Camera System Options

Executive Summary

---

Requirements Loaded

Source: Compound requirements document (integration/security-infrastructure.md, last-updated 2026-04-09, version 3) provided directly in task prompt. Individual Tier 1 domain documents were not loaded.

Key constraints extracted:

---

Phase 1 Budget: ~$5,000 NZD (cameras + NVR combined)

Switch (TP-Link TL-SG116P) already purchased -- not counted against Phase 1 camera/NVR budget.

Pricing note: NZ retail pricing for Hikvision products is not reliably obtainable from automated web sources. Indicative NZD prices below are derived from AUD retail pricing with a ~1.10 NZD/AUD conversion plus standard NZ retail margin, cross-referenced against known NZ trade distributor price bands. All prices are estimates and must be confirmed with a NZ reseller before committing. All prices include 15% GST.

---

Camera Models Assessed

The compound requirements confirm Hikvision ColorVu AcuSense cameras as the direction. The relevant product family is the G2 generation (second-generation ColorVu AcuSense), identified by "G2" in the model suffix. G1 models should be avoided -- some G1 variants are Profile S only.

All three models below are confirmed ONVIF Profile T, H.265/H.265+, ColorVu (white LED full-colour night vision), and AcuSense (human/vehicle event classification). All support RTSP and H.264 fallback.

---

Camera Model 1: DS-2CD2347G2-LU (4MP ColorVu AcuSense Turret)

Form factor: Turret/eyeball dome. Best for eave or soffit mounting on a fixed angle. Compact and vandal-resistant.

Indicative NZ price (inc. GST): ~$160-$190 per camera (estimate; confirm with reseller)

Pros: Compact form factor; IK10 vandal protection; 802.3af draw suits NVR PoE ports; two-way audio for remote communication to an unattended site.

Cons: 40m LED range may be marginal for long driveway gate positions; no active deterrence (no strobe/siren); white LED always visible to site visitors.

---

Camera Model 2: DS-2CD2T47G2-LSE (4MP ColorVu AcuSense Bullet with Strobe + Audio)

Form factor: Bullet with built-in white strobe light and audible alarm. Best for pole or wall mounting at gate and driveway positions.

Indicative NZ price (inc. GST): ~$220-$280 per camera (estimate; confirm with reseller)

Pros: 60m LED range covers longer driveway approaches; strobe and audible deterrent activates on human/vehicle detection -- directly relevant to unattended rural site with boats and caravans; AcuSense human/vehicle filtering reduces false alarms from animals; 802.3at compatible with NVR built-in PoE ports.

Cons: 802.3at draw (~10-12W) uses more of NVR PoE budget; bullet form factor slightly more exposed to physical interference than turret (mitigated by IK10 rating); higher unit cost than turret variant.

---

Camera Model 3: DS-2CD2T87G2-LSE (8MP ColorVu AcuSense Bullet with Strobe + Audio)

Form factor: Same bullet with strobe/audio as Model 2 but at 8MP (4K) resolution.

Indicative NZ price (inc. GST): ~$300-$380 per camera (estimate; confirm with reseller)

Storage impact: 8MP H.265+ generates ~14-18 GB/day per camera vs ~8 GB/day for 4MP. A 4-camera setup with 2x 8MP would generate ~40-52 GB/day, requiring a 6-8 TB HDD for 90-day retention. This increases HDD cost but remains within budget.

Pros: 4K detail allows positive rego plate identification at greater distances and in sub-optimal conditions; same AcuSense strobe/deterrent capability as Model 2; future-proofed resolution.

Cons: Higher storage consumption forces larger HDD purchase or shorter retention; higher unit price; 4K is likely overkill for bay area overview cameras where 4MP is sufficient for most evidential purposes.

---

NVR Assessment

Hikvision DS-7616NI-K2/16P -- Confirmed Appropriate

Confirmation notes:

• Alarm inputs: 16 inputs on the NVR meets and exceeds the ≥8 compound requirement (one per bay). PASS.
• Clip locking: Hikvision K2-series NVRs support a Lock function on recorded segments preventing overwrite during HDD cycling. Locked segments persist until manually unlocked. This meets the Privacy Act 2020 mandatory clip locking requirement. Verify with the specific firmware version that the Lock function is accessible via the local GUI -- it is standard on all K2-series NVRs.
• ONVIF Profile G: Confirmed on NVR. Cameras with onboard SD card slots also support Profile G for edge recording.
• Scalability: 16 PoE ports and 16 channels support Phase 3 target (8+ cameras) without NVR replacement. PASS.
• Remote access: Hik-Connect P2P relay eliminates port forwarding requirement. Remote viewing (Hik-Connect mobile app or iVMS-4200 on PC) accessible from anywhere with internet. PASS.
• AcuSense NXI variant note: The DS-7616NXI-K2/16P is the current AcuSense NVR variant with on-NVR AI processing. Confirm with the NZ distributor whether the NI or NXI variant is the current recommended model at the time of purchase -- the NXI may be similarly priced and adds AI analytics on the NVR itself. If the NXI is available at comparable cost, prefer it.

PoE switch architecture: The DS-7616NI-K2/16P's built-in PoE ports should be used for cameras in Phase 1. The TP-Link TL-SG116P (already purchased) serves non-camera PoE devices: alarm panel communicator, access control readers, future IP intercom. These are separate PoE domains with no compatibility conflict.

Indicative NZ price (inc. GST, NVR body only, no HDD): ~$750-$950 (estimate; confirm with reseller)

---

Dahua NVR4216-16P-EI -- Assessed, Not Recommended

Dahua's WizSense 16-channel NVR provides 16 built-in PoE ports and ONVIF Profile T/G support, but has only 4 alarm inputs across the NVR4216 and NVR5216 series. This fails the ≥8 alarm input requirement. Disqualified.

Dahua cameras (e.g., IPC-HDW2849H-S-IL, IPC-HFW2849S-S-IL) are technically ONVIF Profile T and H.265 compliant, but mixing Dahua cameras with a Hikvision NVR introduces support complexity without price advantage. Not recommended for this deployment.

---

Options

Option A: Budget -- DS-2CD2347G2-LU Turret x4 + DS-7616NI-K2/16P NVR + 4 TB HDD

Spec summary:

4x DS-2CD2347G2-LU (4MP ColorVu AcuSense turret, 40m white LED, 802.3af ~7.5W, two-way audio); 1x DS-7616NI-K2/16P NVR (16-ch, 16 PoE, 230W, ONVIF Profile G, 16 alarm inputs); 1x 4 TB Seagate SkyHawk surveillance HDD.

Requirements compliance:

Phase 1 cost (NZD inc. 15% GST) -- estimated:

Installation labour not included. Professional installation adds approximately $500-$1,000.

Phase 2/3 upgrade path:

Add up to 4 cameras (Phase 2: 8 total) by plugging into spare NVR PoE ports -- no NVR replacement required. Upgrade gate camera to DS-2CD2T47G2-LSE strobe bullet for deterrence (~$250 incremental per swap). Add second 4 TB HDD in NVR Bay 2 for Phase 2 retention (~$180 incremental). Phase 3: NVR supports up to 16 cameras -- no replacement required.

What this locks in:

Hikvision NVR ecosystem for full project lifecycle; Hik-Connect P2P for remote access; 4MP resolution ceiling (resolution upgrade requires camera replacement).

NZ suppliers:

PBTech (pbtech.co.nz); Hills Limited (Hikvision ANZ distributor, Auckland/Wellington/Christchurch); Videocraft NZ (videocraft.co.nz -- Hikvision trade distributor). G2 models may require a trade account rather than retail purchase.

