Smarter Store Security: CCTV with AI Analytics, People Counting, and Instant Alerts

Four Days Closed, 96 Hours of Footage, Zero Answers

Your store reopened this morning after four days dark, and the recorder holds 96 hours of video nobody will ever watch. Maundy Thursday and Good Friday were regular holidays and Black Saturday a special non-working day (Proclamation No. 727, s. 2024). If anything happened over Holy Week, you find out only by scrubbing — and closing that gap is the job of an AI CCTV camera.

That was the second long shutdown in three weeks; Araw ng Kagitingan fell on Wednesday, 9 April. Recording is passive, and passive systems only pay off after the loss.

The timing sharpens it. The election period and nationwide gun ban run to 11 June 2025 ahead of the 12 May midterms, and local campaigning runs to 10 May (Philstar).

This is the third post in our CCTV series — our beginner's guide to CCTV for Philippine shops and offices if you have no cameras yet, IP cameras vs analog CCTV if you are choosing types. Below: what these cameras do, what counting is worth, how alerts work, what the NPC requires.

What an AI CCTV Camera Actually Does Differently

An AI CCTV camera runs a computer-vision model — software trained to recognize objects — so it classifies what it sees (person, vehicle, bag) instead of only noticing that pixels changed.

Most SMEs own the older thing: motion detection that fires on rain, a moth on the lens, the neighbor's cat. It answers a question you never asked, which is why nobody trusts their alerts. Analytics needs a digital stream, so it generally means IP cameras rather than analog CCTV.

What is on offer in 2025:

• Person / vehicle classification — ignore the dog, flag the man in the loading bay.
• Line crossing — the fire exit after closing.
• Intrusion zone — a box around the cash area.
• Loitering and dwell — four minutes at the back shelf.
• Object left behind — a bag abandoned by the counter.
• Object removed — a carton off a stockroom shelf at 11 p.m.
• Directional counting — people in versus people out.

Note what it is not: facial recognition, identification, a guarantee, or a substitute for lighting and locks. "AI" here means a model on hardware you own, usually with no internet round trip.

Where the AI actually runs: on the camera, on the recorder, or in the cloud

	Edge (on camera)	AI NVR	Cloud
Works if internet drops	Yes	Yes	No
Cost shape	Per camera	Per channel, cheaper	Subscription
Weak point	Fixed feature set	Single point of failure	Upload bandwidth

Cloud suits multi-branch rollouts, but the footage sits on infrastructure you do not control. Our rule: if analytics stop when the internet drops, you bought a subscription, not a security system.

People Counting and AI Video Analytics for Retail: Cameras as a Business Sensor

An overhead camera watches a counting line at the entrance, tallying in and out separately, by hour and day. The wide-angle camera at your doorway is wrong for this — counting wants a downward view.

One calculation justifies the spend: conversion rate = transactions (from your POS) ÷ visitors (from the counter). If the counter logs 900 visitors on a Saturday and the POS rings 180 sales, that is 20 percent — illustrative, not a benchmark. Thin sales on heavy traffic is a service, stock or queue problem.

Three decisions change once you have the numbers:

1. Staffing — schedule against real hourly peaks, not gut feel.
2. Lease negotiations — footfall records are evidence at renewal.
3. Promo evaluation — new people, or the same ones rearranged?

April is your high-water mark for dry-season and school-break traffic; capture it now for a baseline. Beyond counting: queue length, zone dwell, occupancy — where IoT integration that turns cameras and counters into data your systems can use earns its place.

Instant Alerts That Reach an Actual Human at 2 A.M.

An "instant alert" is one of four things: a push with a snapshot to a named phone, an email to a shared inbox, an on-site siren, or a monitoring service. Most ship with the first enabled and nobody assigned.

Schedules are the trick. Arm intrusion analytics only outside trading hours and build a holiday calendar in — 9 April fell on a Wednesday and the 17–19 April block covered three normal trading days, none of which a default Monday-to-Saturday schedule knows about.

Write the escalation ladder down and post it:

1. The push with a snapshot goes to the branch supervisor.
2. No acknowledgement in 10 minutes, the backup calls the owner.
3. Verify first — live view, snapshot — before calling the barangay or police.
4. State what the responder may do, and nobody enters alone.

Alerts need power, a live internet link and a reachable phone. Size the UPS for camera, router and ONT, not just the recorder; add LTE failover; and monthly, trip a zone and time the alert.

Alert fatigue is the real failure mode

Ten alerts a night for two weeks and the team mutes the app — worse than nothing, because it manufactures a feeling of coverage you do not have.

