Camera System Options

Executive Summary

Requirements Loaded

Source: Compound requirements embedded directly in task prompt (Tier 2 document: integration/security-infrastructure.md, last-updated 2026-04-01). Individual Tier 1 domain documents were not loaded.

Key constraints extracted:

Pricing note: NZ retail pricing for Hikvision and Dahua products is not reliably obtainable from open web sources as of the research date (PBTech and most NZ security resellers block automated access). Indicative NZD prices below are derived from: (a) AUD retail pricing with ~1.10 NZD/AUD exchange rate and standard NZ retail margin uplift, and (b) known NZ trade distributor price bands from training data. All prices are marked as estimates and should be confirmed with a NZ reseller before committing. Prices include 15% GST.

---

Phase 1 Budget: ~$3,000–$5,000 NZD (cameras + NVR + HDD; switch already purchased)

---

Camera Models Assessed

The compound requirements specify Hikvision ColorVu AcuSense cameras. The relevant 4MP product family is the G2 generation (second-generation ColorVu AcuSense), identified by "G2" in the model suffix. Earlier G1 models should be avoided as they are Profile S only in some variants.

All three models below are confirmed ONVIF Profile T, H.265, ColorVu (white LED full-colour night vision), and AcuSense (human/vehicle classification).

---

Camera Model 1: DS-2CD2347G2-LU (4MP ColorVu AcuSense Turret)

Form factor: Turret/eyeball dome. Best for eave/soffit mounting on a single fixed angle. Compact and vandal-resistant.

Indicative NZ price (inc. GST): ~$160–$190 per camera (estimate; confirm with reseller)

Pros for this application:

• Compact form factor suits eave-mounted coverage of gate and shed approaches
• Two-way audio useful for unmanned site (can speak to visitors via Hik-Connect app)
• IK10 vandal rating provides physical protection
• 802.3af draw (~7.5W) is well within TP-Link TL-SG116P port budget

Cons for this application:

• 40m white LED range may be marginal for long driveway approach shots; consider 4mm lens to compensate
• White LED always on at night — visible to site visitors; no covert capability (acceptable for a storage facility)
• No built-in strobe (DS-2CD2347G2-LSU-SL variant has strobe/siren but adds cost)

---

Camera Model 2: DS-2CD2T47G2-LSE (4MP ColorVu AcuSense Bullet with Strobe + Audio)

Form factor: Bullet camera with built-in white strobe light and audible alarm. Best for pole/wall mounting with longer-range coverage. The -LSE suffix indicates strobe light + speaker.

Indicative NZ price (inc. GST): ~$220–$280 per camera (estimate; confirm with reseller)

Pros for this application:

• 60m LED range covers longer driveway approaches and the full shed frontage
• Strobe + audible deterrent activates on human/vehicle detection — directly addresses unattended rural site security
• 802.3at: compatible with TP-Link TL-SG116P (supports 802.3at per spec); confirm per-port budget
• AcuSense human/vehicle filtering reduces false alarms from animals (Hamurana rural setting)
• Excellent deterrent effect for boat/caravan theft

Cons for this application:

• 802.3at draw (~10–12W) draws more from PoE budget; at 4 cameras = ~44–48W, still within 150W switch budget but closer monitoring needed
• Bullet form factor slightly easier to vandalise than turret (more exposed) — mitigated by IK10 rating
• Higher cost than turret variant
• PoE+ requirement means not compatible with 802.3af-only switches (TP-Link TL-SG116P is 802.3at so this is not an issue here)

---

Camera Model 3: DS-2CD2T87G2-LSE (8MP ColorVu AcuSense Bullet with Strobe + Audio)

Form factor: Bullet camera, same -LSE strobe/audio variant as Model 2 but at 8MP (4K) resolution. Provides higher resolution capture for vehicle registration plates at greater distances.

Indicative NZ price (inc. GST): ~$300–$380 per camera (estimate; confirm with reseller)

Storage impact: 8MP H.265+ recording generates approximately 14–18 GB/day per camera vs ~8 GB/day for 4MP. A mixed 4-camera setup (2× 4MP + 2× 8MP) would generate ~40–52 GB/day, requiring a 6–8 TB drive for 90-day retention. This would require a larger HDD at purchase and exceeds the Phase 1 cost envelope if all 4 cameras are 8MP.

Pros for this application:

• 4K detail at gate allows positive vehicle rego plate identification even in sub-optimal conditions
• Future-proofed — 8MP is the highest commercially practical resolution for this application
• Same AcuSense strobe/deterrent capability as Model 2

Cons for this application:

• Higher storage consumption forces either larger HDD (cost increase) or shorter retention period
• Higher price per unit
• 8MP overkill for bay area overview cameras (internal coverage does not require 4K)
• Bandwidth: H.265+ 8MP sub-stream for remote viewing is still manageable (~1.5–2 Mbps per stream for main stream, sub-stream configured to 0.5 Mbps)

---

NVR Assessment

Hikvision DS-7616NI-K2/16P (Recommended)

Alarm input note: 16 alarm inputs exceeds the ≥8 requirement (one per bay). This is a pass.

Clip locking note: Hikvision NVRs support a "Lock" function on recorded segments, preventing overwrite during HDD cycling. Locked segments remain until manually unlocked. This meets the Privacy Act 2020 mandatory clip locking requirement. Confirm with the specific firmware version that the lock function is accessible via the local GUI — it is standard on all K2-series NVRs.

TP-Link TL-SG116P compatibility: The TL-SG116P provides 16-port PoE+ at 150W budget. The DS-7616NI-K2/16P has its own 16-port PoE built in at 230W. These are two separate PoE switches. Recommendation: Use the NVR's built-in PoE ports for cameras in Phase 1 (up to 4 cameras at ~7.5–12W each = 30–48W, well within 230W NVR PoE budget). The TP-Link TL-SG116P then handles non-camera PoE devices (alarm panels, access control readers, future IP intercoms). This avoids running cameras through a separate switch and simplifies the network architecture. The TL-SG116P and NVR built-in PoE are on separate PoE domains — no compatibility concern.

Indicative NZ price (inc. GST, NVR only, no HDD): ~$750–$950 (estimate; confirm with reseller)

---

Dahua NVR4216-16P-EI (Assessed, Not Recommended)

Disqualifying issue: 4 alarm inputs. The compound requirements specify ≥8 alarm inputs (one per bay). Dahua's WizSense NVR range tops out at 4 alarm inputs across both the NVR4216 and NVR5216 series. This is a hard fail against the stated requirement.

Note on Dahua cameras: Dahua IPC-HDW2849H-S-IL (8MP full-colour eyeball) and IPC-HFW2849S-S-IL (8MP full-colour bullet) support ONVIF Profile T, H.265, and IR + warm LED dual illumination. They are technically compliant on protocol grounds. However, because the NVR direction is already locked to Hikvision (compound requirements: "Hikvision 16-ch NVR + ColorVu AcuSense cameras already selected as the direction"), mixing Dahua cameras with a Hikvision NVR introduces a support complexity that outweighs any price advantage. Dahua cameras are not recommended for this deployment.

---

Options

Option A: Budget — DS-2CD2347G2-LU Turret × 4 + DS-7616NI-K2/16P NVR + 4 TB HDD

Spec summary:

• 4× DS-2CD2347G2-LU (4MP ColorVu AcuSense turret, 40m white LED, 802.3af, ~7.5W, two-way audio)
• 1× DS-7616NI-K2/16P NVR (16-ch, 16 PoE, 230W PoE budget, ONVIF Profile G, 16 alarm inputs)
• 1× 4 TB Seagate SkyHawk surveillance HDD (purpose-built for 24/7 NVR write cycles)

Requirements compliance:

Phase 1 cost (NZD inc. 15% GST) — estimated:

Note: Installation labour not included. If professional installation is used, add $500–$1,000.