Risks:

40m LED range may not cover full driveway -- site survey required before ordering; no active deterrence is a significant gap for an unattended rural boat/caravan storage site; retail availability of specific G2 model numbers can be patchy in NZ (allow 2-3 week lead time); all prices are estimates subject to NZD/USD movement.

---

Option B: Recommended -- Mixed Turret (bay) + Strobe Bullet (gate) + DS-7616NI-K2/16P NVR + 4 TB HDD

Spec summary:

2x DS-2CD2347G2-LU (4MP ColorVu turret, 40m LED, bay coverage); 2x DS-2CD2T47G2-LSE (4MP ColorVu AcuSense strobe bullet, 60m LED, gate and main driveway); 1x DS-7616NI-K2/16P NVR; 1x 4 TB Seagate SkyHawk HDD.

Placement rationale:

• Gate camera 1 (DS-2CD2T47G2-LSE, 4mm): Mounted at vehicle entry point capturing registration plates and driver identity. 60m LED range covers the full driveway approach. Strobe/siren deters intruders. This camera is the primary consent evidence log substitute in Phase 1 given EasyGate has no electronic record.
• Gate camera 2 (DS-2CD2T47G2-LSE, 4mm): Mounted on exit side of gate or on a pole covering the gate and shed frontage from a secondary angle. Provides redundancy for gate events.
• Bay camera 1 (DS-2CD2347G2-LU, 2.8mm or 4mm): Mounted on shed eave covering the large bay door row. Compact turret suits soffit mounting; IK10 protects against deliberate interference.
• Bay camera 2 (DS-2CD2347G2-LU, 2.8mm or 4mm): Mounted on opposite eave or end wall covering small bay door row. Two-way audio allows remote communication to people at the site.

Requirements compliance:

Phase 1 cost (NZD inc. 15% GST) -- estimated:

Estimated cost is well within the $5,000 Phase 1 budget envelope. Remaining headroom (~$2,990 excluding labour) accommodates installation labour ($500-$1,000), additional cabling for larger-than-expected cable runs, and contingency for NZ price variation.

Phase 2/3 upgrade path:

Phase 2: Add 4 cameras to reach 8 total -- 2x DS-2CD2T47G2-LSE for remaining approach angles + 2x DS-2CD2347G2-LU for additional bay coverage. Incremental camera cost approximately $850. Add second 4 TB HDD (~$180) or replace with 8 TB single drive (~$280) for 90-day retention at 8 cameras.

Phase 3: NVR supports up to 16 cameras. Continue adding cameras as site expands. NVR replacement not required until the 16-channel ceiling is reached.

Alarm integration: When the DSC HS2032 alarm system is installed in Phase 2, configure alarm panel output to NVR alarm input for alarm-triggered recording clips and push notifications to Hik-Connect app.

What this locks in:

Hikvision NVR and Hik-Connect ecosystem throughout project lifecycle; camera mounting positions should be finalised before cable is run (re-routing is costly at a rural site); Hik-Connect P2P cloud relay for remote access (no subscription fee for basic remote viewing).

NZ suppliers:

PBTech (pbtech.co.nz) -- confirm DS-2CD2T47G2-LSE stock (this model may require trade order); Hills Limited (Hikvision ANZ distributor) -- preferred for trade account purchases; Videocraft NZ (Auckland) -- Hikvision trade distributor. A Rotorua or Bay of Plenty licensed security installer can supply and install in one engagement; supply-and-install quotes for a 4-camera + NVR system typically run $2,500-$4,000 including labour, cabling, and basic configuration.

Risks:

DS-2CD2T47G2-LSE is 802.3at (PoE+); confirm NVR built-in PoE port firmware supports 802.3at negotiation (the DS-7616NI-K2/16P specification confirms 802.3af/at per port -- this should be a pass, but verify at commissioning); NZ stock availability of the LSE model (allow 2-3 week lead time from distributor); strobe light on gate camera may be intrusive to neighbours if AcuSense sensitivity is misconfigured -- set human/vehicle detection only, not generic motion detection, to avoid false triggers from animals; all prices are estimates subject to NZD/USD movement.

---

Option C: Premium -- DS-2CD2T47G2-LSE x2 (gate) + DS-2CD2T87G2-LSE 8MP x2 (bay) + DS-7616NI-K2/16P NVR + 6 TB HDD

Spec summary:

2x DS-2CD2T47G2-LSE (4MP ColorVu strobe bullet, 60m LED, gate and driveway); 2x DS-2CD2T87G2-LSE (8MP/4K ColorVu AcuSense strobe bullet, 60m LED, high-detail bay coverage); 1x DS-7616NI-K2/16P NVR; 1x 6 TB Seagate SkyHawk HDD.

Rationale: 8MP cameras on bay coverage provide forensic-quality detail for identifying individuals accessing bays. 4MP at the gate already exceeds the 1080p/25fps minimum for vehicle rego plate capture. This option is justified if FMG insurance requires higher-resolution bay coverage or if the site experiences repeat theft/vandalism requiring high-quality forensic evidence.

Requirements compliance:

Phase 1 cost (NZD inc. 15% GST) -- estimated:

Still within budget with room for labour.

Phase 2/3 upgrade path:

Phase 2: Add 4 cameras to reach 8 total. Add 8 TB second HDD (~$280) for 90-day retention at 8 cameras with mixed resolution. NVR unchanged through all phases.

What this locks in:

Same as Option B, plus commitment to 8MP resolution tier for bay cameras. 4K export files are larger -- confirm iVMS-4200 supports facial blurring on 4K footage before the first Privacy Act access request.

NZ suppliers:

Same as Option B. DS-2CD2T87G2-LSE (8MP) may be less commonly stocked in NZ -- allow 3-4 week lead time and confirm availability before committing.

Risks:

8MP storage consumption is sensitive to H.265+ encoding efficiency; actual GB/day depends on scene complexity (outdoor rural with trees and movement = higher bitrate); 4K files increase size of Privacy Act footage exports; marginal incremental benefit over Option B for a rural storage facility -- 4MP is evidentially sufficient for most purposes; higher unit cost with diminishing returns.

---

NVR Confirmation

The DS-7616NI-K2/16P is confirmed appropriate for Phase 1 and the full project lifecycle. No issues identified. If the current-production NXI variant (DS-7616NXI-K2/16P) is available at comparable cost through the NZ distributor, it should be preferred as it adds on-NVR AI processing -- confirm pricing at the time of order.

---

PoE Switch Confirmation

The TP-Link TL-SG116P (already purchased) is confirmed as the non-camera PoE switch. In Phase 1, cameras connect to the NVR's built-in PoE ports. The TL-SG116P serves:

• DSC HS2032 TL2803GR communicator (Phase 2, when alarm is installed)
• Future access control readers and IP intercom
• Any non-camera network drops around the shed perimeter

No compatibility conflicts identified between the TL-SG116P and the Hikvision NVR or recommended cameras.

---

DSC HS2032 Alarm System Compatibility Notes

Dry contact alarm input integration (Phase 2):

The DS-7616NI-K2/16P has 16 alarm input terminals (voltage-free dry contact). The DSC HS2032 alarm panel has programmable output relays (PGM outputs). Integration works as follows:

1. A DSC HS2032 PGM output (normally open relay) is wired to one NVR alarm input.
2. When the DSC HS2032 triggers an alarm event (zone breach), the PGM relay closes, signalling the NVR.
3. The NVR responds: pre-alarm recording is captured (configurable buffer, typically 5-30 seconds before the trigger), event recording is tagged, and a push notification is sent to Hik-Connect app.
4. The NVR can also trigger a camera output relay (e.g., activate an external light or siren) on the alarm event.