So tune it: tight zones, the sidewalk excluded, object-size and dwell thresholds, the first two weeks owned by a named person. Hold your vendor to one target — an alert staff would act on every time. Otherwise switch the rule off.

Your Legal Homework: NPC Circular No. 2024-02 and the 2024 AI Guidelines

Capturing, retaining and destroying CCTV video is processing of personal data under Republic Act No. 10173, the Data Privacy Act of 2012. For the wider duties, see what the NPC actually expects from small businesses handling customer data.

Many installers still quote NPC Advisory No. 2020-04, which has been repealed. NPC Circular No. 2024-02, dated 9 August 2024 and effective 27 August 2024, governs.

Three duties. Notices must be readily visible and prominently displayed in conspicuous areas, such as points of entry. You must implement reasonable and appropriate safeguards for the integrity and accuracy of footage and its metadata — time, date, location. And data subjects must be able to access their CCTV data: viewing and obtaining a copy (Global Compliance News).

Retention is where bad advice circulates. The standard is purpose limitation: keep footage only as long as the stated purpose needs, not because the disk has room (DivinaLaw). No number of days comes out of the Circular. Write your purpose and period down, and justify both.

Most of the work is an afternoon:

• A signed policy naming the purpose, retention period, and who may view footage.
• Signage at every entrance.
• A named contact for access requests.
• Admin accounts held by the business, not the installer.
• An accurate clock — wrong time metadata undermines the integrity duty and the footage as evidence.

Where the Circular does not settle a question, read its text or ask your counsel.

Analytics adds a second layer: NPC Advisory No. 2024-04

On 19 December 2024 the NPC issued Advisory No. 2024-04, applying the Data Privacy Act and its IRR to AI systems processing personal data across the whole lifecycle — development, training, testing, deployment.

So once your camera stops recording and starts analyzing, the Advisory is addressed to you, not only your vendor. Ask in writing: is our footage used to train your models, and where does processing happen?

There is no Philippine AI statute and no AI regulator — the posture is policy, not law. DTI, with ADB support, launched the National AI Strategy Roadmap 2.0 and the Center for AI Research on 3 July 2024.

Scoping the Upgrade: Storage, Placement, and What to Buy First

Do not rip out working cameras. Add analytics where a decision depends on it — the entrance for counting, the stockroom for object removed, the perimeter after hours. A one-door pilot for 30 days beats a rollout you never tune.

Do the storage math: channels × bitrate × hours per day × retention days. H.265 roughly halves the storage of H.264. Size the disk to your retention policy, not the policy to the disk.

Placement is where most installs go wrong: counting cameras overhead and perpendicular to the flow; no backlit doorways that silhouette customers at 3 p.m.; watch IR flare off glass; switch and router on the recorder's UPS.

Then secure the security system: cameras on their own VLAN, default passwords changed, firmware current, the recorder never port-forwarded — an exposed NVR is a live feed for strangers. That is ordinary network and cybersecurity hardening for your camera network.

Budget by shape, not headline: cameras, an AI recorder or per-camera licences, storage, cabling and labor, plus any cloud subscription. Q2 has just started, a sensible window to pilot.

Is an AI CCTV Camera Worth It for Your Store? A Straight Answer

Sometimes it is not: one entrance, low-value stock, an owner on the floor all day. Plain IP cameras and better lighting will serve you — we would rather fix an angle and add a light than sell analytics you mute in a fortnight.

It earns its keep across branches one person cannot watch, on premises left empty for long stretches (exactly the four days you just had), in warehouse work, and in high-footfall retail where staffing runs on feel.

Bring these questions to any quote:

• What runs on the device, and what runs in the cloud?
• Does detection keep working when the internet drops?
• Can we export our own footage without you?
• Who holds the admin account after handover?
• What is the tuning period, and who does it?
• Is our footage used to train your models?
• What is your written answer on retention and access requests under NPC Circular No. 2024-02?

Red flags: sole admin credentials kept by the installer; cloud-only with no local recording; no written retention policy; no signage; a demo that only shows the perfect daytime clip; any specific theft-reduction percentage, which nobody can substantiate here. The first step is deciding which decisions you want your cameras to make.

You do not need to re-cable the store to find out. Pick one door, one camera and one rule — a counting line at the entrance, or after-hours person detection on the stockroom — run it for a month and see whether the alerts are ones your team would act on every time. For a second opinion on where analytics belongs, we do site walkthroughs across Laguna and Metro Manila. Book a 30-minute call and bring your floor plan.