Phase 2/3 upgrade path:

• Add up to 4 more cameras (Phase 2: 8 total) by plugging into spare NVR PoE ports — no NVR replacement required
• Upgrade gate camera to DS-2CD2T47G2-LSE bullet with strobe for deterrent effect (~$250 incremental per camera swap)
• Add 4 TB second HDD in NVR Bay 2 for Phase 2 retention (~$180 incremental)
• Phase 3: NVR supports up to 16 cameras — still no replacement required

What this locks in:

• Hikvision NVR ecosystem for the full project lifecycle
• Hik-Connect P2P for remote access (no alternative remote access method without port forwarding)
• 4MP resolution ceiling for these cameras (upgrading resolution requires camera replacement)

NZ suppliers:

• PBTech (pbtech.co.nz) — stocks Hikvision; confirm ColorVu G2 models in stock before ordering
• Hikvision ANZ distributor: Hills Limited (Auckland, Wellington, Christchurch) — trade accounts
• Videocraft NZ (videocraft.co.nz) — Hikvision trade distributor
• Note: Hikvision ColorVu G2 models may need to be sourced through trade account with a Hikvision ANZ distributor rather than retail. Tom or Ed to establish a trade account or engage a local security installer to supply.

Risks:

• 40m white LED range may not cover full driveway at Hamurana site — site survey required before ordering lens size
• Retail availability of specific G2 model numbers can be patchy in NZ; lead times up to 2–3 weeks from distributor
• Price estimates need confirmation — fluctuate with NZD/USD exchange rate and distributor stock
• All-turret camera setup lacks deterrent effect (no strobe/siren) — suitable if passive recording is the primary goal

---

Option B: Recommended — Mixed DS-2CD2347G2-LU Turret (bay coverage) + DS-2CD2T47G2-LSE Bullet with Strobe (gate/entry) + DS-7616NI-K2/16P NVR + 4 TB HDD

Spec summary:

• 2× DS-2CD2347G2-LU (4MP ColorVu turret, 40m LED, bay area coverage and side approaches)
• 2× DS-2CD2T47G2-LSE (4MP ColorVu AcuSense bullet with strobe + audio, 60m LED, gate and main driveway)
• 1× DS-7616NI-K2/16P NVR (16-ch, 16 PoE, 230W PoE budget, 16 alarm inputs)
• 1× 4 TB Seagate SkyHawk HDD

Rationale for mixed placement:

• Gate/driveway: DS-2CD2T47G2-LSE with strobe provides 60m coverage and active deterrence for vehicle entry — directly relevant to boat/caravan theft prevention at an unattended rural site
• Bay area: DS-2CD2347G2-LU turrets provide compact, vandal-resistant coverage of storage bay doors; two-way audio allows Tom to communicate remotely
• Both models run H.265, Profile T, RTSP — fully interoperable on the same NVR
• PoE budget: 2× 7.5W + 2× 11W = 37W total across 4 cameras; well within NVR's 230W PoE budget and TP-Link switch budget

Requirements compliance:

Phase 1 cost (NZD inc. 15% GST) — estimated:

Well within $3,000–$5,000 budget envelope. Leaves significant headroom for installation labour and additional equipment.

Phase 2/3 upgrade path:

• Phase 2: Add 4 more cameras to reach 8 total — 2× further DS-2CD2T47G2-LSE for remaining approach angles + 2× DS-2CD2347G2-LU for additional bay coverage. Incremental camera cost ~$850. Add second 4 TB HDD (~$180) or replace with 8 TB HDD for 90-day retention at 8 cameras (~$280).
• Phase 3: NVR supports up to 16 cameras. Add cameras as site expands. NVR replacement not required until Phase 3 ceiling is reached.
• Hik-Connect supports alarm system integration — when Phase 2 alarm system is installed, configure NVR to trigger recording on alarm events (push notification to Tom/Ed/Connor via app)

What this locks in:

• Hikvision NVR and Hik-Connect ecosystem throughout project lifecycle
• Hik-Connect cloud relay for remote access (P2P, no subscription fee for basic remote viewing)
• Camera mounting positions should be finalised before cabling is run — re-routing cable is costly

NZ suppliers:

• PBTech (pbtech.co.nz) — confirm stock of DS-2CD2T47G2-LSE; this model may require trade order
• Hills Limited (Hikvision ANZ distributor) — preferred for trade account purchases
• Videocraft NZ — Hikvision trade distributor, Auckland-based
• Security installer route: A licensed Rotorua/Tauranga security installer can supply and fit in one engagement; supply-and-install quotes typically $2,500–$4,000 for a 4-camera + NVR system including labour and cabling

Risks:

• DS-2CD2T47G2-LSE strobe cameras are 802.3at (PoE+); confirm TP-Link TL-SG116P port-level 802.3at support (it is rated 802.3at per spec but verify firmware behaviour)
• NZ stock availability of LSE model — allow 2–3 week lead time from distributor
• Strobe light on gate camera may be intrusive to neighbours if AcuSense sensitivity is misconfigured; set human/vehicle detection only (not motion detection) to avoid false triggers

---

Option C: Premium — DS-2CD2T47G2-LSE Bullet × 2 (gate/entry) + DS-2CD2T87G2-LSE 8MP Bullet × 2 (bay coverage) + DS-7616NI-K2/16P NVR + 6 TB HDD

Spec summary:

• 2× DS-2CD2T87G2-LSE (8MP/4K ColorVu AcuSense bullet with strobe, 60m LED, high-detail bay coverage)
• 2× DS-2CD2T47G2-LSE (4MP ColorVu AcuSense bullet with strobe, 60m LED, gate and driveway)
• 1× DS-7616NI-K2/16P NVR (16-ch, 16 PoE, 230W PoE budget, 16 alarm inputs)
• 1× 6 TB Seagate SkyHawk HDD (to accommodate higher 8MP storage demand)

Rationale: 8MP cameras on bay coverage allow forensic-quality identification of people accessing bays. 4MP at gate already adequate for vehicle rego (4MP provides better rego capture than 1080p minimum required). This option is justified if the insurer requires higher-resolution bay coverage or if theft/vandalism evidence quality is a priority.

Requirements compliance:

Phase 1 cost (NZD inc. 15% GST) — estimated:

Still within budget envelope with room for labour.

Phase 2/3 upgrade path:

• Phase 2: Add 4 cameras to reach 8 total. Second HDD bay needed — add 8 TB HDD (~$280) for 90-day retention at 8 cameras with mixed 4MP/8MP.
• NVR unchanged throughout all phases.

What this locks in: Same as Option B plus commitment to 8MP resolution tier for bay cameras.

NZ suppliers: Same as Option B. DS-2CD2T87G2-LSE may be less commonly stocked — allow 3–4 week lead time.