Phase 1 note: This integration is not required at Phase 1 launch. The DSC HS2032 is a Phase 2 addition per the strategic context. The NVR alarm input terminals simply sit unused until the alarm panel is installed. No hardware change to the NVR is required when the alarm is added.

TL2803GR communicator note: The TL2803GR provides dual-path (IP primary + 4G cellular fallback) for alarm monitoring. It operates independently of the NVR and communicates directly with the DSC HS2032. The NVR's Hik-Connect P2P remote access is a separate network path. There is no protocol conflict.

What is not possible: The DSC HS2032 cannot pull live camera streams or receive camera events. Integration is one-directional: alarm panel tells NVR to record; NVR does not tell alarm panel anything. Full bidirectional integration (alarm panel receiving camera motion alerts) would require a Video Management System (VMS) platform in Phase 3.

---

Recommended Option

Option B is recommended.

Reasons:

1. All compound requirements met. The NVR has 16 alarm inputs (exceeding ≥8), ONVIF Profile G, H.265+, clip locking, and 16 PoE ports for Phase 3 scalability.

1. Active deterrence at gate is the right approach for this site. The EasyGate has no electronic log -- CCTV is the sole gate record for consent evidence. Simultaneously, the site is unattended and stores high-value items (boats, caravans). The DS-2CD2T47G2-LSE strobe/siren at the gate activates on AcuSense human/vehicle detection and provides both evidence capture and active deterrence. Option A (turrets only) records after the fact without any deterrent effect.

1. Comfortably within budget. Estimated ~$2,010 for Phase 1 leaves approximately $2,990 headroom within the $5,000 budget envelope for installation labour, additional cabling, and NZ price variation.

1. Excellent upgrade path. The DS-7616NI-K2/16P supports 16 cameras. Adding cameras in Phase 2 and 3 requires only purchasing cameras -- no NVR replacement. The TP-Link TL-SG116P (already purchased) serves alarm and access control devices in parallel without conflicts.

1. Operationally appropriate. The Hik-Connect mobile app allows routine footage review, AcuSense push notification management, and clip export without specialist knowledge. The Hikvision NVR local GUI is straightforward for standard tasks (locking clips for access requests, reviewing events, adding cameras).

1. Privacy Act compliance. Clip locking is standard on the K2-series NVR. 90-day retention fits on 4 TB HDD at 4MP H.265+. Footage redaction (facial blurring) is supported in iVMS-4200 for Privacy Act access request responses.

1. No paid monitoring contract. Hik-Connect self-monitoring is subscription-free for basic remote viewing and push notifications. Professional monitoring via the DSC HS2032 / TL2803GR communicator (Phase 2) is a separate, optional service.

Recommended package summary:

TP-Link TL-SG116P switch already purchased -- not included above.

---

Open Questions

1. FMG insurance CCTV retention requirement. The compound requirements flag this as an unresolved external dependency. If FMG requires 90-day retention (vs 31-day floor), the 4 TB HDD recommendation holds. If FMG requires only 28 days, a smaller drive would suffice -- though 4 TB is recommended regardless for future-proofing. Confirm with FMG before finalising HDD capacity.

1. FMG minimum camera count and coverage zones. Some rural insurers specify minimum camera counts, resolution, and coverage as policy conditions. Confirm that 4x 4MP cameras covering entry, exit, and bay area satisfies FMG requirements before finalising camera count and placement.

1. Planning consultant confirmation of CCTV-based gate logging. The compound requirements flag this as a prerequisite before Phase 1 launch. The planning consultant must confirm that CCTV footage (timestamp, vehicle rego, driver identity) is acceptable as consent evidence for gate access records before cameras go live. This is not a hardware question but affects the gate camera placement and configuration requirements.

1. Site survey required before lens size is ordered. The driveway length at Te Waerenga Road determines whether 2.8mm (wider, shorter effective range) or 4mm (narrower, longer range) is appropriate for gate cameras. 4mm is the default recommendation in this document. A pre-order site survey is advisable.

1. NVR current production model confirmation. Confirm with the NZ distributor that the DS-7616NI-K2/16P (or the DS-7616NXI-K2/16P AcuSense NVR variant) is the current recommended 16-channel PoE NVR at the time of purchase. Hikvision iterates product lines and the NXI may be the current-production equivalent at a similar price point.

1. HDD capacity at Phase 1 purchase. If Phase 2 camera expansion (to 8 cameras) is planned within 12 months, consider purchasing an 8 TB HDD at Phase 1 (~$280 estimated) rather than 4 TB (~$180), to avoid a second purchase and service call when cameras 5-8 are added. The incremental cost is small.

1. Trade account for Hikvision supply. Hikvision G2 series ColorVu cameras may not be reliably available through NZ retail channels. Establishing a trade account with Hills Limited or Videocraft NZ before ordering is advisable. Alternatively, a Rotorua or Bay of Plenty licensed security installer can supply and install in a single engagement -- a supply-and-install quote may be cost-competitive with self-supply once installation labour is factored in.

1. Privacy signage before cameras go live. Under Privacy Act 2020 and Privacy Commissioner CCTV guidance, CCTV signage must be in place before recording begins. Camera installation and signage must be coordinated. Signage must be visible at all entry points before the first customer arrives.

1. DSC HS2032 communicator procurement status. The compound requirements note that it is unconfirmed whether the TL280E or TL2803GR communicator has been purchased. The TL2803GR is specified as mandatory for dual-path (IP + cellular) Grade 3 compliance. This is a blocker for Phase 2 alarm integration but does not affect Phase 1 camera procurement.

---

Intruder Alarm System Options

Requirements Loaded

Source: Compound requirements embedded in invocation (security-infrastructure.md, v3,

last-updated: 2026-04-09, status: POPULATED). Individual Tier 1 documents were not loaded.

Change from previous version (v2, 2026-04-01): The DSC PowerSeries Neo HS2032 with

TL2803GR communicator is now the confirmed alarm panel platform. Panel selection is no longer

open. This document has been rewritten accordingly: it covers specification, procurement

options, and open gaps for the confirmed platform rather than comparing competing platforms.

Ajax Hub 2 Plus is retained as a reference only in the open questions section.

Key constraints extracted:

---

Budget

Alarm budget is listed as TBD in guidance.md, subject to compound requirements output.

Estimated total for recommended specification (hardware + installation): $3,050–$3,700 NZD

incl. GST. See itemised breakdown in Option A below. This is the basis for a budget to be

set.

---

Research Notes and Pricing Basis

All prices are NZD inclusive of 15% GST. Installer labour is shown separately from hardware.

Pricing is based on NZ trade distributor estimates and published installer quotes as at April

2026.

DSC PowerSeries Neo is distributed in NZ through Hills Limited (confirmed NZ operation,

Auckland warehouse, nationwide courier, trade account required). DSC Neo is the most widely

installed commercial alarm platform in NZ with the broadest installer network nationally,

including the Bay of Plenty and Rotorua region.

Pricing caveat: Hills NZ trade pricing for DSC Neo products is not publicly listed. Figures

represent best available estimates from trade catalogues and NZ installer quotes 2024–2026.

Confirm all pricing with Hills Limited or a local DSC-certified installer before purchase

commitment.

---

Options

The panel platform is confirmed as DSC HS2032 + TL2803GR. The options below address the

remaining procurement decisions: zone count, detector selection, keypad, and installation.

Three configurations are presented representing different scope levels.

---

Option A: DSC HS2032 — Full Phase 2 Specification (Recommended)

Full specification for a 12-bay facility with perimeter and entry detection, wired reed

switches for bay door monitoring, dual-tech PIR for the main shed, and the TL2803GR dual-path

communicator. This configuration meets all compound requirements and positions the system for

Phase 3 professional monitoring with no hardware changes.

