Wise Hustlers Technologies
Technical Datasheet · Nigeria Early-Adopter Programme
Intelligent Monitoring System
Architecture, processing model, security posture and deployment options. Issued for evaluation by prospective Nigerian clients.
How to read this document. Every figure that has not been confirmed by the product owner is shown as
To be confirmed rather than filled with a plausible number. A datasheet that invents a hardware
specification is worse than one with a gap in it, because the gap can be closed at the survey and a wrong number cannot be
un-quoted. Ask us for the confirmed figures against your specific site and they will be supplied in writing.
1. What the system is
A camera-based monitoring and analytics system in which the analysis runs on the camera itself (“at the edge”)
rather than by streaming everything to a central server. The system produces events — a record that something
happened, on which camera, at what time — and, where a client explicitly enables identity matching, a numeric template
used to compare against a list the client controls.
The design intent is that the useful output leaves the camera and the raw imagery does not. That is both a privacy
property and a practical one: it is what allows the system to work over the kind of uplink most Nigerian sites actually
have.
2. Processing model
| Stage | Behaviour |
| Capture | A frame is read into the camera's working memory. It is not written to persistent storage at this stage. |
| On-device inference | Detection and analysis run on the device. Output is an event record and, only where matching is enabled, a numeric template derived from the frame. |
| Frame disposal | The frame is released from memory once the event is produced, unless continuous recording has been explicitly enabled for that camera by a client administrator. |
| Event transport | Events are transmitted to the site gateway over an encrypted channel. Imagery is not transmitted in the default configuration. |
| Storage | Events, and recorded video where enabled, are held encrypted at rest under the client's retention schedule. |
| Deletion | A scheduled retention job deletes expired records automatically. Deletion is not dependent on an operator remembering to act. |
3. Are raw facial images stored?
In the default configuration: no. No facial image is transmitted off the camera and none is retained.
Where a client switches continuous recording on for a given camera — which some settings legitimately require — the
resulting footage is held under that client's own retention schedule, encrypted at rest, access-logged, and deleted
automatically on expiry. Which configuration applies to your deployment is recorded in your Data Protection Impact
Assessment and issued to you before go-live.
4. Security posture
| Control | Status | Detail |
| Encryption in transit |
Contractual |
All links between camera, gateway and management plane use encrypted transport. Exact cipher suite and protocol version: To be confirmed |
| Encryption at rest |
Contractual |
Stored events and any retained footage are encrypted on disk. Algorithm and key length: To be confirmed |
| Key custody (on-premises) |
Configurable |
In an on-premises deployment the client holds the encryption keys and the administrator root accounts. |
| Role-based access control |
Contractual |
Access is granted by role and scoped per site and per camera. Shared logins are not supported by design. |
| Administrator authentication |
Configurable |
Individually named accounts. Multi-factor authentication available; specific factors supported: To be confirmed |
| Audit trail |
Contractual |
Append-only log of every view, search and export, recording the user, the time and the stated reason. Access-controlled separately from the footage. |
| Organisational ISMS certification |
Certificate held |
Wise Hustlers Technologies holds ISO/IEC 27001:2022 for its information security management system. This certifies the organisation, not this hardware product. See the certificate at wise-hustlers.com/iso-27001-certification. |
| Product-level security certification |
Targeted |
No product-specific security certification is claimed. Do not rely on one for this device today. |
5. Hosting and deployment options
| Option | What it means | Suits |
| On-premises |
Processing and storage run entirely on hardware inside your facility. No recorded material leaves your premises. Your team holds keys and root accounts. |
Hospitals, government-adjacent facilities, and any buyer with a no-egress policy. |
| Nigeria-hosted tenancy |
Data resides in a hosting facility located in Nigeria. Central administration without cross-border transfer of recorded material. |
Multi-site operators who want in-country residency without running their own infrastructure. |
| Cloud region of your choosing |
Hosted in a named cloud region agreed with you. Any resulting cross-border transfer is documented and governed contractually. |
International groups already operating under a global hosting standard. |
The chosen option is written into the service agreement, not left as a default. Named hosting providers and facility
locations for the Nigeria-hosted option: To be confirmed
An honest word on “data localisation”. Neither the Nigeria Data Protection Act 2023 nor the
NDPC’s GAID 2025 contains a general data-localisation requirement — Part VIII of the Act regulates the
conditions for transferring data out of Nigeria, not where it must be stored. NITDA’s National Cloud Policy
2025 is mandatory for federal public institutions and federally-owned companies, reaching a private company only where
its data is designated as being of strategic national interest; and the CBN’s payments localisation rule binds
licensed payment-ecosystem participants. None of these reaches a church, a school or a hotel.
So we sell in-country hosting on sovereignty, latency and contractual assurance — not on a legal obligation that does
not exist for this customer base. If another vendor tells you Nigerian law requires it, ask them for the section number.
6. Retention behaviour
- Retention is configured per camera, not as a single system-wide value, so a car park and a cash office are not forced onto the same schedule.
- Expiry triggers an automatic deletion job. There is no state in which a record silently outlives its schedule.
- A legal hold can suspend deletion for a specific incident. Placing and lifting a hold are both audit-logged.
- At contract termination, data is exported in an agreed format and then deleted, with a written deletion confirmation issued.
Full detail: Data Retention & Deletion Policy.
7. Hardware specification
Deliberately left open. Camera models, sensor specifications, edge processor, inference throughput,
accuracy figures, operating temperature range, ingress protection rating, power draw and PoE class are all
To be confirmed against the final bill of materials for your deployment. These figures vary by
the model selected at survey, and quoting a single set here would misrepresent most deployments. They are supplied in
writing with your quotation.
8. Integration surface
- Event export to a client's existing security operations or incident system — interfaces available: To be confirmed
- Alerting to email and to messaging channels used by the client's security team.
- Video management system interoperability (ONVIF or equivalent): To be confirmed
- Identity provider integration for administrator single sign-on: To be confirmed
9. What we do not claim
- We do not claim any product-level security or safety certification for this device.
- We do not claim NDPC registration, approval or endorsement on behalf of a client. Registration runs both ways and separately: the client registers as a controller of major importance where it meets the threshold, and a vendor commercially processing sensitive personal data at that scale is registrable in its own right. Neither filing discharges the other, and we will not imply ours covers yours.
- We do not claim a government approval, licence or contract award for this offering.
- We do not publish an accuracy or false-match figure. Any such figure is meaningless without stating the test conditions, and we will not quote one that has not been measured on the deployed configuration.