CCTV and access control for small business — done as a system, not a toolbox

CCTV for a small business in Baku usually arrives as a toolbox: someone sells four cameras, someone else sells a turnstile, an electrician runs cable, and three months later you have hardware that works individually but doesn't connect to anything else. That's not a system. A system is when the access control knows who's in the building, the cameras know which entry that person used, the time-tracking knows when they arrived, and your ERP knows their hours for payroll. This is how to think about it before you buy.

The three layers

Every physical security and access setup has three layers, and you have to think about all three at once or you'll buy hardware that locks you into a wrong stack.

1. Sensors and actuators

The physical devices. Cameras, card readers, biometric entry pads, turnstiles, magnetic locks, alarm sensors, motion detectors. These are what your contractor knows about and what most quotes focus on.

2. Controllers and recorders

The boxes in the cupboard that the sensors plug into. NVRs (Network Video Recorders) for cameras. Access controllers for readers. These are usually proprietary to a manufacturer family — Hikvision controller talks to Hikvision cameras and Hikvision readers, Dahua talks to Dahua, etc.

3. Integration layer

How the access system talks to your other software. Time tracking, HR, payroll, ERP, accounting. This is the layer most installations skip entirely, and it's the one that turns a security system into a business tool.

The mistake is buying at layer 1, ignoring layer 3, and ending up with a security system that only does security — when it could also do attendance, working hours, and visitor management.

Picking the CCTV stack

For a small business — under 50 cameras, single building or two buildings — the real options:

Hikvision / Dahua / Uniview — the volume Chinese manufacturers. Cheapest hardware, widest installer pool in Azerbaijan, best price-per-camera. Decent image quality, mature mobile apps, ONVIF-compatible.
Axis — the premium camera maker. 3–5× the price, image quality and software ecosystem to match. Worth it for businesses where image evidence quality matters (financial, retail with high-value goods, premises with reflective signage).
Ubiquiti UniFi Protect — middle tier, with the best-in-class software experience for a small business. Cameras are 2× Hikvision price but the management is unified with the networking. Good for tech-forward businesses.
Reolink / Annke — direct-to-consumer brands. Acceptable for very small offices. Not enterprise-suitable.

For a 6-camera setup with NVR, expect 1,800–4,500 AZN in hardware, plus 800–1,500 AZN in installation and cabling.

Cameras are the easy part

Specifying cameras well is a separate exercise. The shortlist:

Resolution: 4MP is the modern default. 8MP/4K is justified for entrances and large open spaces. 2MP/1080p is fine for narrow corridors and known choke points.
Lens type: fixed focal for known framing; varifocal for situations where the framing might need adjustment after install.
Low light: most cameras claim to "see in the dark" via IR. The honest test is the lux rating and the sample footage at night.
Audio: useful but be aware of the legal implications in Azerbaijan — recording audio in some contexts requires explicit notice.
Storage: a 4-camera 4MP setup running 24/7 needs roughly 2 TB of NVR storage for 30 days of recording. Plan accordingly.

Access control system — beyond a card reader

Modern access control is the underrated half of the equation. Done right, it replaces three other tools.

Hardware options

Card readers + RFID — cheapest, most familiar. Cards get lost; lost cards are a security event.
Mobile credential (BLE or NFC via the employee's phone) — the modern default for office buildings. No physical card to issue.
Biometric entry — fingerprint, face, palm. Eliminates lost-card problems. Be aware of Azerbaijani personal data law (Law on Personal Data) — biometric data has specific consent requirements.
PIN keypads — fallback, not primary, because PINs leak.

For most Baku offices, the practical default in 2026 is mobile credential as primary with biometric backup, ideally on a brand that integrates with the CCTV stack (Hikvision, Dahua, ZKTeco all make matching access hardware).

What you actually gain

Time and attendance: the access log is the attendance log. No separate time tracker needed.
Zone-based access: the accountant can enter accounting; the warehouse staff can enter the warehouse; nobody crosses without an explicit rule.
Visitor management: temporary credentials for contractors, suppliers, candidates — issued and revoked automatically.
Anti-tailgating: turnstiles or speed gates enforce one-person-one-credential.

The ERP bridge

Here's where most installations stop and shouldn't.

The access control system already knows when each employee arrived and left. That data should flow into the HR module of your ERP automatically, where it becomes the basis for monthly payroll. No manual timesheet. No "did you arrive at 9 or 9:15?" arguments.

For 1C, Odoo, Zoho, and Microsoft Dynamics, integrations exist with the major access control brands — either native or via middleware. The wiring is a one-time engineering job (5,000–12,000 AZN typically) that saves 4–8 hours/month of administrative labour forever after.

The CCTV side connects too: incident timestamps can be cross-referenced with access logs to identify "who was at the front door at 14:32 when this happened." Without that integration, you have video without context, which is half as useful.

Planning the installation, in order

Walk the building with a diagram. Mark every entry point, every internal door that needs control, every external view that needs coverage. Don't trust the contractor to do this for you.
Decide the integration target first. Will this feed into your ERP? Which one? Pick CCTV and access control hardware that has known integrations with it.
Buy hardware from one ecosystem. Mixing Hikvision cameras with Dahua access readers technically works (via ONVIF) but limits the analytics and event correlation later.
Cable for more than you need. Pulling extra Cat6 cable during the initial install is cheap; pulling it again later is expensive.
Test the integration before signing off. Walk through the door at 10:00, check the access log, check the camera footage, check the ERP attendance record. All three should agree.

At Qaynaq we treat CCTV, access control and the ERP/HR integration as a single engagement, because they really are one system pretending to be three. If you want a site walk and a written plan before any hardware gets quoted, write to salam@qaynaq.com.