Spec summary:

• Panel: DSC PowerSeries Neo HS2032 (8 zones onboard, expandable to 32 via RS-485 expanders)
• Communicator: DSC TL2803GR (IP + 4G LTE — single unit, dual-path; TL280E is excluded)
• Zone expanders: 2x DSC HSM2108 (adds 8 zones each; total 32 zones available)
• Keypad: DSC HS2LCD (LCD keypad, local arm/disarm and status display)
• PIR main shed: 2x DSC BV-501 (dual-tech PIR + microwave; Grade 3 anti-masking; designed for reflective metal environments)
• PIR entry zone: 1x DSC LC-104-PIMSK (Grade 3 anti-masking; suitable for lower-reflection entry area)
• Bay door contacts: 12x wired surface-mount reed switches (NC, EOL-supervised zones — one per bay)
• Entry/exit contacts: 2x wired surface-mount reed switches (entry door and secondary access point)
• Internal SLA battery: supplied with HS2032 (4+ hours standby; independent of external UPS -- confirmed per compound requirements)
• Tamper-protected steel enclosure: Grade 3 compliant

Zone allocation plan (24 of 32 available zones used):

Requirements compliance:

Phase 1 cost (NZD incl. GST) -- itemised:

Phase 1 scope is limited to confirming installer, procuring hardware, and staging for Phase 2

installation. No alarm hardware is required before soft launch (compound requirements confirm

alarm is Phase 2). If FMG requires alarm at inception, this becomes a Phase 1 cost.

Ongoing: cellular SIM for TL2803GR approximately $5–$15 NZD/month (Spark M2M IoT SIM or

equivalent data-only plan). The TL2803GR uses data only -- no voice plan required.

Phase 2/3 upgrade path:

• Phase 3 professional monitoring: TL2803GR reports Contact ID to SUR-GARD-compatible NZ

monitoring centres. No hardware change required -- add a monitoring centre contract ($30–$50

per month). See Professional Monitoring Options section below.

• Phase 3 per-bay relay outputs (if NVR requires individual bay triggering rather than a global

alarm trigger): add DSC HSM2204 output expander modules ($110–$145 each; 4 relay outputs per

module). A single PGM relay is likely sufficient for a group recording trigger.

• Phase 3 perimeter PIR: DSC LC-104-PIMSK-WR (outdoor weatherproof variant) or DSC BV-501-WR

for driveway and gate monitoring. These wire to spare zone inputs already available.

• Phase 3 wireless zones (if any future detector cannot be economically cabled): DSC HSM2HOST4

wireless receiver added to the RS-485 bus without panel replacement.

• NVR integration: wire PGM1 relay output on HS2032 to one alarm input on the Hikvision NVR

(DS-7616NI-K2/16P has 16 alarm inputs confirmed in compound requirements). Configure NVR to

trigger group recording on relay closure. This wiring is done at Phase 2 installation.

What this locks in:

• DSC PowerSeries Neo ecosystem for all future expansion (keypads, expanders, and detectors

must be DSC Neo compatible -- existing HS2032 is not forward-compatible with DSC Neo HS3

series panels without hardware replacement)

• A DSC-certified installer for panel-level reconfiguration (zone changes, partition changes,

communicator re-provisioning). Routine arm/disarm and alert acknowledgement via DSC Connect

app do not require installer involvement.

• One cellular SIM on a NZ carrier for the TL2803GR. Carrier can be changed but requires

installer re-provisioning of the communicator. Spark M2M SIM is the recommended starting

point given Spark's rural coverage in the Rotorua/Hamurana area.

NZ suppliers:

• Hills Limited NZ -- primary DSC distributor; hills.com.au; trade account required; Auckland

warehouse with nationwide courier; 0800 HILLS NZ

• Specialist Security (Rotorua) -- local DSC installer; can supply and install
• Alarm Systems NZ (Tauranga/BOP region) -- DSC-certified installer; covers Rotorua area
• CSC Security NZ -- secondary DSC distributor (less common for HS2032 in regional markets)

Risks:

• Installer availability: confirm a DSC-certified installer is available in Rotorua or willing

to travel from Tauranga before committing to a timeline. Hills Limited maintains a registered

installer list -- this is the first contact to make.

• FMG Grade 3 requirement: EN 50131 Grade 3 is a European standard referenced by NZ insurers

without a direct NZ equivalent. If FMG confirms Grade 2 is acceptable, the dual-path

communicator (TL2803GR) remains the correct choice for reliability but is no longer a hard

Grade requirement. Do not downgrade to TL280E until FMG responds -- the cost difference is

modest and the TL2803GR is the correct communicator regardless of grade.

• TL2803GR purchase status: compound requirements note it is unconfirmed whether the TL2803GR

or TL280E has been purchased (Gap 5). If TL280E has already been purchased, this is a non-

compliant configuration for Grade 3 -- a TL2803GR must be substituted before installation.

Confirm before any hardware ordering proceeds.

• DSC Connect app: functional and adequate for routine use. Not the most polished user

experience compared with some newer platforms but well-suited to arm/disarm and notification

review without specialist knowledge.

---

Option B: DSC HS2032 — Minimum Phase 1 Specification (Interim / Budget-Constrained)

A reduced specification using the same confirmed panel and communicator, but with fewer zone

expanders and a simplified detector layout. Suitable only if FMG does not require a Grade 3

alarm at policy inception and the alarm installation must be accelerated or cost-constrained.

This configuration is upgradeable to Option A without panel replacement.

Spec summary:

• Panel: DSC PowerSeries Neo HS2032 (8 zones onboard only -- no expanders in this phase)
• Communicator: DSC TL2803GR (as Option A -- mandatory, not reduced)
• Keypad: DSC HS2LCD (as Option A)
• PIR main shed: 1x DSC BV-501 (single dual-tech PIR covering the main shed centre; reduced coverage)
• Entry door contact: 1x wired reed switch
• Internal SLA battery: as Option A
• Bay door contacts: none in this phase -- 8-zone panel with keypad, PIR, and communicator leaves only 5 usable zones after tamper and power fault zones; bay door monitoring deferred to Option A upgrade

Limitations vs compound requirements:

Phase 1 cost (NZD incl. GST) -- itemised:

Phase 2/3 upgrade path:

Add 2x HSM2108 zone expanders ($290 hardware) plus 12 reed switches and labour ($650–$900) to

reach Option A specification. Total upgrade cost approximately $1,200–$1,500 incl. labour. No

panel replacement required -- all expanders are RS-485 bus additions.

What this locks in:

Same DSC ecosystem and installer dependency as Option A. The reduced scope does not reduce

lock-in -- it simply defers cost.

NZ suppliers:

Same as Option A.

Risks:

• Bay doors unmonitored. A break-in through a bay door would not trigger the alarm. This is

a significant security gap for an unattended facility and may be unacceptable to FMG.

• Grade 3 target is not met by this configuration. If FMG requires Grade 3, Option B is not

compliant.

• This option is only appropriate if FMG confirms Grade 2 is acceptable and bay door monitoring

is not required by the insurer. It should not be used as the default -- Option A is the

correct full specification.

---

Option C: DSC HS2032 — Phase 2 with Merlin AUX Terminal Integration (If Confirmed)

Identical to Option A but substitutes the Merlin roller door opener AUX terminal (if

available) for individual reed switches on each bay door. If the Merlin opener model on site

has an AUX terminal that changes state on open/close, this can be wired to an alarm zone input

to capture bay events without fitting a separate reed switch and magnet to each door.

