One pane for video and doors: what schools, colleges and trusts should ask before consolidating

Many schools, colleges and trusts now run cameras on one system, doors on another, and perhaps a third platform in the newest building. Bringing them together is a sound goal. The decisions that matter are what to unify, in what order, and how to stay in charge of your own roadmap.

In short

• Who it is for: schools, colleges and academy trusts running cameras and doors on separate systems, and the integrators and consultants who advise them.
• Where to start: the doors. Entrances are where staff, visitors and deliveries meet the building, so a joined-up view pays back there first.
• Keep what works: existing HID Mercury controllers and readers can stay, and cameras can be upgraded building by building.
• Test it in a demo: ask to see a door alert reach the right person with the right footage attached.
• Seven questions to ask any vendor: hardware you already own, how video and doors connect, what happens when the internet drops, who gets access, how licensing scales, the workload for your team, and what your exit looks like.
• Not for every site: a single small school with a basic recorder and no plans to grow may not need a platform like this.

The picture is familiar across education estates. Cameras bought in one year, card readers in another, and a recorder added for each new building. Some equipment is reaching the end of its life, and the people using it spend part of every day moving between screens.

The good news is that a joined-up approach does not have to mean a big-bang replacement. Start with the doors, keep what still works, and build out in stages. Here is what we would ask before you begin, and how WaveFusion answers.

Reading from outside the UK? The questions apply to any school estate. Where we cite a framework, we say where it comes from. Some of the standards below, such as PASS, are US-based, so check them against the rules in your own country.

Why are schools consolidating video and access control now?

Most school estates grew one decision at a time. A reception camera system here, a card reader upgrade there, a second recorder for a new building. Each choice made sense on the day. Together they leave a site team switching between screens, remembering which building lives in which system, and pulling information from several places to answer a single question.

Consolidation turns that around. The strongest case is simple and human: one view for the people who need it, at the moment they need it. The logic is straightforward: access control records that an event happened, while video shows what actually happened. Together they answer the question staff really have, which is whether they need to act.

What do the standards say?

If you want a reference point, the US-based Partner Alliance for Safer Schools (PASS) publishes the K-12 Safety and Security Guidelines, now in their 7th Edition. They are a US framework, but the structure is useful anywhere. They set out five layers of protection: the district-wide layer (for a UK reader, the trust- or estate-wide layer), digital infrastructure (introduced in the 7th Edition), the campus perimeter, the building perimeter, and the classroom or interior perimeter. They then grade measures across four implementation tiers, from a Tier 1 baseline to Tier 4 comprehensive.

Three points from the guidance are worth carrying into any plan:

• Entrances come first. Baseline guidance calls for electronic access control at primary entrances, with visitor entry supported by video intercoms.
• Cameras are specified by purpose. The guidelines favour networked IP cameras, chosen for the job they do, whether that is a hallway, an entrance or a car park, not bought as a generic bundle.
• Analytics come later. Video analytics sit at higher tiers, which fits the idea of building up in stages.

Where should a school start? With the doors

Entrances are where staff, visitors, deliveries and pupils all meet the building, so they are where a joined-up view pays back first. Start with a formal assessment of where the risk and the daily traffic are highest, such as main visitor entrances, administrative areas and secure rooms, and let that set the order of work. WaveFusion suits that approach.

WaveFusion is Wavestore's unified security platform. It brings access control, video and event data into one browser-based interface, with role-based permissions, a priority-tagged event log, an audit trail, interactive floor plans, zone lockdown, and event-to-action automation. It syncs with Active Directory and LDAP, so staff accounts and credentials follow your existing directory.

For a school, that means you can begin with entrances and visitors and build out from there, rather than committing to a large one-off switchover.

Seven questions to ask before you consolidate

These are the questions we would put to any vendor, including ourselves.

1. Can we keep the controllers and readers we already own?

Replacing hardware is the fastest way to turn a tidy project into an expensive one. WaveFusion is built on HID Mercury controllers and readers, so if you already run Mercury you can keep it. If you need new hardware, Wavestore can supply Mercury and HID access control components itself: Mercury intelligent controllers that scale up to 64 doors, S4 reader interface panels that add doors and readers without replacing controllers, and HID Signo readers. Because panels can be added door by door, the estate can grow in stages without starting again. If you do not, a site assessment, typically led by your preferred systems integrator with Wavestore's support, sets out a phased migration plan. The same goes for cameras: the ones that still perform well can stay, and you upgrade building by building as budgets allow. Few schools can fund a full replacement in a single financial year, and they should not have to.

