The 2015 stack is still on most walls

The typical commercial camera install was specified between 2014 and 2018. It's analog or early-IP, recorded to a back-office NVR that nobody logs into, with footage retrieved only after an incident and only when somebody remembers it exists. The cameras work; the workflow doesn't. Nobody's watching the feed at 2 AM. Nobody can find the clip when the insurance adjuster asks. Nobody can prove who walked through the back door at 3:14 PM last Tuesday.

"Advanced video surveillance" is the label on the stack that fixes those gaps. None of it is futuristic. All of it ships in production across manufacturing, retail, healthcare, education, and hospitality.

1. Edge AI on the camera

Edge AI runs on the camera itself. It classifies what it sees at the point of capture (person, vehicle, animal, package), runs license-plate recognition where appropriate, and writes detection metadata into the video stream. No cloud round trip. Alerts arrive in seconds, not minutes, and most false positives never leave the camera. Edge-AI cameras are standard from Verkada, Avigilon, Genetec, Hanwha, Axis, and Eagle Eye Networks, and the premium over a non-AI IP camera is small and shrinking.

2. Camera-agnostic analytics on top of the existing fleet

Camera-agnostic analytics ingest feeds from whatever cameras are already on the wall and apply detections the cameras don't run themselves. Intenseye for PPE compliance, ergonomic risk, forklift proximity, and slip-and-fall. Dragonfruit AI for video search, license-plate recognition, and people counting. Both are NDAA-compliant and run as a software layer with no rip-and-replace.

This is where most of the budget savings hide. A 90-camera site can layer adaptive analytics for a fraction of a fresh AI-camera install, then phase camera replacement over two to three years as the fleet hits end of life.

3. Cloud-native VMS and one pane of glass

Cloud-managed VMS (Verkada Command, Avigilon Alta, Eagle Eye Cloud, Genetec Stratocast) replaced the back-office NVR. The plant manager opens a browser, sees every camera across every site, runs a smart search by attribute (person in red shirt, white sedan, last 14 days), and exports a clip in seconds. For multi-site customers, it's the difference between visibility and a federation of disconnected systems.

On-prem VMS still has a role. HIPAA environments, ITAR-controlled spaces, and CMMC Level 2 deployments often pin video to on-prem storage with cloud only for the management plane. Genetec, Milestone, and Hanwha all support hybrid architectures.

4. NDAA Section 889-clean hardware

FAR 52.204-25 prohibits federal agencies, contractors, and grantees from using or procuring covered telecom and video surveillance equipment from Hikvision, Dahua, Hytera, Huawei, ZTE, and their subsidiaries. The lookback covers existing installs, not just new procurements. For commercial buyers without federal contracts today, assume the rule hits you the day you bid on a federal sub-tier contract or pursue a federal grant.

See our NDAA 889 explainer for the procurement-team detail. The defensible default is NDAA-clean from day one.

5. Verified-alarm dispatch through a UL-listed central station

The piece most buyers miss. After-hours intrusion alerts only matter if somebody responds. Twenty-four-seven monitoring through a UL-listed central station gets eyes on the alert inside 60 seconds, verifies it (real intruder vs. raccoon vs. wind-blown banner), and dispatches police with priority response. Police departments increasingly require verified alarms before they roll a unit. Without it, sites produce noise; with it, they produce response.

For a deeper view of the access-control side of the same stack, see access control beyond the keycard and the 24/7 monitoring service overview.