Condition: This option is BLOCKED pending confirmation of the Merlin opener model (Gap 4

in compound requirements). If the Merlin model has no AUX terminal, Option C reverts to Option

A with reed switches.

Difference from Option A:

• Replace 12x reed switches ($216 plus labour) with 12x wired AUX terminal connections to the

Merlin openers. The AUX terminal tap is typically a short run from the opener head unit to the

nearest alarm zone input terminal. Cable routing may be simpler than a door-frame reed switch

installation depending on opener mounting position.

• Cost impact: minor; AUX terminal wiring may reduce labour slightly if opener heads are

positioned near cable routing paths. Hardware cost saving is approximately $180–$220 (reed

switches and magnets not required). Labour saving depends on shed layout.

• Risk: AUX terminal behaviour varies by Merlin model and may not provide clean NC zone signals

without an adaptor relay. An installer must confirm the signal type before relying on AUX

terminal inputs for supervised EOL zones.

Phase 2/3 upgrade path:

Identical to Option A. AUX terminal wiring does not affect any downstream upgrade.

Risks:

• BLOCKED until Merlin opener model is confirmed and AUX terminal availability is verified.
• AUX terminal signal compatibility with DSC zone inputs requires installer confirmation.
• If AUX terminal is not available or signal is incompatible, revert to Option A with reed

switches at no material cost penalty.

---

Recommended Option

Option A -- DSC HS2032 Full Phase 2 Specification -- is the recommended option.

The panel platform is confirmed by compound requirements. Option A implements that platform

fully and correctly per all compound requirements.

Rationale:

1. Full compliance with compound requirements.

Option A meets every constraint in the compound requirements including Grade 3 target, dual-path

TL2803GR communicator, anti-masking PIR, EOL-supervised bay door zones, PGM relay output to

NVR, fire/security separation, internal SLA battery, and self-monitoring via DSC Connect.

2. Bay door monitoring is a security baseline, not optional.

Twelve unmonitored bay doors on an unattended facility represents the primary intrusion

surface. Wired NC reed switches with EOL supervision are the most reliable and maintenance-free

method for bay door monitoring. Option B's omission of bay door contacts is a significant gap

that is unlikely to satisfy FMG.

3. Cost is within a reasonable budget envelope.

At $3,100–$3,700 NZD incl. GST, the full specification is comparable to the original estimates

in guidance.md for the alarm area (TBD but contextually in the $3,000–$5,000 range given the

security budget envelope of $5,000 for cameras and NVR). The alarm does not conflict with

the camera budget as a separate line item.

4. Phase 3 requires no hardware change.

The TL2803GR already supports Contact ID reporting. Adding professional monitoring in Phase 3

is a contract change, not a hardware change. This is the correct way to phase costs for an

operation that is not yet revenue-stabilised.

5. Installer network supports the Rotorua location.

DSC Neo is the dominant commercial alarm platform in NZ. A qualified installer in or near

Rotorua is available through Hills Limited's registered installer network without the regional

availability uncertainty that would apply to less common platforms.

Option C is the preferred alternative if Merlin AUX terminal availability is confirmed --

it achieves the same outcome with marginally simpler bay door wiring. Revert to Option A if

the Merlin model does not support AUX terminal zone outputs.

Option B should be used only if FMG confirms Grade 2 is acceptable, bay door monitoring

is not required by the insurer, and there is a compelling budget reason to phase the

installation. It is not recommended as a default position.

---

Professional Monitoring Options -- Phase 3

Phase 3 professional monitoring is the end-state target and may be required by FMG within a

defined post-inception period. All options below are compatible with DSC HS2032 + TL2803GR

via Contact ID / SUR-GARD protocol over IP and cellular paths.

Alarm Master NZ

• Supports DSC Neo via IP and cellular (TL2803GR Contact ID)
• Grade A1 monitoring centre (24/7 staffed)
• Typical rural storage facility rate: $35–$45 NZD/month incl. GST
• Setup fee: approximately $100–$150 one-off
• Guard response available as separate callout service (approximately $180–$350 per response)
• Contact: alarmmaster.co.nz

Elcon Security

• Supports DSC Neo and Contact ID via IP and cellular
• Grade A monitoring centre
• Typical rural storage rate: $30–$50 NZD/month incl. GST
• Month-to-month contracts available (preferred -- no long-term lock-in)
• Contact: elcon.co.nz

Stanley Security NZ

• Largest NZ monitoring centre network (Securitas group)
• DSC Neo compatible; Contact ID supported
• Typical commercial rural rate: $40–$55 NZD/month incl. GST
• Longer contract terms common (12–24 months) -- confirm terms before engaging
• BOP region guard response integration available (Rotorua patrol route)
• Contact: stanleysecurity.co.nz

Recommendation for Phase 3: Alarm Master NZ or Elcon Security. Both offer month-to-month

terms suited to a business in early revenue stage. Confirm with FMG whether their approved

monitoring centre list restricts choice before contracting.

---

Open Questions

1. FMG insurance requirements -- highest priority before hardware purchase.

FMG must be updated when the shed usage changes from farm implements to commercial storage.

Current cover may be inadequate for the changed use. When the updated FMG quote is received,

confirm:

• Whether a monitored alarm is required at policy inception or within a defined post-inception

period (this determines whether the alarm is Phase 1 or Phase 2).

• What alarm grade FMG requires for a rural unattended commercial storage facility (Grade 2 or

Grade 3, and which standard).

• Whether FMG has an approved NZ monitoring centre list that restricts provider choice.
• If Grade 2 is acceptable, the TL2803GR dual-path communicator remains correct for reliability

but is not a hard Grade requirement -- this does not change the hardware recommendation.

This is Gap 2 in the compound requirements and is the single highest-priority external

dependency for the alarm specification.

2. TL2803GR vs TL280E purchase confirmation -- must be resolved before ordering.

Compound requirements note (Gap 5) that it is unconfirmed which communicator has been

purchased. The TL280E (IP only) is explicitly excluded by compound requirements for Grade 3

compliance. If TL280E has been purchased, it must be replaced with a TL2803GR. Confirm

current purchase status before hardware ordering proceeds.

3. Merlin opener model and AUX terminal availability.

If the Merlin roller door opener model on site has an AUX terminal, Option C (AUX terminal

integration) may simplify bay door wiring. This is Gap 4 in compound requirements. Confirm

the Merlin model before installation planning is finalised. If AUX terminal is not available,

Option A with reed switches is the default -- no delay required to proceed with Option A.

4. Installer confirmation in Rotorua/BOP region.

Contact Hills Limited NZ (hills.com.au) for their registered DSC installer list in the Bay of

Plenty/Rotorua region. Confirm a local DSC-certified installer can schedule Phase 2 work

before committing to a timeline. This is a practical prerequisite, not a technical one.

5. NVR alarm input behaviour -- confirm with camera sourcing agent.

The compound requirements confirm the Hikvision DS-7616NI-K2/16P has 16 alarm inputs. A

single PGM relay from the HS2032 to one NVR alarm input is sufficient to trigger a group

recording event across all cameras simultaneously. Per-bay relay outputs (one relay per bay)

are only needed if the NVR is intended to trigger per-camera recording independently per bay.

Confirm intended NVR alarm input behaviour with the camera sourcing agent before finalising

the alarm bill of materials. This affects whether the DSC HSM2204 output expander is needed.

6. Alarm installation timing relative to soft launch.

The alarm is classified as Phase 2 in strategic context (not required before soft launch).

However, if FMG requires a monitored alarm within a defined period post-inception, installing

before soft launch eliminates that timing risk. This is a budget and risk tolerance decision.