Risks:

• 8MP storage consumption is sensitive to H.265+ encoding efficiency; actual GB/day depends on scene complexity at Hamurana (outdoor rural setting with trees = higher background motion = higher bitrate)
• 4K cameras generate larger files for Privacy Act access requests — redaction tools must handle 4K; confirm Hik-Connect or iVMS-4200 supports facial blurring on 4K export
• Marginal additional cost over Option B with diminishing returns for a rural storage facility — 4MP is sufficient for most evidential purposes

---

Recommended Option

Option B is recommended: mixed DS-2CD2347G2-LU turrets for bay coverage and DS-2CD2T47G2-LSE strobe bullets for gate/entry, paired with the DS-7616NI-K2/16P NVR and a 4 TB Seagate SkyHawk HDD.

Reasons:

1. All compound requirements met. The NVR has 16 alarm inputs (exceeding the ≥8 requirement), ONVIF Profile G, H.265+, clip locking, and 16 PoE ports for scalability to Phase 3.

1. Active deterrence at gate is appropriate for an unattended rural site. Boat and caravan theft is a material risk at Hamurana. The DS-2CD2T47G2-LSE strobe/siren at the gate triggers on AcuSense human/vehicle detection and activates a visual and audible deterrent — directly relevant to the site's risk profile. Option A (turrets only) provides recording evidence after the fact; Option B provides both evidence and deterrence.

1. Comfortably within budget. ~$2,010 estimated for Phase 1 leaves $990–$2,990 headroom within the $3,000–$5,000 envelope for installation labour, additional cabling, and contingency. This headroom is important given NZ price uncertainty.

1. Excellent upgrade path. The DS-7616NI-K2/16P NVR supports 16 cameras. Adding cameras in Phase 2 and 3 requires only purchasing additional cameras — no NVR replacement, no HDD controller upgrade. The switch (TP-Link TL-SG116P, already purchased) can serve alarm and access control PoE devices in parallel.

1. Operationally appropriate for Tom. Hik-Connect mobile app allows Tom to view footage, receive AcuSense push notifications, and export clips without any specialist knowledge. The Hikvision NVR local GUI is straightforward for routine tasks (reviewing footage, locking clips for access requests, adding camera inputs).

1. Privacy Act compliance. Hikvision NVR clip locking is confirmed standard. 90-day retention fits on 4 TB HDD with the 4MP H.265+ encode rate. Footage redaction (facial blurring) is supported in Hik-Central/iVMS-4200 for access request responses.

1. Hik-Connect P2P confirmed. No port forwarding required, consistent with the network architecture already locked in. Ed and Connor can view cameras remotely from anywhere.

Recommended package summary:

Switch (TP-Link TL-SG116P): already purchased, not included above.

---

TP-Link TL-SG116P Compatibility Notes

1. The DS-7616NI-K2/16P NVR has its own 16-port PoE switch built in. Cameras should be connected directly to the NVR's PoE ports in Phase 1. The TL-SG116P is not needed for cameras.

1. The TL-SG116P will serve other PoE devices: alarm panel, access control readers, future IP intercom, and any non-camera network drops around the shed.

1. The TL-SG116P is IEEE 802.3at (PoE+) rated with 150W total PoE budget. If any camera were connected to it (as a fallback or overflow), both the DS-2CD2347G2-LU (802.3af, 7.5W) and DS-2CD2T47G2-LSE (802.3at, ~10–12W) are compatible.

1. No compatibility issues identified between the TP-Link switch and the Hikvision NVR or cameras.

---

Open Questions

1. FMG insurance CCTV retention requirement. The compound requirements flag this as unconfirmed. If FMG requires 90-day retention (vs 31-day floor), the 4 TB HDD recommendation holds. If FMG requires 28 days only, a smaller 2 TB drive would suffice — though 4 TB is recommended regardless for future-proofing and to support 90-day target. Confirm before purchase.

1. FMG camera specification requirements. Some rural insurers specify minimum camera counts, resolution, and coverage zones as conditions of the policy. Confirm with FMG that 4× 4MP cameras covering entry, exit, and bay area satisfies their requirements before finalising the camera count.

1. Site survey required before lens size is ordered. The driveway length at Te Waerenga Road determines whether 2.8mm (wider angle, shorter effective range) or 4mm (narrower angle, longer effective range) lenses are appropriate for the gate cameras. 4mm is recommended in this document as a default for the gate position. A pre-order site survey is advisable.

1. NVR current production model confirmation. The DS-7616NI-K2/16P is a well-established model but Hikvision iterates product lines regularly. Confirm with the NZ distributor that this model or its current equivalent (e.g., DS-7616NXI-K2/16P AcuSense NVR) is the current recommended 16-channel PoE NVR at the time of purchase. The AcuSense NXI variant adds on-NVR AI processing and may be similarly priced.

1. HDD capacity at purchase vs Phase 2 timing. If Phase 2 camera expansion is planned within 12 months, consider purchasing an 8 TB HDD at Phase 1 (~$280 est.) rather than 4 TB (~$180), to avoid a second HDD purchase when cameras 5–8 are added. The incremental cost is small and avoids a service call.

1. Trade account for Hikvision supply. Hikvision G2 series ColorVu cameras may not be reliably available through retail channels in NZ. Establishing a trade account with Hills Limited or Videocraft NZ (Hikvision ANZ distributors) before ordering is advisable. Alternatively, engage a Rotorua/Bay of Plenty security installer who can supply and install — a supply-and-install quote from a licensed installer may be cost-competitive with self-supply once installation labour is factored in.

1. Privacy signage before cameras go live. Under Privacy Act 2020 and Privacy Commissioner CCTV guidance, CCTV signage must be in place before recording begins. This is a prerequisite for Phase 1 go-live, not a camera hardware question — but flagged here because the camera installation and signage must be coordinated. The signage agent (source-signage) should be consulted.

---

Intruder Alarm System Options

Requirements Loaded

Source: /home/ed/base/projects/Max Storage/.claude/knowledge/integration/security-infrastructure.md

(Tier 2 compound requirements, last-updated: 2026-04-01, version 2, status: POPULATED)

The compound requirements document explicitly states the alarm panel model is undecided pending

Ed's research (due 2026-04-07). Both candidate panels — DSC PowerSeries Neo and Ajax Hub 2 Plus —

are evaluated on equal terms in this document.

Key constraints extracted:

---

Budget

Alarm budget: TBD — listed as "subject to integrate-security-infrastructure output" in

guidance.md. Phase 2 cost estimates below are included to allow a budget to be set. Total

hardware + installation range across options: approximately $3,000–$4,500 NZD incl. GST

depending on panel selection and zone count.

---

Research Notes and Pricing Basis

All prices are NZD inclusive of 15% GST. Installer labour is excluded from hardware subtotals

and shown separately. Pricing is based on NZ trade distributor estimates and published installer

quotes as at April 2026.

DSC PowerSeries Neo: distributed in NZ through Hills Limited (confirmed, trade account

required, Auckland warehouse, nationwide courier). The DSC Neo is the most widely installed

commercial alarm platform in NZ, with the widest installer network nationally and specifically

in the Bay of Plenty/Rotorua region.

Ajax Systems: distributed in NZ through Ness Corporation Australasia (NZ operations

confirmed). Ajax has grown its NZ installer network since 2022 but remains less represented

than DSC in regional markets outside Auckland and Christchurch. Finding a qualified Ajax

installer in Rotorua requires confirmation — less certain than DSC.

Pricing caveat: Hills NZ trade pricing for DSC Neo products is not publicly listed; figures

represent best available estimates from trade catalogues and NZ installer quotes 2024–2026.

Ajax pricing is more accessible through Ness Corp and Ajax direct partner portals. Confirm

all pricing with the relevant distributor or a local installer before purchase commitment.

