Banking · ATM Identify · GDPR + AML · EN 62305 · 2026

    Bank CCTV Design Software 2026 — ATM, Vault, Teller & Branch Network Coverage

    Design auditor-ready surveillance for ATM, vault, teller stations, branch entry, drive-through and back-office. ATM face capture at EN 62676-4 Identify, dual-camera vault overlap, EN 62305 lightning protection for outdoor ATMs, GDPR Article 35 DPIA worksheet, AML retention windows applied per zone, and NDAA §889 flags for federally affiliated branches. 65,000 verified models. Browser-based.

    Six zones, six DORI levels, one branch — and you have to get every one right.

    Bank CCTV is the highest-stakes design work in the security industry. Coverage gaps end up in fraud reports, regulatory findings, and court footage. Each zone has a defined DORI level and a defined retention rule.

    ATM and ATM lobby

    Face capture at the ATM is the highest-stakes camera in the entire branch. EN 62676-4 Identify (250 px/m) is non-negotiable — fraud-investigation footage that fails the Identify threshold is functionally useless. The tool calculates the lens, mounting height and tilt that hit Identify at the user's working distance, every time.

    Vault and safe-deposit room

    Vault entry, anteroom, and safe-deposit corridor demand dual-camera overlap with no blind spot. Coverage analysis flags every gap before installation. Retention windows on vault footage are typically longer than the rest of the branch — the design records that explicitly.

    Teller stations and cash-handling

    Each teller window needs a dedicated camera at Identify level facing the customer, plus an over-the-shoulder Recognise camera looking down at the cash drawer and counting tray. Pairs are linked logically so the BOM and cable schedule keep them together.

    Branch entry and lobby

    Mantrap or single-door entry with Identify-level face capture, queue management coverage at Recognise, and counter line overview. Brand standards usually require discreet ceiling domes inside the customer-facing lobby and a visible deterrent bullet at the door.

    Drive-through and outdoor ATM

    Drive-through teller lanes need Identify-level on the driver's face plus a Recognise plate-capture lens. Outdoor ATMs are LPZ 0A or 0B exposed installations under EN 62305 — surge protection requirements documented per camera in the BOM.

    Back-office, server room, money room

    Strict access-controlled rooms with the highest priority retention. NVR room itself needs a tamper camera. Money room (cash counting, ATM-replenishment loading) needs continuous Identify-level coverage with an audit log linked to access-control events.

    DORI requirements per zone

    EN 62676-4 thresholds applied per zone. Identify on every face that matters in a fraud or AML investigation. Recognise on supporting coverage.

    ZoneDORI levelNotes
    ATM — user faceIdentify (250 px/m)Mandatory. Face must be identifiable for fraud and AML investigation.
    ATM — screen/keypadRecognise (125 px/m)Behaviour at the keypad — but never coverage of PIN entry. Mask if needed.
    Vault door + anteroomIdentify (250 px/m)Dual-camera overlap. No blind spot allowed.
    Safe-deposit corridorRecognise (125 px/m)Coverage of corridor and box-room access points.
    Teller window — customer faceIdentify (250 px/m)Per-window dedicated camera. Mandatory under AML guidance.
    Teller — cash drawer / countRecognise (125 px/m)Over-the-shoulder. Records denomination handling.
    Branch entry doorIdentify (250 px/m)Every face entering the branch. Two-camera overlap.
    Drive-through driverIdentify (250 px/m)Plus separate Recognise plate camera.
    Money / counting roomIdentify (250 px/m)Continuous Identify-level. Linked to access-control audit log.
    EN 62305 — outdoor ATM lightning

    Outdoor ATMs are the most exposed installation a bank operates.

    Standalone kiosks in petrol stations, shopping-centre forecourts and supermarket lobbies sit inside or alongside metallic structures with high transient-surge exposure. Without proper EN 62305 protection, the camera, the cable and sometimes the ATM itself becomes a service call after the first storm.

    LPZ classification per outdoor camera

    Standalone outdoor ATMs, drive-through canopy cameras and pole-mounted parking cameras are commonly LPZ 0A or 0B installations under EN 62305. The tool classifies each one and produces a Surge Protection Device requirements list inside the BOM.

    SPD requirements in the BOM

    Type 1, 2 and 3 SPD requirements at the camera and at the panel are recorded per cable run. The integrator does not have to interpret EN 62305 — the design has done it already.

    Standalone ATM kiosks

    Off-premises ATMs in petrol stations, shopping centres and stand-alone kiosks are the most exposed installations a bank operates. The design ships with a checklist for cable-shield earthing, SPD chain, and equipotential bonding.

    Recorded for the auditor

    The lightning protection summary appears in the project PDF alongside the DPIA. Auditors reviewing branch-resilience controls get the answer in one document instead of three departments.

    GDPR + AML retention + NDAA — all in the same PDF

    Bank CCTV designs touch privacy law, financial-crime law, sanctions law, electrical safety, and brand-resilience controls. The tool produces every artefact a regulator or internal auditor will ask for.

    GDPR Article 35 DPIA

    Banks process customer faces and behavioural data on every transaction. Article 35 DPIA is required. The worksheet exports straight into the project PDF — lawful basis (typically Article 6(1)(c) legal obligation under AML, plus 6(1)(f) legitimate interest), retention period, data subjects, risks and mitigations.

