project staff (Scottish Housing News, 2021). France: partner services hand out tokens, and exchange machines return a token for a used syringe (SAFE guide, 2021) | Rationing by how many tokens are handed out | Low; tokens can be lost or traded |
| ZIP or postcode entry | Types a ZIP code, then picks an item | New York City: “You must enter your ZIP code to access the supplies”; anyone may use the machines | A geographic signal; very weak limit | Seconds |
| Keypad code | Types a numeric code | Naloxone Texas machines: users punch in a code and collect from the tray (Be Well Texas, 2025) | A per-code limit if codes are personal; none if one code is shared | Low |
| Staff-issued code or QR | Gets a code from staff, or scans a QR code on the machine | Baltimore: a code from Charm City Care Connection staff, or by scanning the QR code on the machine, where “no personal information is required” | Per-code quota | Low to medium |
| Code after a sign-up survey | Registers by phone or in person, answers a short survey, receives a personal code | Caracole, Cincinnati: one access per week for 90 days, then re-register | Per-person, per-week quota and a re-enrolment point | Medium; registration only in office hours |
| Phone-verified code | Registers on a web page with a mobile number or email, receives a code | HIVConnect and MyTest (HIV self-test kits, Australia), which run on our machines | Per-person quota across all machines | Medium; needs a phone |
| Program card and PIN | Enrols at the service with ID, then swipes a card and enters a PIN | Trac-B Exchange, Las Vegas: anyone 18+ with some form of ID can sign up; “Participants will have their own unique card/pin number” | Per-person quota; unique-user counts | High; in-person enrolment |
Two patterns stand out. First, codes are what users tend to prefer. In a 2025 qualitative study in rural Kentucky, people who use drugs and program staff ranked codes first or second because they cannot be lost like cards or tokens, and they worried that police could access fingerprint records (Marschke et al., 2025). Biometric login is available on our machines only as a priced option, and for this use we would advise against it. Second, the identity can stay with the service, not the machine. In every code-based design above, the machine sees a number, not a name.
Per-vend limits and per-period quotas
A limit has three parts: how many units per release, how many per person per period, and whether the count spans one machine or the whole program.
| Limit | Example | What it needs | What it stops |
|---|---|---|---|
| Per-vend cap | Victoria’s naloxone tender asked for at most two units per transaction and no limit on the number of transactions (as summarised in our harm reduction post) | Nothing; set in the machine | One press emptying a coil |
| Per-week quota | Clark County, Nevada: naloxone “limited to one kit (containing two doses) per client” each week, against a registered swipe card (Allen et al., 2022) | A card or code | Repeat visits draining stock |
| Weekly access with expiry | Caracole: one access per week for 90 days, then sign up again | A personal code with an end date | Stale registrations; creates a check-in |
| Per-month quota | MyTest: up to four free HIV self-test kits per person per month, enforced by the cloud platform | A phone-verified code | Stockpiling across machines |
Set the numbers from need, not from fear. NSW’s guideline says “there is no policy basis for restricting the number of sterile needles and syringes provided”, and that clients should receive a sufficient amount. A tight weekly syringe quota can push people towards reusing or sharing equipment, which is the harm the machine exists to prevent. Where policy says supply should be sufficient, use a per-vend cap to protect the stock and leave the period open.
Because quotas on our code-based builds are counted in the cloud against the code, a person who reaches the limit at one machine has reached it at every machine in the program. That is usually what a funder wants, and occasionally what a user resents, so explain it on the screen.
What happens when a limit is hit
The worst outcome is a person in front of a machine that says “Denied”. Design the limit screen as carefully as the dispense screen:
- Say when. “Your next pack is available from Tuesday” is better than a refusal.
- Say where else. Show the nearest service with its opening hours, a phone line, and a QR code to a map of other supply points. NSW requires chute signage to give the nearest primary outlet and a help line in any case.
- Never block naloxone. Keep it outside the quota, or allow a release above the cap and record that it happened. Someone asking for a second kit may be standing next to a person who has stopped breathing.
- Allow a staff override. An outreach worker with an override code can release supplies for someone who has hit the cap, and the record shows who authorised it.
- Watch the pattern. RTI’s interviews found two programs where non-participants took naloxone from the machine for training. A spike against one code is a conversation for staff, not an automatic ban.
Mixed machines: naloxone open, syringes behind a code
Many programs want one cabinet with different rules for different products. RTI/CDC reported that two of the 12 programs ran naloxone-only machines that needed no information, while their machines holding other harm reduction equipment required registration. The same split can live inside one machine:
| Selection | Typical rule | Reason |
|---|---|---|
| Naloxone | Open button, per-vend cap of one or two cartons | Speed in an emergency; anyone may need it |
| Fentanyl or xylazine test strips | Open, or code with a generous quota | Low cost per unit; legal status varies by state |
| Syringe packs and sharps containers | Code or card, per-vend cap; period quota only where policy allows | Stock security and child deterrence |
| Wound care, hygiene, safer-sex supplies | Open | Low risk, builds goodwill |
In the US, funding now shapes this too. SAMHSA’s Dear Colleague letter of 24 April 2026 says no HHS funding can be used to buy or distribute “syringes or needles used to inject illicit drugs”, safer smoking supplies, or fentanyl, xylazine and medetomidine test strips “intended for use by people using drugs”. Naloxone and nalmefene, and “distribution mechanisms (e.g., bags or metal boxes/containers)” for them, remain fundable. A program paying for naloxone with federal money and for syringes with settlement or local funds may need dispense reports split by selection, so it can show which money bought which units. Specify that report up front.