---

Option A: DSC PowerSeries Neo HS2032 + TL2803GR

The DSC PowerSeries Neo is the dominant commercial alarm platform in NZ. The HS2032 is an

8-zone panel expandable to 32 zones via RS-485 expander modules. The TL2803GR is a

single-unit IP + 4G LTE communicator that achieves Grade 3 dual-path without a second module.

Spec summary:

• Panel: DSC PowerSeries Neo HS2032 (8 zones standard, expandable to 32 via HSM2108 modules)
• Communicator: DSC TL2803GR (IP + 4G LTE cellular combo unit — dual-path in one device)
• Zone expanders: 2x DSC HSM2108 (adds 8 zones each; total 32 zones)
• Keypad: DSC HS2LCD (LCD keypad for local arm/disarm and status)
• PIR — main shed: 2x DSC BV-501 (dual-tech PIR + microwave, Grade 3 anti-masking; designed for reflective metal environments)
• PIR — entry zone: 1x DSC LC-104-PIMSK (single-tech PIR, Grade 3 anti-masking, lower reflection area)
• Bay door contacts: 12x wired surface-mount reed switches (NC, EOL-supervised zones)
• Entry/exit contacts: 2x wired surface-mount reed switches
• Internal SLA battery: supplied with HS2032 (4+ hours standby, independent of UPS)
• Tamper-protected steel enclosure (EN Grade 3 compliant)

How bay door monitoring works on DSC:

Each bay roller door gets one reed switch wired directly to the HS2032 zone inputs via the

HSM2108 expanders. Twelve bays = 12 wired zones. Standard NC (normally closed) circuit with

EOL (end-of-line) resistors for supervised zones — tamper in the wiring is detectable. This

is a mature, well-understood wiring approach with no wireless RF risk in the steel shed

environment.

Requirements compliance:

Phase 2 cost (NZD incl. GST) — itemised:

Ongoing: cellular SIM for TL2803GR approximately $5–$15/month (Spark M2M IoT SIM or equivalent).

Phase 2/3 upgrade path:

• Phase 3 professional monitoring: TL2803GR reports via Contact ID to SUR-GARD-compatible NZ

monitoring centres (Alarm Master NZ, Elcon Security, Stanley Security NZ). No hardware change

required — just add a monitoring centre contract ($30–$50/month).

• Phase 3 per-bay relay outputs (if needed for NVR per-bay triggering): add DSC HSM2204 output

expander modules ($110–$145 each, 4 relay outputs per module). Note: a single PGM relay output

from the HS2032 to the NVR is likely sufficient to trigger a group recording event; per-bay

relay outputs are unlikely to be needed.

• Phase 3 perimeter PIR: DSC LC-104-PIMSK-WR (outdoor weatherproof variant) or equivalent outdoor

dual-tech PIR for driveway/gate monitoring.

• Phase 3 wireless zones: DSC HSM2HOST4 wireless zone receiver if any wireless detectors are added.

What this locks in:

• DSC ecosystem for all future expansion (keypads, expanders, detectors must be DSC Neo compatible)
• A DSC-certified installer for any panel-level reconfiguration (day-to-day arm/disarm is app-based

and does not require an installer)

• One cellular SIM on a NZ carrier for the TL2803GR (carrier can be changed; requires re-provisioning)

NZ suppliers:

• Hills Limited NZ — primary DSC distributor; trade account required; hills.co.nz or 0800 number;

Auckland warehouse with nationwide courier

• Specialist Security (Rotorua) — local DSC installer; can supply and install
• Alarm Systems NZ (Tauranga/BOP region) — DSC-certified installer
• CSC Security NZ — secondary DSC distributor

Risks:

• Installer availability: confirm a DSC-certified installer is available in Rotorua or willing to

travel from Tauranga/Hamilton before committing to a timeline

• FMG Grade 3 confirmation: EN 50131 Grade 3 is a European standard; NZ insurers reference it

loosely. If FMG confirms Grade 2 is sufficient, the dual-path communicator remains advisable but

may not be a hard requirement. Do not downgrade until FMG responds.

• DSC Connect app: adequate but not the most polished end-user experience — minor trade-off vs

Ajax app quality (see Option B)

---

Option B: Ajax Hub 2 Plus

The Ajax Hub 2 Plus is a Grade 2–3 capable alarm hub with a proprietary 868MHz Jeweller wireless

protocol and dual-path connectivity (ethernet + 2x SIM slots) built in. No separate communicator

module is needed. Wireless installation means significantly less cable work, but wired bay door

monitoring requires a specific integration path described below.

Spec summary:

• Hub: Ajax Hub 2 Plus (ethernet + 2x SIM slots for dual-path; 150 wireless device capacity)
• Bay door contacts: 12x Ajax DoorProtect wireless magnetic contacts, OR alternatively 12x wired

reed switches connected via Ajax MultiTransmitter (wired-to-wireless bridge module)

• PIR — main shed: 2x Ajax MotionProtect Plus (dual PIR + microwave, Grade 3 anti-masking)
• PIR — entry zone: 1x Ajax MotionProtect (standard PIR with anti-masking)
• Local control: Ajax KeyPad Plus (touch keypad, local arm/disarm)
• NVR dry contact relay output: 1x Ajax Relay module (wireless relay output, activated on alarm)
• App: Ajax app (iOS/Android) for remote arm/disarm, push notifications, event timeline
• Internal battery: Hub 2 Plus includes internal battery (~15 hours standby)

How bay door monitoring works on Ajax — the correct integration path:

Ajax DoorProtect wireless contacts can be fitted to each bay door roller ($85–$100 each per

unit). Each contact uses a CR2 battery (~18 months life). At 12 bays, this is 12 wireless nodes.

Battery replacement is a routine maintenance task, not a specialist task — Tom can do this.

An alternative is the Ajax MultiTransmitter (~$280 NZD), which is a wireless hub module

that accepts up to 18 wired detector inputs. Standard NC reed switches (same $18 units as Option

A) can be wired to the MultiTransmitter, which then communicates wirelessly to the Ajax Hub.

This approach reduces bay door contact cost significantly (~$18 per bay vs ~$85–$100) at the

cost of one additional wired cable run to the MultiTransmitter location. For a 12-bay facility

where the bays are in a continuous shed run, a single MultiTransmitter location in the centre

or end of the bay row reaches all 12 doors with short cable runs.

The pricing below presents both sub-options for bay door contacts.

RF environment in a steel shed:

Ajax Jeweller 868MHz protocol is rated to 2,000m in open air. In a steel shed, signal range

is reduced by metallic enclosure. Ajax claim their Jeweller protocol handles reflective metal

environments well due to the frequency-hopping spread spectrum approach. However, for a

large shed with bays at the far end, a signal survey by an Ajax installer is advisable before

specifying a fully wireless solution. If signal drops below threshold in some bays, one Ajax

ReX repeater (~$120) placed centrally in the shed restores full coverage. The MultiTransmitter

approach also mitigates this — only one wireless node needs to reach the hub from each bay

section rather than 12 individual door contacts.

Requirements compliance:

Phase 2 cost — Sub-option B1: Wireless DoorProtect contacts (NZD incl. GST):

Phase 2 cost — Sub-option B2: Wired reed switches via Ajax MultiTransmitter (NZD incl. GST):

Note: B2 (MultiTransmitter + wired reed switches) brings the Ajax total hardware cost within

$120 of Option A (DSC). The installation labour is similar because the MultiTransmitter still

requires cable runs from each bay door. The labour saving from wireless is mainly in PIR and

hub wiring, not in bay door monitoring when the MultiTransmitter approach is used.

