Dashboard
Live operational picture across your sites.
AI engine three-stage pipeline: detector → rules → AI second opinion
Device & camera health live status of every terminal and camera
Ask OwlScope natural-language search
AI Incidents
Every detection, its severity, the AI second-opinion verdict and the recorded clip.
Alert routing rules who gets notified, by severity, site and floor
Cameras & AI Modules
Attach RTSP streams and choose which analytics run on each camera (all modules can run on a camera at once).
Add camera
Configured cameras
Analyze an exported clip runs this camera's modules over a video file
Interactive Floor Plan
Real-time target locations, sensor status and historical movement replay.
Upload floor plan
Sightings are produced automatically by face matches on positioned devices and cameras — the FR network is the sensor grid; no extra IoT hardware.
AI Engine
What is running on this server, and the health of each AI component.
Component status
Pipeline: 1. detector (OpenCV motion / YOLO when installed) → 2. temporal rules & zones → 3. AI second opinion (VLM verdict on clean frames) before staff are alerted. Critical alerts go out immediately; the verdict follows. High alerts wait for the verdict and are suppressed when it says “no incident”.
Visitors
Pre-registration with QR passes, kiosk self-service, health declarations, host notifications and the live evacuation roll call.
Pre-register a visitor issues a QR pass to send ahead
Expected today pre-registered, not yet arrived
Walk-in registration same call the kiosk makes
Visit limits special events / pandemic mode
On-site now evacuation roll call
Watchlist & Access Prevention
Restricted individuals are denied automatically at the kiosk and every door; security is notified instantly.
Add entry
Entries & recent hits
People
Staff, residents, daycare clients, NOK, helpers, volunteers and robots — one registry, PDPA-masked.
Register person
Directory
Devices
Hikvision · Dahua · ZKTeco · Legacy terminals, managed identically under one access policy.
Register device
Legacy terminals connect themselves over WebSocket /pub/chat (unchanged URL). ZKTeco units point their Cloud/ADMS server at this host (/iclock). Hikvision/Dahua are managed over their HTTP APIs and push events to /api/events/<brand>.
Fleet
Time Attendance
Staff clock-in / clock-out from the FR terminals — first-in, last-out and hours per day.
Clock-in = first granted IN event of the day; clock-out = last OUT (or last event). "Incomplete" marks days with a missing in or out — typically tailgating or a skipped exit reader. Records export to WFO automatically on the schedule.
Doors & Access
Doors, access routes and who may go where, when.
Add door
Create route / door group e.g. Guest route, Delivery route
Doors
Routes / groups
Grant access
Integrations
Sailpoint · CMS1 (B3) · CMS2 (Ingot) · Door Access Server · WFO · SFTP flat files.
Pending review CMS batch files wait for staff verification before apply
Exchange log
Inbound endpoints (peer systems present X-Api-Key from .env): /api/integrations/sailpoint/users · /cms1/clients · /cms2/residents · /door-server/users · robot door: /api/robot/open-door. Outbound: WFO + CMS attendance via API and/or SFTP on the schedule.
Migrate from the legacy system one-off CSV import with a reconciliation report
CSV columns: person_code, person_type, name, nric, phone, site_code, service_category, card_number, face_image_base64 (last one optional). Every batch produces a reconciliation report — the sign-off evidence that nothing was lost.
Sites & Users
Multi-site setup and system accounts with the access hierarchy.
Add site
Add user account
Data lifecycle PDPA retention — dispose old records by rule, disable leavers
Reports
Self-service, real-time and historical — no IT intervention needed.
Attendance entry/exit, filter by care profile
Incidents by type & severity last 7 days
Visit history search by person and date range
Access decisions granted / denied / fever / watchlist
NOK & visit history per resident
Access-right anomalies smart review by person category
Audit Trail
Hash-chained and tamper-evident. Views and exports are themselves recorded.