Offline behaviour: decide it before installation
Every connected machine will lose its link at some point. What it does then is a design choice, and it differs by access method.
| Release method | Behaviour on KioskForce builds while offline |
|---|---|
| Open free vend selection | Can keep dispensing; records are buffered on the machine and synced when the link returns |
| Code or QR checked against the cloud | Pauses: the code cannot be validated, so the selection is unavailable |
| Per-person quota | Pauses: the quota is held in the cloud. Offline dispensing that reconciles later is not available today |
| Any method | The dashboard raises an offline alert after the set window |
So decide which selections must keep working when the network is down. A common answer is that naloxone stays open and code-controlled items pause. Then decide what the screen says: “Code items unavailable, try again shortly”, the nearest service and its hours, and a phone number. Our machines carry 4G cellular as well as WiFi, so the machine does not depend on a host site’s network, passwords or firewall.
Audit trail and restock reconciliation
Each release on our machines writes an order record: items, quantities, machine, location, time, order state and receipt ID. Answers to any on-screen questions can sit alongside it (see on-screen questions). Identity is attached only if your rule requires it; on code-based builds the record carries the code, not a name.
Reconciliation is simple arithmetic, done at each restock:
units loaded at the last visit − units recorded as dispensed = units that should be in the machine
Count what is physically there. If the count is lower than expected, look for jammed packs, failed vends recorded as successful on motor-only positions, or a break-in. If it is higher, look for vends that failed to drop. Staff use the restocking interface to record stock and expiry dates, and the cloud dashboard shows live stock with low-stock alerts, so the restock route goes to the machine that needs it. Coin machines bring extra duties: NSW requires revenue collection to meet local health district audit and money-handling policy.
Keep the audit trail useful without making it dangerous. Store codes, not names; set a retention period; and limit who can export the data.
How KioskForce builds controlled dispensing
The platform is the one already running on Australian public health programs. On HIVConnect (six states and territories), a user answers a few questions on the program website, receives an SMS code, and scans or enters it at the machine; per-user quotas apply and an optional follow-up survey collects experience data. On MyTest (16 NSW locations), users register with a mobile number or email and can take up to four free kits a month. For a health agency we built a free-vend system with a monthly quota, with a reusable access code issued at first sign-up, published at US$11,000 to build and about US$200 a month. A charity project added a map finder that helps users locate the nearest machine.
We have not supplied machines to a syringe, naloxone or test-strip program. Those programs need the same release logic, quotas and records, and we build them to the requirement you state: access method per selection, per-vend cap, quota and period, limit-screen text, offline behaviour and report fields. Hardware and software are designed in-house; the cloud platform on the HIV programs was built with our Australian software partner, Vending on Track.
What to specify if you are buying one
- Products and packed dimensions, selection by selection.
- Access method per selection: open, token, ZIP or postcode, code, QR, or card and PIN.
- Per-vend cap and any period quota, and whether quotas span every machine.
- The limit screen: what it says, where it sends people, and whether naloxone sits outside the quota.
- Offline behaviour per selection, and the out-of-service message.
- Vend confirmation method (motor-only or drop sensor) for each position.
- Records and reports: fields, retention, who can export, and any split by funding source.
The compact wall-mount machine is published at about US$800–1,500 per unit; floor-standing models start at about US$1,200. Free vend, codes and cashless options are on payments. Lead times run about 4–6 weeks for a modified standard machine and 8–12 weeks for a custom design. We sell direct and, in some regions, through local distributors. On-site installation is optional and, in some regions, provided through a local distributor, who then handles warranty and service; our support is by email.
Where controlled dispensing is the wrong answer
- Where policy says supply must be unrestricted. Keep a per-vend cap for stock security, but do not add a period quota for syringes where the guideline says there is no basis for one.
- Where registration will keep people away. If the target group will not sign up, an open machine with a per-vend cap reaches more people than a perfect quota no one uses.
- Where nobody can answer the phone. Codes and overrides need a service behind them. Without one, every lost code becomes a locked-out user.
- Where the network is unreliable and every item is code-controlled. The machine will spend its outages dispensing nothing. Open the life-saving selections or improve connectivity first.
Frequently asked questions
What does controlled dispensing mean on a harm reduction vending machine?
It means the stock stays locked inside the cabinet and the user cannot choose or reach individual items. Each release is triggered by the machine, pushes a set number of units from a coil or cell into a delivery bin, and is written to a record with the item, machine and time. The machine can refuse a release when a code is wrong, a quota is used up or a selection is empty. That is different from an open shelf or an honesty box, where anyone can take everything at once and nothing is counted.