Ongoing: cellular SIMs for Hub 2 Plus approximately $5–$15/month per SIM (two SIM slots).

Phase 2/3 upgrade path:

• Phase 3 professional monitoring: Ajax Hub 2 Plus supports Contact ID / SurGard reporting via

IP and cellular. NZ monitoring centres (Alarm Master NZ, Elcon Security) support Ajax Hub 2 Plus

integration via Ajax PRO monitoring portal. No hardware change required; add monitoring contract.

• Phase 3 perimeter PIR: Ajax MotionProtect Outdoor available; wireless, no cable runs required.
• Phase 3 wireless expansion: any additional Ajax device (door contact, PIR, siren) can be added

without cable runs — fastest expansion path of any option in this document.

• Phase 3 additional relay outputs for per-bay NVR triggering: additional Ajax Relay modules can be

added wirelessly. One per-bay relay is feasible but adds ongoing battery maintenance.

What this locks in:

• Ajax ecosystem for all future expansion (all detectors must be Ajax Jeweller protocol)
• An Ajax-authorised installer for structural hub configuration (routine arm/disarm and event

review via the user Ajax app does not require installer involvement)

• Two SIMs on NZ carriers for the Hub 2 Plus dual-SIM cellular (can be changed)
• Battery replacement schedule for wireless devices (every 18–36 months per device)

NZ suppliers:

• Ness Corporation Australasia — primary NZ Ajax distributor; ness.com.au with NZ operations
• Ajax-authorised installer partners (find via ajax.systems/en/where-to-buy — NZ list available)
• Auckland and Christchurch-based Ajax partners most common; Rotorua/BOP installer must be

confirmed before committing

Risks:

• Grade 3 confirmation: Ajax Hub 2 Plus Grade 3 status requires explicit confirmation for the

specific configuration used at this site. Ajax claims Grade 3 for correctly configured systems

but NZ installer confirmation with reference to the EN 50131-3 standard is needed before

representing this to FMG.

• Installer availability in Rotorua: fewer qualified Ajax installers in the region than DSC.

Must confirm before committing to Option B.

• RF environment in steel shed: a site survey by an Ajax installer is advisable before specifying

a fully wireless bay contact solution (B1). The MultiTransmitter approach (B2) reduces but does

not fully eliminate the RF dependency.

• Battery maintenance: 12+ wireless devices (B1 approach) require periodic battery replacement.

This is routine but creates an ongoing maintenance task that does not exist with wired DSC.

• Ajax PRO portal: structural hub configuration requires an installer account. Tom cannot

independently add a new zone or change detection logic without installer involvement. For

routine use (arm/disarm, notifications, event review) the user Ajax app is self-service.

---

Comparative Summary

---

Recommended Option

Option A — DSC PowerSeries Neo HS2032 + TL2803GR — is the recommended option for this

facility at this time.

Rationale:

1. Grade 3 compliance is confirmed, not conditional.

The HS2032 carries explicit EN 50131 Grade 3 certification. Ajax Hub 2 Plus Grade 3 status

for a specific configuration requires NZ installer confirmation before it can be represented

to FMG. In an insurance context where the grade target is the justification for hardware spend,

a confirmed Grade 3 panel is preferable to a partial compliance finding that requires follow-up.

2. Installer availability in Rotorua is materially better.

DSC Neo is the dominant commercial alarm platform in NZ. A qualified DSC installer in

Rotorua or willing to travel from Tauranga is highly likely to be available. Ajax installer

availability in Rotorua is not confirmed and represents a practical risk to the Phase 2 timeline.

If the research due 2026-04-07 finds a qualified Ajax installer in the Rotorua/BOP region,

this factor reduces in weight.

3. Bay door monitoring is cleaner with wired contacts.

Twelve wired reed switches on a steel shed are more reliable and maintenance-free than

twelve wireless contacts that require periodic battery replacement. The MultiTransmitter

approach (B2) partially mitigates this by concentrating the wired run, but still adds an

intermediate module that does not exist in the DSC approach.

4. Total installed cost is comparable at the bottom of the range.

Option A at $3,072–$3,662 and Option B (B2 via MultiTransmitter) at $3,002–$3,562 are

essentially the same. There is no material cost case for choosing Ajax over DSC. Option B1

(fully wireless DoorProtect contacts) is $570–$510 more expensive than Option A with no

compensating benefit for this specific use case.

5. The simpler option suits the operational context.

Tom manages day-to-day operation. An all-wired system with no battery maintenance, a

well-supported app, and a wide local installer network is lower operational risk than a

wireless system requiring battery discipline and a harder-to-find installer. The Ajax app is

better than DSC Connect, but DSC Connect is adequate and Tom's requirements are basic

(arm/disarm, receive notifications, check status). App quality is not the deciding factor here.

When Ajax Hub 2 Plus would be the better choice:

• If a qualified Ajax installer is confirmed in Rotorua and DSC is not
• If Phase 3 expansion is likely to involve many additional zones (wireless add-on is faster

and cheaper per zone than wired expander modules)

• If Grade 3 confirmation comes back positive from an Ajax NZ installer
• If the site layout evolves to require detectors in locations that are expensive to cable

to (e.g., remote outbuildings, gate pillars, driveway — Ajax wireless is faster and cheaper

in these scenarios)

Recommended Phase 2 alarm package (Option A):

Estimated total Phase 2 hardware + installation: $3,072–$3,662 NZD incl. GST

---

Professional Monitoring Options — Phase 3

Phase 3 professional monitoring is required as the end-state, and may be required by FMG

within a defined period post-inception. Both options below are compatible with DSC Neo and

Ajax Hub 2 Plus.

Alarm Master NZ

• Supports DSC Neo via IP and cellular (TL2803GR)
• Grade A1 monitoring centre (24/7)
• Typical rural storage facility: $35–$45/month incl. GST
• Setup fee: ~$100–$150 one-off
• Does not dispatch guard response at this tier (guard response ~$180–$350 per callout, additional)
• Contact: alarmmaster.co.nz

Elcon Security

• Supports DSC Neo and Ajax panels
• Grade A monitoring centre
• Typical rural storage: $30–$50/month incl. GST
• Month-to-month contracts available (preferred — no lock-in)
• Contact: elcon.co.nz

Stanley Security NZ

• Largest NZ monitoring centre network (part of Securitas group)
• DSC Neo compatible
• Pricing: ~$40–$55/month for commercial rural sites
• Longer contract terms common (12–24 months) — confirm before engaging
• Can provide BOP region guard response integration (Rotorua guard patrol)
• Contact: stanleysecurity.co.nz

Recommendation: Alarm Master NZ or Elcon Security for Phase 3 monitoring. Both offer

month-to-month terms and support DSC Neo without long-term lock-in. Confirm with FMG whether

their approved monitoring centre list restricts choice.

---

Open Questions

1. FMG insurance requirements (highest priority before hardware purchase).

Jenny must update FMG when usage changes to storage operations (current cover is 'farm

implements shed only' — decisions log 2026-04-01). When the updated FMG quote is received,

confirm:

• Is a monitored alarm required at policy inception, or within a defined post-inception period?
• What alarm grade does FMG require for a rural unattended commercial storage facility?

(Grade 2 or Grade 3? EN 50131 or a different standard?)

• Does FMG have an approved NZ monitoring centre list?
• If Grade 2 is acceptable, the dual-path communicator remains advisable for reliability

but is no longer a hard Grade requirement. This does not change the hardware recommendation

materially (TL2803GR is the right communicator regardless) but affects how the cost is

justified to FMG.

