Business Security: What Actually Changes When It Is Not a House

The hardware is rarely the interesting part

It is worth saying plainly, because it saves people money: the panel, detectors and cameras that go into a two-door retail unit are very often the same ones we would fit in a three-bedroom house. There is no separate grade of sensor that only businesses are allowed to buy, and a supplier who implies otherwise is selling you the word commercial rather than a difference you can point at.

What genuinely changes sits above the hardware – in how the system is configured, who can operate it, what it records, and what you are obliged to do with those recordings. That is where a business system earns its keep, and it is where most of the ones we are called out to fix have been set up as though a house lived there.

1. Several people use it, and you need to know which one

A house has two or three users who all trust each other and one code everybody knows. A business has staff who start, leave, open, close, and occasionally do something you need to account for afterwards. The single shared code is the default that causes the most trouble, because the moment somebody leaves it protects nothing and nobody wants to be the one who re-codes the whole team.

• One user each, not one code for everyone. Removing a leaver takes seconds and affects nobody else.
• An audit trail. Who disarmed at 06:42 is a question that comes up eventually – after a till discrepancy, a stock loss, or an insurance claim. A shared code cannot answer it.
• Permission levels. A duty manager who can part-arm and a cleaner who can only disarm one zone are different things.
• Remote revocation. Someone leaves badly on a Friday, and you want them gone from the system before Monday, from your phone, without a site visit.

This is the single biggest practical reason businesses move to a system like Ajax for business – not better detection, but per-user control. The same logic drives access control, which is the version of this problem applied to doors rather than to the alarm.

2. It has to arm around a roster, not a bedtime

A house arms when the last person goes to bed and disarms in the morning. A business has an early delivery, a cleaner at seven, a staff member who came back for their phone, and a Saturday that runs different hours to a Tuesday. Configured like a house, the system gets disarmed at the start of each day and left off – which is how most of the unarmed commercial systems we find ended up that way.

• Part-arming by area. The stockroom and the yard stay armed while the shop floor trades. This alone does more for a retail site than another two detectors.
• Scheduled arming. The system arms itself if nobody has by a set time, which covers the night somebody forgets.
• Open and close reporting. Your monitoring centre can flag a site that opened at 3am, or one that never closed at all.

A system that is convenient during trading hours is a system that actually gets armed at night. That is the whole game, and it is a configuration question rather than a hardware one.

3. A false alarm costs a business real money

At home a false alarm is an annoying two minutes. At a business it can be a keyholder driving across Auckland at 2am, and if it keeps happening it quietly erodes how seriously the next activation gets treated – by your keyholders, and by anyone responding.

Commercial premises generate false alarms for reasons houses simply do not have. Worth knowing before they happen:

• Roller doors flex and rattle in wind, which is enough to trip a contact that was set for a domestic door.
• High studs and racking. A detector aimed for a lounge covers the wrong volume in a warehouse, and catches the top of a stack rather than an aisle.
• Heating, extraction and cool rooms. Moving warm air across a PIR is a classic overnight trip.
• Dust, insects and birds in a shed or yard, which is also why outdoor detection on a commercial site wants photo verification rather than a bare PIR.
• Stock that moves. Hanging signage, balloons, and pallet wrap relaxing overnight have all set off systems we have been called to.

Most of these are solved at commissioning by aiming and zoning properly, not by turning the sensitivity down – which is the shortcut that makes the false alarms stop and the real detection stop with them. If yours is tripping regularly, that is a servicing and repairs job, and it is worth doing before you stop trusting the system.

4. What you record, you now have duties about

This is the part that genuinely separates a business from a household, and the part almost nobody is told at the point of sale. A homeowner recording their own property is largely covered by the Privacy Act’s personal and domestic affairs exemption. A business has no such exemption. The moment you are recording staff and customers, you are an agency collecting personal information, and the Act applies to you.

In practice that means a handful of things, none of them onerous, all of them easier to do at install than to retrofit after a complaint:

• People should know they are being recorded – visible signage at the entrances, not a camera hidden in a smoke detector.
• You need a reason for each camera, and it should be a security reason. Cameras pointed at a single employee’s workstation are where businesses get into trouble.
• Somewhere private stays private. Toilets and changing areas are not judgement calls.
• Keep it as long as you need it and not indefinitely. A retention period you chose deliberately is defensible; a drive that happens to hold nine months is harder to explain.
• People can ask for footage of themselves, and you need to be able to find and provide it.

Audio is the one that catches people most often, because recording conversations is treated far more seriously than recording images and most systems ship with microphones enabled. We go through the detail, including where the boundary sits for cameras facing a footpath or a neighbour, in CCTV and privacy law in NZ. Retention in particular is a hardware decision as much as a policy one – how long footage actually lasts covers what your recorder will actually hold.

5. Somebody has to respond, and it is probably you

A monitored alarm at a house usually ends with a phone call to someone who is already there. A monitored alarm at a business ends with a keyholder, and the question of who that is at 2am on a public holiday deserves an answer before you need one rather than after.

• At least two keyholders, because one of them will be away, asleep or unreachable.
• They need to be able to disarm – a keyholder without a working code standing outside a sounding building helps nobody.
• Camera access on their phone. Being able to look before driving in is the difference between a wasted trip and a sensible decision, and between walking in on someone and not.

That last point is why we push cameras and alarm onto one system for commercial sites wherever we can: when the activation arrives with the clip attached, the keyholder is deciding on evidence instead of guessing. Whether the monitoring contract is worth it at all is a fair question, and we answer it honestly in whether monitoring is worth paying for.

When the honest answer is the residential system

We would rather say this than sell past it. A small Auckland business – a single-room office, a quiet retail unit, a studio – often needs exactly what a house needs, and the commercial-grade conversation is a way of making the quote bigger. If you have three staff who all trust each other, one entrance, no yard and nothing on site worth a targeted burglary, a well-configured residential system with per-user codes is a complete answer.

The point at which it genuinely changes is when any of these are true:

• Staff turnover means the user list changes more than once or twice a year.
• Different people need access to different parts of the site, or at different times.
• There is a yard, a roller door, or stock that would be worth someone’s while.
• An insurer, a landlord or a client contract has told you what you need to have.
• You would struggle to answer who was on site at a given time if you were asked.

If none of those are true yet, fit the simpler thing properly and revisit it when one becomes true. The full picture of what we do for businesses is on commercial security, and DIY kits versus a professional system covers the step below that.