Security Camera Platform

The vendor required to provide security camera platform will be capable of integrating with our existing door access control system and provide a clear path to replace our existing door access control system with a fully integrated platform.
- Requirement:
1. Client and UI:
•    Single user interface to view live video, playback, search, export, and manage cameras across all campus locations; each camera uniquely identifiable.
•    Web client and thin-client option for common viewing/search/export workflows (as applicable) - suitable for external agency access
2. Identity
•    SSO via SAML 2.0 supporting microsoft Entra and other SAML IDPS.
•    Break-glass local accounts supported for administrative use during SSO failure.
3. Usability
•    End user interface optimized for law enforcement and security workflows; local configuration and customization supported.
4. Mobile
•    Mobile access (iOS/android) with RBAC and MFA support (if offered).
5. Remote access
•    Secure remote access for authorized employees and external agencies with RBAC and automatic expiration.
6. Security
•    Communications secured with TLS 1.2+.
•    Role-based access control (RBAC) for all functions (view/search/export/admin).
•    Audit logging for admin actions and access attempts; logs exportable via syslog (or equivalent).
•    No default passwords, non-configurable default accounts, or hidden “backdoor” accounts. 
•    Any such accounts must be removed or adjusted during implementation.
•    Secure remote access method that avoids exposing sensitive system components directly to the internet.
•    Encryption at rest for video storage, databases, and backups
•    MFA required for administrative access, including break-glass accounts
•    Vulnerability and patch program: SLAs for critical vulnerabilities; signed updates; lifecycle policy.
•    Provide SBOM and secure development attestation
7. Data residency
•    Data sovereignty: all cloud data storage and processing in conus; disclose jurisdiction and ownership risks.
8. Recording
•    Recording supports continuous and motion-based modes per camera with schedules.
9. Automation
•    Event-driven automation: motion recording with configurable include and exclude regions; time-of-day behavior changes.
10. Retention
•    Retention policies configurable at a global and server level with automatic purge controls.
•    Retention policies configurable at a per-camera or per-event level with automatic purge controls.
11. Legal hold
•    Legal hold and retention lock to prevent deletion of marked footage.
12. Edge recording
•    Optional edge recording (camera SD) with sync-back after outage.