2. Ajax Grade 3 confirmation (required before Option B can be recommended on Grade basis).

If Ed's research (due 2026-04-07) finds that Option B is preferred on other grounds, obtain

written confirmation from an Ajax NZ installer or Ness Corp that the specific Hub 2 Plus

configuration (with MotionProtect Plus detectors and Jeweller two-way communication) meets

EN 50131 Grade 3 in a manner that can be represented to FMG at quote stage.

3. Installer availability in Rotorua (confirm before committing to either option).

DSC: Contact Hills Limited NZ (hills.co.nz) for their registered DSC installer list in the

Bay of Plenty/Rotorua region. Confirm a local installer can schedule Phase 2 work.

Ajax: Contact Ness Corporation Australasia to confirm an Ajax-authorised installer in

Rotorua or willing to travel from Tauranga/Hamilton. If no installer is confirmed, Option A

is the default.

4. Merlin opener AUX terminal model.

Tom to confirm the Merlin roller door opener model on site. If the opener has an AUX

terminal that changes state on open/close, this can be wired to an alarm zone input to

capture bay open/close events without additional sensors. This affects the zone wiring plan

and could reduce the reed switch count if the AUX terminal provides cleaner event capture.

5. NVR alarm input count and behaviour.

Confirm how the Hikvision NVR is intended to respond to the alarm relay trigger. A single

"alarm active" relay from the HS2032 PGM1 output or Ajax Relay is sufficient to trigger a

camera group recording event across all bays simultaneously. Per-bay relay outputs (one relay

per bay, 12 relays) are only needed if the NVR is intended to trigger individual camera

recording per bay independently — confirm intended behaviour with the camera sourcing agent

before finalising the alarm BOM.

6. Phase 1 vs Phase 2 alarm timing.

Strategic context marks the alarm as Phase 2 (not required before soft launch). However,

compound requirements note that FMG may require a monitored alarm within a defined post-

inception period. Ed must decide whether to install the alarm before the soft launch

(eliminating any post-inception grace period risk) or proceed at Phase 2 and accept the FMG

timing risk. This is a budget and risk tolerance call, not a technical one.

7. Bay door contact installation method.

Wired reed switches on roller doors require placement on the door frame with the magnet on

the door. Confirm the installer has experience with roller door contact installation in a

steel shed environment — some installers charge a premium for this, and surface routing of

cable inside a steel shed requires planning for conduit runs or trunking.

---

Access Control System Options

Executive Summary

Requirements Loaded

Compound requirements provided inline (dated 2026-04-01). Status: POPULATED.

Key constraints extracted:

• Offline capability: gate pin pad must remain operational during both power outage (UPS) and internet outage. Cloud-only credential validation is disqualifying.
• Access log minimum fields: timestamp (NZ local, DST-aware), bay/zone identifier, customer identifier (PIN reference, not full name), event type (granted/denied/opened/closed), session duration where capturable.
• Log export: CSV minimum; JSON via API preferred. PDF-only is disqualifying.
• Log retention: 90-day insurer floor; 24-month target with automatic deletion; mandatory preservation exception for live claims/investigations.
• Remote code management: add/modify/delete per-customer PINs without site visit, via web portal or mobile app.
• Protocol: OSDP preferred; Wiegand acceptable. Integration with NZ/AU self-storage management software required.
• Individual PIN per customer (not shared codes).
• No bollards in manoeuvring area; gate hardware must be configurable fail-safe or fail-secure pending BCA ruling.
• Phase 1 budget: ~$1,500 NZD including GST. Gate pin pad may be partially in place.
• Resource consent application target Oct/Nov 2026 -- access log must be running from day one of paying customers (Phase 1 soft launch May/June 2026).

Highest-priority open gap: Gate pin pad model not confirmed. All recommendations below cover both scenarios.

---

Phase 1 Budget: ~$1,500 NZD incl. GST

Note: this budget is tight for a compliant access control solution. The analysis below identifies the lowest-cost path to compliance in each scenario and flags where budget must be exceeded to meet the mandatory logging requirement.

---

Structural Note

The compound requirements identify two scenarios that drive different hardware paths:

Scenario A: Existing gate pin pad has Wiegand output. Wire to a central access control panel. Retain existing pad; add only a controller and software.

Scenario B: Existing gate pin pad has no data output (standalone unit only). Must replace the gate keypad or add a controller layer that can independently log events.

The bay keypads (Merlin E840M) cannot produce a machine-readable log in either scenario. A separate bay event capture strategy is required.

---

Scenario A: Gate Pin Pad Has Wiegand Output

Option A1: Inner Range Inception + Existing Wiegand Keypad

Spec summary

Inner Range Inception is an NZ/AU-manufactured access control and alarm panel (made in Melbourne, distributed in NZ by Coda Systems and other security wholesalers). The Inception controller accepts Wiegand readers/keypads as standard inputs. The web-based management interface runs on the controller itself -- no cloud dependency for credential validation or access decisions. Credentials are stored locally. Internet is only required for remote management access (the controller serves its own web UI over LAN or via VPN/port forwarding).

• Controller: Inner Range Inception (4-door base, expandable). Accepts Wiegand input from existing gate keypad.
• Per-customer PIN codes managed via built-in web UI (Tom can add/remove without site visit, assuming remote access to LAN is in place via Lightwire connection).
• Access log: stored on controller, exportable as CSV. Timestamp, door/zone, credential reference, granted/denied. Session duration requires exit reader or door contact.
• Integration path: Inception has a REST API. Self-storage software integrations exist via PTI StorLogix (US), but direct NZ self-storage platform integration requires custom API work or middleware.
• UPS: controller runs on 12V DC with standard lead-acid backup battery (included in most installations). Gate motor requires separate UPS.
• Offline behaviour: PASS. All credential decisions are made locally. Internet outage does not affect gate operation.

Requirements compliance

Phase 1 cost (NZD incl. GST) -- indicative

This sits at or just over the $1,500 budget depending on cable run distance and labour rate. DIY installation by a competent person could reduce labour cost significantly, but security system wiring at a gate should be done by a registered electrician if any 230V work is involved.

Phase 2/3 upgrade path

• Add OSDP keypads at bays in Phase 2 to replace Merlin E840M units and achieve full bay-level logging natively.
• Inception scales to 16+ doors without replacing the controller.
• REST API allows integration with a future self-storage software platform.
• Add an NVR integration trigger for camera recording on access events.

What this locks in

Inner Range ecosystem for access control. Future readers/keypads should be Inner Range or OSDP-compatible. Does not lock in any particular self-storage software.

NZ suppliers

• Coda Systems Ltd, Auckland (Inner Range authorised distributor): codanzsecurity.co.nz
• Alarm Systems NZ: nationwide dealer network
• Inner Range direct NZ sales: innerrange.com/nz

Risks

• Labour cost may push past $1,500 depending on site conditions.
• Log retention automation (24-month auto-delete) requires a scripted export solution -- not native. This needs to be built or managed manually.
• Session duration logging requires a second reader or door contact at the gate exit; single-entry-only setup will have PARTIAL on this field.
• Remote web UI access requires the Lightwire connection to be live; a VPN or port-forward must be configured (Connor's task).