    AML retention guidance

    Anti-money-laundering frameworks (EU AMLD, US BSA, FATF guidance) typically require transaction-evidence retention beyond the standard 30-day CCTV window — often 5 to 7 years depending on jurisdiction. The design records the retention rule per zone so the storage calculation matches reality.

    NDAA Section 889 (US federal)

    Federally affiliated branches — government depository banks, federal-grant recipients, branches inside federal buildings — fall under NDAA §889. Every camera is flagged for compliance, with a mixed-compliance validator warning when a banned-vendor model lands in a federal-related BOM.

    EN 62305 lightning

    Outdoor ATMs and exposed pole cameras get a Lightning Protection Zone classification with surge protection device requirements in the BOM. Critical for off-premises kiosks and drive-through canopies.

    EN 62676-4 DORI

    The tool enforces Identify (250 px/m) at ATM, vault, teller-customer, and entry points. Recognise (125 px/m) at lobby, cash-drawer and corridor. The DORI overlay confirms every camera before the BOM is exported.

    Multi-branch project organisation

    A retail bank with 50 branches needs 50 consistent designs. Project copy lets you fork a baseline branch design and adjust per-site, with the same compliance posture applied to every one. The PDF cover sheet shows the branch ID, address, and design version.

    Bank CCTV design — frequently asked questions

    Is CCTVplanner suitable for designing CCTV for banks?

    Yes. The platform is built for the multi-zone, compliance-heavy reality of bank branches. It enforces EN 62676-4 DORI at Identify level for ATM, vault, teller and entry, ships an EN 62305 lightning protection module for outdoor ATMs, generates a GDPR Article 35 DPIA worksheet, flags NDAA §889 compliance per camera, and lets you copy a branch baseline across an entire branch network. Banks from all over the world use the tool.

    Why does the ATM camera need to be at DORI Identify level?

    EN 62676-4 defines four operator-task levels: Detect (25 px/m), Observe (62.5), Recognise (125), and Identify (250). At Recognise, you can tell that a person is the same person you saw a moment earlier. At Identify, you can name them — or, more importantly, a fraud investigator or court can. ATM fraud is the canonical use case for Identify, and a camera that misses the threshold is functionally useless when it matters. The tool calculates the lens, mounting height and tilt that hit Identify at the user's working distance.

    How is the vault overlap calculated?

    Vault entry, anteroom and safe-deposit corridor demand dual-camera overlap with no blind spot. The tool's coverage analysis renders the union of all camera fields of view as a heat map and flags any unreached square metre. You see the gap on screen before installation rather than discovering it in incident review.

    What about lightning protection on outdoor ATM kiosks?

    Standalone outdoor ATMs in petrol stations, shopping-centre forecourts and stand-alone kiosks are the most exposed installations a bank operates. They are LPZ 0A or 0B under EN 62305. The tool classifies the LPZ per camera and produces a Surge Protection Device requirements list with Type 1, 2 and 3 SPDs at the right points in the cable run. The integrator does not have to interpret EN 62305 — the design has done it already.

    How does the tool handle GDPR for customer faces?

    Banks processing customer faces and transactional behaviour fall squarely into Article 35 DPIA territory. The DPIA worksheet built into the tool records the lawful basis (typically Article 6(1)(c) legal obligation under AML and 6(1)(f) legitimate interest, with the balancing test documented), the retention period per zone, the data subjects, the risks identified and the mitigations applied. It exports straight into the project PDF.

    How are AML retention windows reflected in the storage calculation?

    AML retention varies by jurisdiction — typically 5 to 7 years for transaction-evidence footage versus 30 days for general lobby coverage. The design lets you set the retention rule per zone, and the storage calculator multiplies the bitrate, frame rate, hours and retention to deliver a per-branch storage requirement that matches reality. No more under-specified NVR.

    Does it handle NDAA §889 for federally affiliated branches?

    Yes. Federally affiliated branches — government depository banks, federal-grant recipients, branches inside federal buildings — fall under NDAA §889. Every camera in the 65,000-model catalog carries an NDAA flag, and a mixed-compliance validator warns when a banned-vendor camera lands in a federal-related BOM. Issues are caught at design time, not at the procurement audit.

    Can I roll one design across an entire branch network?

    Yes. Project copy lets you fork a baseline branch design and adjust per-site. A retail bank with 50 branches uses one master template plus per-branch overrides for footprint, ATM count, drive-through presence and parking exposure. The compliance posture (GDPR, AML retention, NDAA, EN 62305) carries forward to every fork.

    Where is the tool itself hosted?

    DEFENSAR. 100% Engineered and Hosted in EU. No third-country transfers in the default stack. Useful when the bank's procurement origin filter excludes non-EU/non-Western design tools, which is increasingly common in critical-infrastructure tenders.

    Start your bank CCTV design — free

    65,000 verified cameras. ATM Identify, vault overlap, teller pairs, EN 62305 lightning, GDPR + AML retention, NDAA §889 — all in one PDF. From DEFENSAR. 100% Engineered and Hosted in EU.

    Also explore: CCTV Design Tool · Parking · Retail · Storage Calculator