The hardware lead time for DSC Neo components through Hills Limited is typically 3–7 business

days; installer scheduling is the likely constraint on timeline.

7. Cellular carrier for TL2803GR SIM.

Spark M2M IoT SIM is the recommended starting point given Spark's rural coverage in the

Hamurana/Rotorua area. Confirm Spark 4G signal at the shed location before provisioning.

One NZ and 2degrees are fallback options if Spark signal is insufficient at the site.

The TL2803GR supports all three NZ carrier LTE bands.

---

Access Control System Options

Requirements Loaded

Compound requirements provided inline by invoking agent, dated 2026-04-09, version 3. Status: POPULATED.

This document supersedes the previous version (dated 2026-04-01), which assumed the gate pin pad model was unknown and evaluated Wiegand-output scenarios. The v3 compound requirements confirm the gate hardware is an EasyGate Wireless Keypad (433.92 MHz RF, HCS101 rolling code), which has no data output and produces no electronic access log. This resolves the Scenario A / Scenario B split in the previous version -- Phase 1 hardware is confirmed, and Phase 1 has no electronic log capability.

Key constraints extracted from compound requirements:

• Phase 1 gate hardware confirmed: EasyGate Wireless Keypad (433.92 MHz RF, HCS101 rolling code). No data output. No electronic access log possible in Phase 1.
• Phase 1 logging substitutes (mandatory from launch): gate camera at 1080p/25fps minimum; manual PIN register; 90-day CCTV retention; planning consultant confirmation that CCTV-based logging is acceptable as consent evidence.
• Phase 2 electronic log minimum fields: timestamp (YYYY-MM-DD HH:MM, NZ local, DST-aware), bay/zone identifier, customer identifier (PIN reference, not full name), event type (granted/denied/opened/closed), session duration (HH:MM from open to close where capturable).
• Log export: CSV minimum; JSON via API preferred. PDF-only is disqualifying.
• Log retention: 90-day insurer floor; 24-month target with automatic deletion; mandatory preservation exception for live claims/investigations/Privacy Act requests.
• Phase 2 panel must support: remote code management without site visit; per-event log in five-field format; CSV minimum export; 12-month on-system retention minimum.
• Offline capability: access control must function without internet. Cloud-only credential validation is disqualifying.
• Individual PIN per customer (not shared codes).
• Protocol: Wiegand or OSDP reader wired to central panel. Panel relay triggers existing gate motor.
• No paid ongoing monitoring contract required as a Phase 1 or Phase 2 mandatory cost.
• Phase 1 budget: ~$1,500 NZD including GST (note: EasyGate is already installed, so Phase 1 spend is primarily CCTV-based gate logging infrastructure, not access control hardware).
• Gap 1: Planning consultant must confirm CCTV-based gate logging is acceptable consent evidence before Phase 1 launch.
• Gap 3: BCA ruling required on gate fail-mode (fail-safe vs fail-secure).
• Gap 7: Self-storage management software not yet selected -- affects Phase 2 integration path.

---

Phase 1 Status: EasyGate Confirmed -- No Electronic Log

What is in place

The EasyGate Wireless Keypad (433.92 MHz RF, HCS101 rolling code) is already installed at the vehicle access gate. It provides PIN-code-based gate entry for customers. It has no data output port and produces no electronic access log -- this is a confirmed hardware characteristic, not a configuration gap.

What Phase 1 logging looks like

Phase 1 operates without electronic access logging. The following substitutes are mandatory from the date of first paying customers:

Gate camera (CCTV-based logging):

A camera covering vehicle entry and exit at the gate, capturing registration plates and driver identity at 1080p minimum and 25fps minimum. This is the primary gate access record in Phase 1. Footage must be retained for a minimum of 90 days (insurer floor). The camera system is covered in the source-cameras document; this document notes only that the gate camera is a mandatory Phase 1 requirement for access logging purposes, not an optional addition.

Manual PIN register:

A physical register (paper or secure spreadsheet) recording each customer's assigned PIN code, updated on every code change (addition or removal), stored securely (locked filing or access-controlled digital location). This register is personal information under Privacy Act 2020; it must be included in scope for any subject access request. The register should record: customer name, assigned PIN, date assigned, date removed (if applicable), and reason for removal.

Planning consultant confirmation:

Before the first paying customer, written confirmation must be obtained from the planning consultant that CCTV-based gate logging is acceptable as consent evidence in lieu of a digital log. This is Gap 1 from the compound requirements. Phase 1 soft launch is blocked until this is resolved.

Phase 1 budget implications

The EasyGate is already installed. Phase 1 access control capital spend is effectively $0 for the gate controller itself. The $1,500 Phase 1 budget for access control should be preserved for Phase 2 hardware, or applied to the gate camera if the camera budget is insufficient to cover a gate-specific ANPR-capable camera.

Manual PIN register process (operational)

The following process must be in place from Phase 1 launch:

1. When a customer is onboarded, a unique PIN is programmed into the EasyGate via the EasyGate management process (typically a keypad programming sequence or companion remote). The PIN is recorded in the manual PIN register immediately.
2. The customer is informed of their PIN at onboarding. The privacy notice signed at onboarding must name access log management for resource consent evidence as a data purpose.
3. When a customer vacates or is removed, their PIN is deleted from the EasyGate immediately. The PIN register is updated with the removal date.
4. The manual PIN register is reviewed monthly. Any inactive PINs are confirmed deleted from the EasyGate.
5. The CCTV gate footage is checked regularly to confirm the 90-day retention setting is functioning correctly.

---

Phase 1 Budget: ~$1,500 NZD incl. GST

Note: As the EasyGate is already installed and Phase 1 has no electronic log requirement beyond CCTV, the access control capital spend in Phase 1 is minimal. The $1,500 envelope is better deployed in Phase 2 for the access control panel and reader. Any gate camera costs are shared with the camera system budget (~$5,000).

---

Phase 2 Options: Access Control Panel

Phase 2 adds a Wiegand or OSDP reader at the gate (wired to a central access control panel), replacing or supplementing the EasyGate with an electronically logged entry point. The EasyGate may remain as a backup entry mechanism. The panel relay triggers the existing gate motor.

---

Option A: Inner Range Inception + Wiegand/OSDP Reader

Spec summary

Inner Range Inception is an NZ/AU-manufactured access control and alarm panel (manufactured in Melbourne; distributed in NZ by Coda Systems and other Inner Range-authorised dealers). The Inception controller runs its own web-based management interface locally -- no cloud dependency for credential validation or access decisions. Credentials are stored on the controller. Internet is required only for remote management access (the controller serves its own web UI over LAN or via VPN/port forwarding from the Lightwire connection).

• Controller: Inner Range Inception (4-door base unit, expandable to 16+ doors).
• Reader at gate: Inner Range OSDP reader or any Wiegand-compatible PIN keypad (e.g., HID RP40, Inner Range INX series).
• Existing EasyGate: remains wired in parallel as a backup, or is removed -- gate motor relay is wired from the Inception output.
• Per-customer PINs managed via the Inception web UI. PIN addition/removal does not require a site visit (remote web UI over LAN/VPN).
• Access log: stored on the Inception controller (internal flash); exportable as CSV. Fields native: timestamp, door/zone name, user credential reference, event type (granted/denied/opened/closed). Session duration requires an exit reader or door contact on the gate.
• REST API: available. Allows external software to query the log programmatically.
• UPS: Inception controller runs on 12V DC with a lead-acid backup battery. Gate motor requires a separate UPS circuit.
• Offline behaviour: all credential decisions are made locally. Gate operates during internet outage.