Two technical checks are worth making early. For readers, ask whether they use the OSDP standard rather than older Wiegand wiring: OSDP supports an encrypted channel between reader and controller, which Wiegand does not. For cameras, ask which ONVIF profiles are supported (Profile S for streaming, Profile T for advanced streaming and analytics metadata, Profile G for edge storage), because that is what lets cameras from different manufacturers work together. Confirm the details for your own hardware with your integrator and Wavestore during the site assessment.

Where cameras do need replacing, the Wavestore Vision range is one option. It covers domes, bullets, PTZ, fisheye, multi-sensor, turret and ANPR cameras from 4MP to 32MP, so a single range can serve corridors, entrances, playgrounds and car parks, with analytics available on the fisheye and multi-sensor models. Every Vision camera is ONVIF compliant and works with all major VMS systems, and most models support ONVIF Profiles S, T, G and M (Profile M covers analytics metadata and events), so they fit the same open-standards approach described above. Profile support varies by model, so check the individual specification for the camera you plan to use. Cameras can be added to the same order as your Mercury and HID access control hardware, which keeps procurement simple for you and your integrator. A camera selector and IP installer tool help your integrator choose and set up the right model for each location. You stay free to mix in other brands, which is the point of an open platform.

2. How do video and access control actually connect?

‍"Integrated" can mean one screen or a handful of API calls. Ask to see the workflow: a door held open, a denied credential, a forced door. What does the operator see, and how many clicks does it take to reach the footage? In WaveFusion, an event on a door is one click from its related footage, with timeline scrubbing, so staff verify what happened without changing screens.

That is the difference between an integrated system and a unified one. A traditional integrated approach links separate products, each with its own data and its own screen. A unified platform is built as one system from the start, so video, doors and events share the same context:

The shift is operational as much as technical. For a school, it means the person dealing with a door alert is not piecing together a picture from several windows, and the IT team is not managing several versions of several products. When you review a vendor, ask which side of this table their design sits on.

A good test for any demo: ask to see an alert reach the right person with the right footage attached. Event-to-action automation in WaveFusion can notify a named member of staff, escalate by priority and bring up the linked video, so the person who needs to act is not left searching.

3. What happens when the internet drops?

‍Schools cannot have doors that depend on a cloud connection. In WaveFusion, access decisions are made locally at the controller, so doors keep working through a WAN, internet or cloud outage, and the system re-syncs when connectivity returns. The cloud layer runs on multi-AZ AWS hosting with a 99.9% uptime SLA, and regional hosting is available for data residency.

4. Who gets access, and how is it controlled?

‍Some schools give authorised emergency services remote viewing of relevant cameras so responders understand a situation before they arrive. That is a strong idea and it needs careful governance. Look for role-based permissions, a full audit trail and a clear process for adding and removing people. In the UK, a school remains responsible for how footage is used: it needs a lawful basis, signage, limited access and a defined retention period. The ICO's guidance on video surveillance sets out what it expects, and the Home Office's Surveillance Camera Code of Practice is written for public bodies in England and Wales, with other operators invited to adopt it voluntarily. WaveFusion provides the controls, and your data protection officer should sign off the policy.

Good governance tends to follow a few habits:

• Write the policy before the hardware goes in. Decide who can view, export and share footage, and review it regularly.
• Set retention by purpose, not by storage. The ICO sets no fixed period. Footage should be kept for the shortest time your purpose requires, and not for as long as the disk allows. Footage tied to an incident can be exported and held separately for as long as it is needed.
• Think about audio. The ICO treats audio as more intrusive than video. Any audio capability should be off by default and used only where there is a specific, evidenced need, with extra notice to people.
• Protect other pupils. When footage involving several children is shared, other pupils should be blurred or redacted. The ICO expects systems to be able to do this, for example when answering subject access requests.
• Agree access with responders in writing. A short memorandum of understanding with police, fire and ambulance services sets out what each can see and do, alongside practical measures such as a secure key box for emergency entry.

5. How does licensing scale as the estate grows?

‍Per-operator seat licensing can quietly limit who gets a view. A site manager, a head, a trust security lead and a local officer may all need access. WaveFusion is a subscription priced by the doors and devices you manage, not by operator seat, so adding people does not add licence cost. Updates are evergreen and included, with nothing to install on client machines.

6. What will the day-to-day workload look like for your IT and facilities team?

‍One of the clearest gains from consolidating is less time spent maintaining several ageing systems. WaveFusion runs in the browser on Windows, macOS and Linux with no client software, and onboarding, configuration and operator training are included.

Directory-linked permissions take away another recurring job. Because WaveFusion syncs with Active Directory and LDAP, access can follow each person's role, so joiners, movers and leavers are handled where your staff records already live, not by hand at every door.