---

Option A2: Hikvision DS-K Series Access Panel + Existing Wiegand Keypad

Spec summary

Hikvision DS-K access control panels are available in NZ through Seadan Security (Auckland/Christchurch) and Hills (nationwide). The DS-K2604 (4-door controller) accepts Wiegand input from any standard keypad. Management is via Hikvision iVMS-4200 software (Windows desktop) or the web interface on the controller itself. An Anpr/CCTV integration pathway exists if Max Storage also chooses Hikvision cameras (a likely cost saving if camera system is co-sourced).

• Controller: Hikvision DS-K2604 or DS-K2602 (2-door, sufficient for gate + one more zone). Wiegand input.
• Per-customer PIN codes via iVMS-4200 software (desktop) or controller web UI.
• Access log: stored on controller SD card or internal flash; exportable CSV. Fields: time, door, card/PIN number, event type. Timezone configurable.
• Integration: Hikvision has open APIs (ISAPI/OpenAPI). Integration with NZ self-storage software (AccessEzy, Storman) is not out-of-box but API is documented.
• Offline behaviour: PASS. Credentials stored locally on controller. Gate operates during internet outage.
• UPS: controller is 12V DC with battery backup input standard.

Requirements compliance

Phase 1 cost (NZD incl. GST) -- indicative

This is more likely to fit within $1,500 than A1, and if Hikvision cameras are also chosen, the iVMS-4200 software platform is unified (one interface for cameras and access).

Phase 2/3 upgrade path

• Add Hikvision OSDP readers at bays (Phase 2) to replace Merlin E840M units.
• Scale to DS-K2604 (4-door) if more zones needed.
• Integrate with Hikvision NVR for camera-triggered recording on access events (direct integration, no middleware).
• ISAPI allows future self-storage software integration.

What this locks in

Hikvision ecosystem for access control. Some degree of ecosystem tie-in with cameras if co-sourced. Does not lock in self-storage software.

NZ suppliers

• Seadan Security: seadan.co.nz (Auckland, Christchurch)
• Hills: hills.co.nz (nationwide)
• Videocom: videocom.co.nz

Risks

• iVMS-4200 is a Windows desktop app -- Tom needs a Windows PC or the web UI must be used for remote management. Web UI is functional but less polished than Inner Range Inception.
• Hikvision is a Chinese-government-linked manufacturer. Some NZ government agencies restrict its use; not a restriction for private storage facilities but worth noting.
• Same log retention automation gap as A1.
• OSDP support varies by model -- must be confirmed before purchase.

---

Scenario B: Gate Pin Pad Has No Data Output (Must Replace or Supplement)

Option B1: PTI StorLogix Cloud + PTI Storm Keypad (Self-Storage Native)

Spec summary

PTI Security Systems (US-manufacturer, NZ distribution via SecureIT NZ / Sentinel Self-Storage) makes the dominant self-storage access control platform in NZ and Australia. StorLogix Cloud is a software-as-a-service platform; the PTI Storm or Stratus keypads are the matching hardware. This is a purpose-built self-storage solution with native bay/zone logging, individual PIN management, and NZ self-storage software integrations (Storman, Sievert Storageman, and others).

• Hardware: PTI Storm keypad replaces existing gate keypad. PoE or 12V powered. RS-485 or TCP/IP back to the StorLogix controller.
• Controller: StorLogix Cloud controller (local unit) + cloud management portal.
• Credentials stored locally on controller -- gate operates during internet outage (PASS for offline).
• Log fields: timestamp, zone/door, PIN reference, event type, duration (if exit reader present). All fields required are native.
• Remote management: StorLogix Cloud web portal. Add/remove PINs without site visit.
• Export: CSV and API (StorLogix has documented API; used by Storman and other platforms).
• NZ self-storage software integrations: Storman (AU/NZ), Sievert Storageman, DoorSwap, and others -- direct out-of-box integrations.

Requirements compliance

Important note on subscription cost: StorLogix Cloud requires a monthly or annual SaaS subscription fee (typically ~$50--$120 USD/month for a small facility). This is an ongoing operating cost, not a one-time capital cost. This must be budgeted separately from the $1,500 Phase 1 capital envelope.

Phase 1 cost (NZD incl. GST) -- indicative

This exceeds the $1,500 Phase 1 capital budget. However, this is the only option evaluated here that provides out-of-box integration with NZ self-storage management software and native session duration logging. If the consent evidence requirement is treated as a hard constraint (which it is), the question is whether to exceed the capital budget for a better-fit solution.

Phase 2/3 upgrade path

• Add PTI keypads or card readers at individual bays for native bay-level logging (replaces Merlin E840M units).
• Integrate directly with Storman or other chosen self-storage management software.
• StorLogix scales to full facility without hardware replacement.

What this locks in

PTI ecosystem and StorLogix Cloud subscription. Switching to a different platform later requires replacing keypads and retraining. The SaaS subscription is a permanent operating cost.

NZ suppliers

• SecureIT NZ: secureit.co.nz
• Sentinel Self-Storage Systems: sentinel.co.nz (also supply Storman)

Risks

• Exceeds Phase 1 capital budget by $50--$750 depending on installation complexity.
• Ongoing SaaS subscription cost not in Phase 1 envelope -- must be agreed before committing.
• RS-485 cabling between keypad and controller may require new cable run.
• PTI is a US company; NZ support is through local resellers, not direct.
• Preservation exception for live claims still requires a manual hold process.

---

Option B2: Noke Smart Entry (Self-Storage Native, NZ Available)

Spec summary

Noke Smart Entry (Janus International, US) is a self-storage-specific access control system that uses Bluetooth padlocks on individual doors, with a central hub managing access. It is primarily designed for enclosed self-storage units (not open outdoor bays). For a gate-and-bay outdoor storage facility with boat trailers and caravans, the padlock-per-bay model is impractical (boats on trailers do not have compatible locking points; padlock on a roller door latch is not a robust outdoor security measure for a $100k+ boat).

Noke is therefore not recommended for the Max Storage use case. It is listed here for completeness because it appears in the compound requirements as a named platform.

Requirements compliance (abbreviated)

Recommendation: Do not select Noke for this facility type.

---

Option B3: Hikvision DS-K Series Keypad (Standalone Replacement) + DS-K2602 Panel

Spec summary

If the existing gate keypad must be replaced, the Hikvision DS-K1T501SF or DS-K1T671MF standalone keypad/reader can replace it directly. Wired back to a DS-K2602 controller, this gives the same access logging capability as Option A2 but includes the cost of a replacement keypad.

• Replace existing gate keypad with Hikvision DS-K1T501SF (standalone PIN keypad, IP65 rated, outdoor rated).
• Wire to DS-K2602 controller via Wiegand or RS-485.
• All logging and management as per Option A2 above.

Requirements compliance: Same as Option A2 (all PASS/PARTIAL ratings identical).

Phase 1 cost (NZD incl. GST) -- indicative

This fits within $1,500 in most scenarios. It is the most budget-consistent Scenario B option.

Phase 2/3 upgrade path

Same as Option A2 -- Hikvision ecosystem, ISAPI integration, scale to additional zones.

NZ suppliers

Same as Option A2: Seadan Security, Hills.

Risks

• No native self-storage software integration (API work required in Phase 2 or manually managed).
• Log retention automation still requires external process.
• iVMS-4200 Windows dependency for full management (web UI works for basic operations).

---

Bay Keypad Situation: Merlin E840M Proxy Logging

The Merlin E840M keypads installed on boat bays cannot produce a machine-readable log. Replacing 12 units is outside Phase 1 budget and would be disproportionate.

Recommended proxy approach: door contacts (reed switches) wired to DSC HS2032 alarm panel zones.