Requirements compliance

Phase 2 cost (NZD incl. GST) -- indicative

Lower-end estimate fits within $1,500. Upper end exceeds budget by ~$560. A fixed-price quote from a Coda Systems-authorised installer should be obtained to confirm.

Phase 3 upgrade path

• Add OSDP readers at individual bay roller doors in Phase 3 for native bay-level logging, replacing the proxy approach.
• Inception scales to 16+ doors without controller replacement.
• REST API supports integration with a future self-storage software platform.
• Inception can be integrated with the DSC HS2032 alarm panel via input/output triggers.

What this locks in

Inner Range ecosystem for access control. Future readers and keypads should be Inner Range or OSDP-compatible. Does not lock in any self-storage software platform.

NZ suppliers

• Coda Systems Ltd, Auckland (Inner Range authorised distributor): codanzsecurity.co.nz
• Inner Range NZ dealer network: innerrange.com (find NZ dealers)
• Alarm Systems NZ: nationwide dealer network

Risks

• Upper cost estimate exceeds $1,500 Phase 2 budget; fixed-price quote needed.
• Log retention auto-delete (24-month) requires a scripted external process -- not native.
• Session duration logging requires a door contact at the gate exit, which must be included in the installation scope.
• Remote web UI requires the Lightwire connection to be live and a VPN or port-forward configured.
• No out-of-box integration with NZ self-storage management software -- API work required if Storman or similar is selected.

---

Option B: Hikvision DS-K2602 Panel + Wiegand/OSDP Keypad

Spec summary

Hikvision DS-K series access control panels are available in NZ through Seadan Security (Auckland/Christchurch) and Hills (nationwide). The DS-K2602 is a 2-door controller -- sufficient for the gate plus one additional zone in Phase 2. If more zones are needed in Phase 3, upgrade to the DS-K2604 (4-door) without replacing readers. Management is via the Hikvision iVMS-4200 desktop software (Windows) or the controller's web UI. If Hikvision cameras are selected for Phase 1 (likely given the camera sourcing work), iVMS-4200 provides a unified interface for cameras and access control.

• Controller: Hikvision DS-K2602 (2-door; upgrade to DS-K2604 for Phase 3 expansion).
• Reader at gate: Hikvision DS-K1T501SF outdoor PIN keypad or DS-K1T671MF fingerprint/PIN reader.
• Existing EasyGate: can remain as backup or be removed; gate motor relay wired from DS-K2602 output.
• Per-customer PINs managed via iVMS-4200 or controller web UI. Remote management requires LAN/VPN access.
• Access log: stored on controller SD card or internal flash; exportable CSV from iVMS-4200 or web UI. Fields: timestamp, door name, user ID, event type. DST-aware timezone configurable.
• ISAPI REST API: available; documented; used by third-party integrations.
• UPS: controller is 12V DC with battery backup input standard.
• Offline behaviour: PASS. Credentials stored locally. Gate operates during internet outage.

Requirements compliance

Phase 2 cost (NZD incl. GST) -- indicative

The lower end fits comfortably within $1,500. The upper end exceeds budget by approximately $40. This is the most budget-consistent Phase 2 option evaluated.

Phase 3 upgrade path

• Replace DS-K2602 with DS-K2604 if more than 2 zones are required (controller swap only; readers remain).
• Add Hikvision OSDP readers at individual bays to replace the proxy approach, achieving native bay-level logging.
• Integrate with Hikvision NVR for camera-triggered recording on access events (direct integration, no middleware, if Hikvision cameras are also in place).
• ISAPI enables future self-storage software integration.

What this locks in

Hikvision ecosystem for access control. Some degree of ecosystem tie-in with cameras if co-sourced. Does not lock in self-storage software.

NZ suppliers

• Seadan Security: seadan.co.nz (Auckland, Christchurch)
• Hills: hills.com.au (nationwide)
• Videocom: videocom.co.nz

Risks

• iVMS-4200 is a Windows desktop application; the web UI is functional but less polished for routine management.
• Hikvision is a Chinese-government-linked manufacturer. Not restricted for private commercial use in NZ, but noted for awareness.
• Log retention auto-delete (24-month) requires an external scripted process -- not native.
• OSDP support varies by DS-K model; must be confirmed before purchase if OSDP is required.
• No out-of-box NZ self-storage software integration.

---

Option C: PTI StorLogix Cloud + PTI Storm Keypad (Self-Storage Native)

Spec summary

PTI Security Systems (US manufacturer; NZ distribution via SecureIT NZ and Sentinel Self-Storage Systems) makes the dominant self-storage access control platform in NZ and Australia. StorLogix Cloud is a SaaS management platform; the PTI Storm or Stratus keypads are the matching hardware. This is a purpose-built self-storage solution with native bay/zone logging, individual PIN management, and out-of-box integrations with NZ/AU self-storage management software (Storman, Sievert Storageman, DoorSwap, and others).

• Hardware: PTI Storm keypad at gate. PoE or 12V powered. RS-485 or TCP/IP back to the StorLogix local controller unit.
• Controller: StorLogix local unit + StorLogix Cloud management portal.
• Credentials stored locally on controller -- gate operates during internet outage (PASS for offline).
• Log fields (all five required fields native): timestamp (NZ timezone), zone/door name, PIN reference, event type, session duration (calculated from open-to-close events at the gate).
• Remote management: StorLogix Cloud web portal; PIN add/remove without site visit.
• Export: CSV and REST API; used natively by Storman and other platforms.
• Ongoing subscription: StorLogix Cloud requires a SaaS subscription fee. Indicative cost for a small NZ facility: ~NZD $80--$180/month (USD $50--$120/month equivalent). This is an operating cost, not a capital cost.

Requirements compliance

Phase 2 capital cost (NZD incl. GST) -- indicative

Ongoing operating cost:

The capital cost exceeds the $1,500 Phase 2 budget by $50--$750. The ongoing subscription is an additional operating cost not within the capital envelope. This option should only be selected if the self-storage management software decision (Gap 7) confirms a platform (e.g., Storman) with native PTI StorLogix integration, making the additional cost worthwhile through reduced integration work.

Phase 3 upgrade path

• Add PTI keypads at individual bays for native bay-level logging.
• Direct integration with selected self-storage management software from Phase 2 onwards.
• StorLogix scales to full facility without controller replacement.

What this locks in

PTI ecosystem and StorLogix Cloud SaaS subscription. Switching to a different platform requires replacing keypads and data migration. The SaaS subscription is a permanent operating cost.

NZ suppliers

• SecureIT NZ: secureit.co.nz
• Sentinel Self-Storage Systems: sentinel.co.nz (also supply Storman)

Risks

• Exceeds Phase 2 capital budget; requires budget approval before committing.
• Ongoing SaaS subscription cost must be included in the Max Storage operating budget.
• RS-485 cabling between keypad and controller may require a new cable run.
• PTI is a US company; NZ support is through local resellers, not direct.
• Proprietary RS-485 protocol at reader level reduces upgrade flexibility compared to OSDP.

---

Bay Roller Door Logging: Proxy Approach (All Phase 2 Options)

None of the Phase 2 panel options above provides native bay-level logging without replacing the Merlin roller door openers. Replacing 12 Merlin units is outside Phase 2 budget and disproportionate to the current scale of operations.

Recommended proxy approach: door contacts (reed switches) wired to DSC HS2032 alarm panel zones.

A surface-mount reed switch (magnetic door contact) is installed on each roller door and wired to a spare zone input on the DSC HS2032 alarm panel. The HS2032 logs all zone open/close events with timestamp to its internal event buffer.