Then there is the question of who looks after the system once it is live. Ask whether remote support, maintenance and on-site help are available through your integrator, and how the vendor backs them up. Wavestore works through its integrator partners, and support comes from our UK and Canada engineering teams, so you and your integrator can speak to the people who build the product.

7. What does your exit look like?

‍It sounds like an odd question for the start of a project, and it is one of the most valuable. Ask how you would export your data and configuration if you changed platform in five years. WaveFusion is built on an open integration framework with an open API, and it uses standard Mercury hardware. That keeps your options open.

It also matters for what you add later. School estates rarely stand still: environmental sensors, number plate recognition and emergency communications often follow. Ask any vendor how new device types join the same event view, and which integrations exist today and which are on the roadmap. A platform with an open API gives you a route to add them without starting again.

Is WaveFusion right for every school?

Not for every site. A single small school that wants a basic recorder and has no plans to grow may not need a platform like this. WaveFusion is built for estates that are, or expect to become, multi-building or multi-site: academy trusts, colleges, universities and groups with several campuses. For those, one dashboard across every site, with no VPN or per-site workstation, is where the time saving builds.

Integrations with HR systems, visitor management and building management systems are on the roadmap rather than available today, so if one of those is essential to your project, tell us and we will be straightforward about timing.

What does a good outcome look like?

The measures of success are practical: fewer screens, quicker reviews, less maintenance, and a calmer campus. As you plan, we suggest agreeing three simple targets before you begin:

Baseline each one now. Without a starting number, the improvement is hard to prove.

Set realistic expectations on timing too. Projects like this often run across several years, building by building and budget year by budget year. That is normal, and it is a strength: each stage can be proven before the next is funded. A sensible plan names what each year delivers, who owns it (IT, estates or the security lead), and which of the three measures it should move. That keeps a long programme visible and easy to defend at every budget review.

The takeaway

Consolidation is a sound move for many schools. The best projects start where the value is clearest, usually the doors, build in stages, and keep the school or trust in control of its hardware, its data, its costs and its future choices. One pane for video and doors is a strong goal. An open platform is what keeps it that way.

Ready to see it? Book a live WaveFusion demo with the Wavestore team, or download the WaveFusion datasheet. To price Mercury and HID hardware and Vision cameras in one order, talk to the Wavestore team on 0800 640 6660 or at sales@wavestore.com for pricing and lead times. For more on how Wavestore supports schools and colleges, visit our education sector page and read Safety and efficiency in education.

FAQs

Do we need to replace our existing door controllers?

‍If you already use HID Mercury controllers and readers, you can keep them. For other hardware, a site assessment, usually led by your preferred systems integrator with Wavestore's support, sets out a phased migration plan.

What happens to the doors if our internet connection fails?

‍Access decisions are made at the controller, so doors continue to operate. Events re-sync when the connection returns.

Is there a framework for deciding what to install first?

‍The US-based PASS K-12 Guidelines (7th Edition) are a widely used reference. They organise protection into five layers and four tiers, with electronic access control at primary entrances at the baseline and video analytics at higher tiers. They are a US framework, so use them alongside the guidance that applies to your own country.

Is it appropriate to give emergency services access to school cameras?

‍Many schools and districts do, and it can help responders understand a situation before they arrive. It needs clear policy on who is authorised, what they can see, for how long, and how it is audited. Involve your data protection officer and your local responders when setting it up.

How is WaveFusion priced?

‍It is a subscription based on the number of doors and devices you manage, not on the number of operators. Speak to the team for a quote for your estate.

Is WaveFusion certified for NDAA or Cyber Essentials?

‍Wavestore as a company is Cyber Essentials certified and ISO 9001 certified, and the full list is on the Wavestore certifications page. WaveFusion runs on AWS infrastructure that holds SOC 2 and ISO 27001 certifications, and its architecture is designed to support NDAA deployments. Those last points describe the platform's design and hosting, not certifications held by WaveFusion itself. Please ask the team for the current Cyber Essentials certificate, including its level, and for supporting documentation.

Sources

• Information Commissioner's Office, How can we comply with the data protection principles when using surveillance systems? (video surveillance guidance)
• Home Office, Amended Surveillance Camera Code of Practice (England and Wales)
• Safety and Security Guidelines for K-12 Schools, 7th Edition (2025)
• Introducing PASS Guidelines Version 7
• Wavestore, WaveFusion
• Wavestore, Vision cameras
• Wavestore, Our certifications
• Wavestore, Education sector
• Wavestore, Safety and efficiency in education