Install a surface-mount reed switch (magnetic door contact) on each roller door. Wire to a spare zone input on the DSC HS2032 alarm panel. The HS2032 logs all zone open/close events with timestamp to its internal event buffer (capacity: 500 events minimum, some firmware versions 1,000 events).

• The alarm panel log records: zone number (mapped to bay identifier), event type (open/closed), timestamp.
• Zone log is exportable via the HS2032's serial port or via a compatible alarm communicator module to a monitoring platform or local PC.
• This creates a bay-level open/close log that, combined with the gate access log (which records which customer PIN entered the facility at a given time), provides a reasonable proxy for "customer X accessed bay Y at time Z" for consent evidence purposes.

Limitation: The proxy log records door state, not which customer opened the door. If two customers are on site simultaneously, the bay log alone cannot attribute a door-open event to a specific customer. The gate log provides the time window; the bay log provides door state. Together they are adequate for consent evidence at the usage-pattern level (council wants to see frequency and hours of use, not individual customer attribution at bay level).

Cost (NZD incl. GST) -- indicative

Note: this assumes the DSC HS2032 has sufficient spare zones for 12 bays. The HS2032 base is 8 zones, expandable to 32 via zone expanders. If expanders are not installed, they are required (~$120--$180 per 8-zone expander).

Log extraction: DSC HS2032 event logs can be extracted via the DLS-5 software (DSC's remote management tool) over IP if the panel has an IP communicator module installed, or via the RS-232 serial port locally. This is Connor's task during Phase 1 setup. A simple scheduled script can pull and archive the log to the NAS or a cloud folder automatically, satisfying the 24-month retention requirement.

---

Recommended Option

Recommended package: Option A2 (Hikvision DS-K2602 panel) for Scenario A, or Option B3 (Hikvision DS-K keypad replacement) for Scenario B, combined with the DSC HS2032 reed switch proxy for bay logging.

Rationale:

1. Budget fit: Both A2 and B3 fit within $1,500 (A2 assuming gate pad has Wiegand output; B3 even with keypad replacement).
2. Offline operation: PASS on both -- all credential decisions are local.
3. NZ support: Seadan Security and Hills both have NZ staff and stock; not overseas-only.
4. Logging: All required fields are produced natively (except session duration, which requires a door contact at the gate, included in the install).
5. Camera integration: If Hikvision cameras are selected for Phase 1 (likely given the camera budget), the iVMS-4200 platform unifies camera and access control management -- one interface for Tom.
6. Phase 2 upgrade path: OSDP-capable Hikvision readers can replace the Merlin E840M units at individual bays in Phase 2, achieving native bay-level logging without replacing the controller.

However: If the self-storage management software decision is made before Phase 1 access control is purchased, and that software integrates natively with PTI StorLogix (e.g., Storman does), then Option B1 (PTI StorLogix Cloud) should be revisited despite the higher cost. The native integration eliminates manual log export work. This decision should be made in parallel with the software selection.

Primary recommendation (Scenario A -- gate pad has Wiegand output):

The lower end of this range fits comfortably within $1,500. The upper end (if zone expanders are needed and labour is at the higher rate) exceeds budget by ~$490. It is recommended to confirm whether zone expanders are required and get a fixed-price quote from a Seadan-authorised installer before committing.

Primary recommendation (Scenario B -- gate pad must be replaced):

Add ~$180--$280 for the Hikvision DS-K1T501SF replacement keypad, bringing the total to $1,210--$2,270. Still potentially within budget at the low end; may require a small budget increase if expanders and higher labour rates apply.

Timeline relative to Phase 1 soft launch (May/June 2026):

• Week 1: Tom confirms gate pin pad model and Wiegand output status (highest priority action).
• Week 2: Get quote from Seadan-authorised installer based on confirmed scenario.
• Week 3--4: Hardware ordered and delivered (Seadan holds NZ stock; typical 3--7 day delivery).
• Week 5--6: Installation, programming, and test access log export.
• Week 7: Connor configures remote access (VPN/port forward on Lightwire router) and log archiving script.
• Week 8: Tom test walk-through; confirm log fields match consent evidence requirements.

This fits comfortably before a May/June 2026 soft launch if initiated immediately.

Self-storage software integration path:

If Storman or Sievert Storageman is selected as the management platform, and budget is available, upgrading to PTI StorLogix Cloud (Option B1) is the cleanest integration. If manual CSV export is acceptable for Phase 1 (which it is -- Tom can run monthly exports), Hikvision is the better budget choice now with the option to migrate later.

---

Privacy Compliance Notes

Customer privacy notice must explicitly name "access log management for resource consent evidence" as a purpose from day one of paying customers. This must appear in the Max Storage customer agreement and privacy notice before Phase 1 soft launch.

Log field discipline: The access control log should contain only the minimum required fields (timestamp, zone, PIN reference, event type, duration). Full customer names must not be stored in the access log. The PIN-to-customer mapping is maintained separately in the customer management record.

Access to log: Restricted to Tom and Ed only. iVMS-4200 and Inner Range Inception both support user-level access controls -- configure a Tom-only login for day-to-day log review; Ed retains admin credentials.

Automatic log deletion: Neither Hikvision iVMS-4200 nor Inner Range Inception provides native 24-month auto-delete with a preservation exception. This must be managed by a scheduled export script (Connor to write) that:

1. Archives logs monthly to a designated folder.
2. Deletes records older than 24 months automatically.
3. Skips deletion of any record flagged as "preserved" (manual flag for live claims/investigations).

This is a straightforward scripting task; the gap is process and implementation, not a system limitation. PTI StorLogix Cloud has configurable retention policies that are closer to native compliance, but the preservation exception still requires a manual hold process on any platform evaluated.

---

Open Questions

1. Gate pin pad model (Tom to photograph and confirm): This is the single most important unknown. It determines whether the recommended path is A2 (wire existing pad to new controller, lower cost) or B3 (replace gate pad, slightly higher cost). Target: confirm before end of April 2026.

1. DSC HS2032 spare zone capacity: How many zones are currently in use on the alarm panel? If fewer than 8 are used, no zone expanders are needed for 12 bay contacts. Confirm with Tom or the original installer.

1. Self-storage management software selection: If Storman or Sievert Storageman is selected, revisit PTI StorLogix Cloud as the access control platform for its native integration. This decision should happen before committing to the Hikvision path if budget allows.

1. Gate fail-mode BCA ruling: Pending Rotorua Lakes Council BCA confirmation on whether the gate is on a means of escape. This affects gate motor wiring (fail-safe vs fail-secure), not the access control electronics. The access control panel recommendation stands regardless of BCA outcome; only the gate motor wiring changes.

1. Remote access configuration: Lightwire internet must be live and the router configured for remote LAN access (VPN or port forwarding) before Tom can manage access codes remotely. Confirm this is in Connor's Easter 2026 cable-run scope.

1. Insurer requirements for access control log format: Has the insurer confirmed that a timestamped CSV access log from a digital controller satisfies their investigation requirements? Recommended to confirm this with the insurer as part of the Phase 1 insurance placement.

1. 24-month log archiving script: Connor to write and test the monthly export + auto-delete script before Phase 1 soft launch. This is a hard requirement for Privacy Act compliance (IPP 9 retention purpose).

1. Budget confirmation for Scenario B: If the gate pad has no Wiegand output, the total recommended package reaches $1,210--$2,270. Ed to confirm whether the $1,500 budget can flex to cover the upper end if installation conditions require it.