• Zone log records: zone number (mapped to bay identifier), event type (open/closed), timestamp.
• Log is extractable via the HS2032 serial port or via the TL2803GR IP communicator if installed.
• This creates a bay-level open/close log that, combined with the gate access log (which records which customer PIN entered the facility and when), provides a reasonable proxy for consent evidence at the usage-pattern level (council requires frequency and hours of use; individual customer-to-bay attribution is not required at bay level).

Limitation: The proxy log records door state, not which customer opened the door. If two customers are on site simultaneously, the bay log cannot attribute a specific door-open event to a specific customer. The gate log provides the time window; the bay log provides door state. Together they are sufficient for consent evidence at the level the planning consultant requires (access frequency and hours of use patterns).

Cost (NZD incl. GST) -- indicative

The number of zone expanders required depends on how many zones are currently used on the HS2032. If fewer than 8 zones are in use, no expanders are needed. This must be confirmed with the original alarm installer or by inspection of the panel.

Log extraction: DSC HS2032 event logs can be extracted via DLS-5 software (DSC's remote management tool) over IP if the TL2803GR communicator is installed, or via RS-232 serial port locally. A scheduled script can pull and archive the log monthly, satisfying the 24-month retention requirement.

---

Gate Motor Controller Integration

The existing gate motor at the Te Waerenga Road site accepts a dry-contact relay input to trigger opening. All Phase 2 panel options (Inner Range Inception, Hikvision DS-K2602, PTI StorLogix) provide a relay output that can be wired to this input. Wiring is straightforward for a security technician.

Fail-mode configuration: The relay output on all three options is configurable for fail-safe (gate opens on power loss) or fail-secure (gate remains closed on power loss). The correct configuration depends on the BCA ruling (Gap 3). Hardware for all three options can be wired either way; the configuration choice is made at installation time and can be changed by the installer without replacing hardware.

EasyGate coexistence: The EasyGate can remain operational in parallel with the Phase 2 panel during a transition period, with both wired to the gate motor trigger input. After Phase 2 logging is confirmed working and customers have been issued their new PINs via the panel, the EasyGate can be decommissioned or retained as a backup.

---

Self-Storage Management Software Integration (Gap 7 -- Unresolved)

The self-storage management software platform has not yet been selected (Gap 7). This decision directly affects which Phase 2 access control option is most cost-effective:

For Phase 2, manual CSV export is an acceptable interim approach. The access log is exported monthly (or on demand) and stored to the NAS or cloud archive. If Storman or Sievert Storageman is selected as the management platform, revisiting Option C (PTI StorLogix Cloud) is warranted despite the higher capital cost and subscription fee, as the native integration eliminates ongoing manual export work.

---

Recommended Option

Phase 1 (immediately): Operate with the EasyGate as confirmed. Implement the mandatory Phase 1 substitutes: gate camera at 1080p/25fps minimum, manual PIN register, 90-day CCTV retention, and planning consultant confirmation (Gap 1). No additional access control hardware is required or recommended for Phase 1.

Phase 2 recommended option: Option B (Hikvision DS-K2602 + DS-K1T501SF keypad), combined with the DSC HS2032 reed switch proxy for bay-level logging.

Rationale:

1. Budget: Option B is the only Phase 2 option where the full installation (panel, reader, door contact, labour) fits within or very close to $1,500 NZD. Option A (Inner Range Inception) is likely to exceed $1,500 at realistic labour rates. Option C (PTI StorLogix Cloud) exceeds the capital budget by $50--$750 plus requires an ongoing subscription.

1. Offline operation: PASS. All credential decisions are local. The EasyGate deficiency (no electronic log) is fully resolved in Phase 2 -- the DS-K2602 logs every event with all five required fields.

1. NZ support: Seadan Security (Auckland, Christchurch) and Hills (nationwide) both carry Hikvision DS-K stock and have NZ-based support staff. Hills in particular has branches in Rotorua, making a local service relationship practical.

1. Camera integration: If Hikvision cameras are selected for Phase 1 (the likely outcome given camera sourcing), the iVMS-4200 software platform provides a unified interface for cameras and access control. This reduces the number of management interfaces Tom needs to use for routine tasks.

1. Consent evidence: The DS-K2602 log produces all five required fields natively (with a door contact installed for session duration). CSV export is native. JSON is available via ISAPI. PDF-only disqualifier does not apply.

1. Phase 3 upgrade path: Hikvision OSDP-capable readers can be added at individual bay roller doors in Phase 3, achieving native bay-level logging. The DS-K2602 controller is retained. No forklift upgrade is needed until Phase 3.

Caveat: If the self-storage management software selection (Gap 7) results in choosing Storman or Sievert Storageman, and budget is confirmed to extend to the PTI StorLogix capital cost plus subscription, Option C (PTI StorLogix Cloud) should be reconsidered at that time for its native integration and superior retention policy management. This decision should be made before committing to Phase 2 access control hardware.

Recommended Phase 2 package (Option B + bay proxy):

The lower end (no zone expanders needed, standard labour rate) fits within $1,500. The upper end exceeds budget if zone expanders are required and labour is at the upper rate. A fixed-price quote from a Seadan-authorised or Hills installer, combined with confirmation of the HS2032 zone availability, will confirm which end of the range applies.

---

Privacy Compliance Notes

The customer privacy notice must explicitly name access log management for resource consent evidence as a purpose from day one of paying customers. This applies in both Phase 1 (manual PIN register + CCTV) and Phase 2 (electronic access log). The privacy notice must be updated before Phase 2 electronic logging goes live to include the electronic log fields as named data.

The access control log must contain only the minimum required fields: timestamp, zone, PIN reference, event type, session duration. Full customer names must not be stored in the access log. The PIN-to-customer mapping is maintained separately in the customer management record.

Neither Hikvision DS-K nor Inner Range Inception provides native 24-month auto-delete with a preservation exception. A scheduled script must be implemented that: archives the access log monthly to a designated folder; deletes records older than 24 months; skips deletion of any record manually flagged as preserved (for live claims, Police investigations, or Privacy Act access requests). This scripting task must be completed and tested before Phase 2 goes live.

---

Items Blocked Pending External Input

---

Open Questions

1. Has the planning consultant confirmed in writing that CCTV-based gate logging is acceptable consent evidence for the resource consent application? This is a hard Phase 1 launch blocker (Gap 1).

1. How many zones are currently active on the DSC HS2032 alarm panel? If 8 or more zones are already used, zone expanders are required for the 12-bay reed switch installation, adding $120--$360 to the Phase 2 cost.

1. Has the BCA issued a ruling on the gate fail-mode? This does not affect hardware selection but does affect how the gate motor relay is wired at Phase 2 installation (Gap 3).

1. Which self-storage management software is preferred? If Storman or Sievert Storageman is selected, the question of Option B vs Option C should be formally revisited before Phase 2 hardware is ordered (Gap 7).

1. Is a Hills branch (Rotorua) able to supply and install the Hikvision DS-K2602 system, or will Seadan Security (Auckland) need to be engaged for supply with a local security installer handling the fit? A local installer is preferable for ongoing support.

1. Has the insurer confirmed that a timestamped CSV access log from a digital controller satisfies their evidence requirements for claims investigation? This should be confirmed as part of Phase 1 insurance placement.

1. Is remote LAN access (VPN or port forwarding) in scope for the Lightwire installation and Connor's Easter 2026 cable-run work? Remote code management for Phase 2 access control requires this to be in place before Phase 2 goes live.

1. What is the EasyGate's current customer capacity (maximum number of PINs it can hold)? If the facility reaches capacity before Phase 2 hardware is installed, a constraint may emerge. EasyGate HCS101-based systems typically support 100--300 codes depending on model.