Should a harm reduction vending machine require registration?
Only where the program needs a per-person limit or a count of unique users, and the people it serves will accept it. A US study of 12 syringe services programs found that half ran low-barrier machines needing no information at all, and two of them kept naloxone open while requiring registration for machines holding other equipment. Registration can be light: a code issued by phone or by scanning a QR code, with no name on the machine. In New South Wales, the needle and syringe program guideline says personal information is not required to provide injecting equipment.
What is the difference between a per-vend limit and a per-period quota?
A per-vend limit caps how many units one release can give, for example one naloxone carton or one syringe pack per press. It needs no identity, but a person can simply press again. A per-period quota caps how many units one code or card can take in a day, week or month, so it needs something to count against. In Clark County, Nevada, naloxone was limited to one two-dose kit per client per week against a registered swipe card. Most programs use a per-vend limit everywhere and add a quota only where stockpiling is a real problem.
What should the machine do when someone reaches their limit?
Tell them plainly when they can take more, and where else they can get supplies now: the nearest service with its hours, a phone number, and a QR code to a map of other machines. Never show a bare refusal. For naloxone, consider leaving it outside the quota altogether, or allowing a release above the limit with a note recorded, because the person at the machine may be about to respond to an overdose. A staff override code lets an outreach worker release supplies for someone who has hit the cap.
Can one machine dispense naloxone freely and keep syringes behind a code?
Yes, and published programs do the equivalent with separate machines. The access rule can be set per selection: naloxone on an open button with a per-vend cap, syringe packs or test strips behind a code or card with a weekly quota. State the rule for each selection when you specify the machine. In the US, also account for funding: since April 2026 SAMHSA guidance bars HHS funds from buying syringes or drug test strips, while naloxone and its distribution boxes remain fundable, so programs may need stock reports split by funding source.
What happens to a code-controlled machine when the internet goes down?
On KioskForce builds, releases that check a code or quota against the cloud pause while the machine is offline, because the entitlement cannot be checked. Offline dispensing that reconciles later is not available today. Selections set to open free vend can keep working, and records are buffered on the machine and synced when the connection returns, with an offline alert on the dashboard. Decide before installation which selections must keep working offline, and put the nearest service and a help number on the out-of-service screen.
Does KioskForce build harm reduction vending machines with codes and quotas?
We build the platform those programs need, and we have delivered it for free HIV self-test kit programs in Australia: HIVConnect across six states and territories, and MyTest at 16 New South Wales locations, where users register on their phone, receive a code, and draw against a per-person quota with no personal data on the machine. We have not supplied machines to a syringe, naloxone or test-strip program. The same release logic, quotas and records apply, and we build them to the requirement you state. We do not certify legal compliance.
References
- Philbrick S et al., RTI International / CDC Strengthening Syringe Services Programs — “Vending machines: A tool for distributing harm reduction equipment” (2025). https://harmreduction.org/wp-content/uploads/2025/03/Vending-Machines-for-Harm-Reduction-2025.pdf
- Harm Reduction Center Las Vegas — “Impact Exchange Vending Machines” (accessed 11 October 2026). https://www.harmreductioncenterlv.com/impact-exchange-vending-machines
- Allen ST et al., Annals of Medicine — “Evaluating the impact of naloxone dispensation at public health vending machines in Clark County, Nevada” (2022). https://pmc.ncbi.nlm.nih.gov/articles/PMC9542801/
- NYC311 — “Public Health Vending Machines” (accessed 11 October 2026). https://portal.311.nyc.gov/article/?kanumber=KA-03578
- Caracole — “Safer Use Supplies” (accessed 11 October 2026). https://caracole.org/safer-use-supplies/
- Baltimore City Health Department — “Harm Reduction Vending Machine” (accessed 11 October 2026). https://www.baltimorecity.gov/health/our-work/substance-use/harm-reduction-vending-machine
- NSW Health — “NSW Needle and Syringe Program”, Guideline GL2023_002 (18 January 2023). https://www1.health.nsw.gov.au/pds/ActivePDSDocuments/GL2023_002.pdf
- SAMHSA — “Dear Colleague” letter, updated harm reduction funding guidance (24 April 2026). https://www.samhsa.gov/sites/default/files/dear-colleague-letter-upated-hr-funding-guidance.pdf
Related
- Harm reduction vending machines — the cluster hub.
- On-screen questions on harm reduction vending machines
- Syringe vending machines
- Naloxone dispensing machine specification
- Fentanyl and xylazine test strip vending machines
- Naloxone vending machines
- How free-vend health programs work
Talk to us about controlled dispensing
Send the products and pack sizes, the access rule you want for each selection, any per-vend cap or quota, and what must happen offline and at the limit. We will come back with a machine, a release design and a price.
Project brief · 60 seconds
What are we building together?
Three quick steps. Your brief goes straight to the engineers who design, build and support KioskForce systems.
