IT Infrastructure Specification | Salon Suites Example

1. Access Control System

1.1 Requirements

Requirement	Priority	Notes
24/7 Tenant Access	MUST	Non-negotiable for salon suite model
Individual Credentials	MUST	Never shared PINs - unique per tenant
Remote Management	MUST	Onboard/offboard tenants without site visit
Audit Logs	MUST	12-month minimum retention for liability
Visitor Access	SHOULD	Time-limited passes for clients
Local Credential Caching	MUST	Works during internet outage
Emergency Override	MUST	Physical key for management only

1.2 Access Points Inventory

Location	Type	Notes
Main Entrance	Reader + Video Intercom	Primary controlled entry
Suites 1-18	Smart lock or reader	Individual tenant access
Back/Service Door	Reader	Staff/delivery access
Total	20 access points

1.3 Vendor Options

Budget Option: Nexkey

Aspect	Details
Monthly Cost	$15-25/door ($300-500/month for 20 doors)
Hardware Cost	$200-400/door ($4,000-8,000 total)
Entry Methods	Mobile app + PIN
Pros	Lowest cost, reliable, simple, cloud-based
Cons	No video intercom, no fob option
Best For	Budget-conscious operators wanting reliability

Mid-Range Option: ButterflyMX

Aspect	Details
Monthly Cost	$35-55/door ($700-1,100/month for 20 doors)
Hardware Cost	$8,000-12,000 (includes video intercom)
Entry Methods	Mobile app + card + PIN
Pros	Video intercom, excellent visitor management
Cons	Higher monthly and hardware cost
Best For	Premium positioning with professional visitor experience

Alternative: Kisi

Aspect	Details
Monthly Cost	$20/door ($400/month for 20 doors)
Hardware Cost	$599-899/door ($12,000-18,000 total)
Entry Methods	Mobile app + fob + PIN
Pros	Strong API, good for integrations, excellent coworking track record
Cons	Higher hardware cost
Best For	Operators prioritizing future integrations and API access

1.4 Recommendation Framework

Priority	Recommended System	Rationale
Lowest Monthly Cost	Nexkey	$300-500/month vs $700-1,100 for ButterflyMX
Best Visitor Experience	ButterflyMX	Video intercom creates professional first impression
Future Integrations	Kisi	Best API for property management software sync
Decision Point	During site selection	Get quotes from all 3 vendors

1.5 Integration Requirements

Integration	Purpose	Priority
Property Management Software	Auto-provision/deprovision tenants	HIGH
Camera System	Timestamp sync for incident investigation	HIGH
Emergency Override	Physical key for management only	MUST

1.6 Credential Management

Groups:
- "Active Tenants" - 24/7 access to main entry + assigned suite
- "Former Tenants" - No access (audit trail preserved)
- "Contractors" - Temporary time-limited access
- "Management" - All doors, all times

Access Schedules:
- "24/7 Tenant Access" - Always (for suite doors)
- "Maintenance Window" - M-F 8am-5pm (for contractors)

Audit Log Retention: 12 months minimum

2. Security Camera System

2.1 Requirements

Requirement	Priority	Notes
8 Cameras Minimum	MUST	Expandable as needed
1080p Minimum	MUST	4K preferred for entrances
30-Day Retention	MUST	Insurance requirement
Local NVR	MUST	Not cloud-dependent for recording
Night Vision / IR	MUST	24/7 recording capability
Motion Detection	SHOULD	AI filtering reduces false alerts
Remote Viewing	SHOULD	Mobile app access
NO Suite Cameras	MUST	Tenant privacy protected

2.2 Camera Placement Map

EXTERIOR (2 cameras):
1. Main entrance - G5 Bullet facing outward (4K recommended)
2. Back entrance - G5 Bullet facing outward

INTERIOR (4-6 cameras):
3. Reception/lobby - G5 Dome
4. North corridor - G5 Dome
5. South corridor - G5 Dome
6. Common area intersection - G5 Dome
7. Parking lot (if controlled) - G5 Bullet (optional)
8. Parking entrance (if controlled) - G5 Bullet (optional)

NEVER:
- Inside suites (tenant privacy)
- Restrooms

2.3 Visual Layout

+-----------------------------------------------+
|                                               |
|   [CAM 3: Reception/Lobby]                    |
|                                               |
|   RECEPTION                                   |
|      |                                        |
|  ====+===== CORRIDOR [CAM 4: North] =========|
|      |                   |                    |
|  [Suites]   COMMON   [Suites]                 |
|             AREAS                             |
|      |                   |                    |
|  =====+==== CORRIDOR [CAM 5: South] =========|
|       |                                       |
|   [CAM 6: Common Area]                        |
|                                               |
|   [BACK DOOR - CAM 2]                         |
|                                               |
+-----------------------------------------------+

EXTERIOR:
[CAM 1: Main Entrance]     [CAM 2: Back Entrance]

2.4 Recommended System: UniFi Protect

Component	Details	Est. Cost
Cameras	8x G5 series (mix Dome/Bullet)	$2,000-3,000
NVR	UniFi NVR or Cloud Key Gen2+ with 4TB	$400-600
Installation	Professional installation	$500-1,000
Monthly Cost	$0 (no subscription)	$0
Year 1 Total		$2,900-4,600
Year 3 Total	Same (no recurring)	$2,900-4,600

2.5 Alternative: Reolink (Budget Option)

Component	Details	Est. Cost
Cameras + NVR	8-camera system with NVR	$1,600-2,700
Monthly Cost	$0	$0
Pros	Lower cost, AI detection
Cons	Less polished app, Chinese-owned (NDAA consideration)

2.6 Storage Calculation

Cameras	Resolution	Retention	Storage Needed
8	1080p	30 days	2-4 TB
8	1080p	60 days	4-8 TB
8	4K	30 days	8-16 TB
8	4K	60 days	16-32 TB

Recommendation: 4TB NVR with 1080p continuous recording, 4K for entrance cameras only.

2.7 Privacy Policy Requirements

Policy	Details
Signage	"Video surveillance in use" signs at all entrances
Disclosure	Video monitoring disclosed in lease agreement
Suite Privacy	NO cameras inside suites - tenant private space
Retention	30-day standard, longer for documented incidents
Tenant Requests	Tenants may request footage of common area incidents
Law Enforcement	Comply with valid legal requests only

3. Network Infrastructure

3.1 Requirements

Requirement	Priority	Notes
Commercial-Grade	MUST	Not consumer mesh
VLAN Support	MUST	Network segmentation
20+ Device Capacity	MUST	Tenants + management
PoE	MUST	Powers cameras and APs
Remote Management	SHOULD	Cloud controller
Reliability	MUST	Access control dependency

3.2 Network Architecture

                         INTERNET
                            |
                    [Ubiquiti UDM Pro]
                     Router/Firewall/Controller
                            |
                    [US-8-150W PoE Switch]
                     Powers cameras and APs
                            |
            +---------------+---------------+
            |               |               |
        VLAN 10         VLAN 20         VLAN 30
      Management         Tenant           Guest
            |               |               |
    +-------+-------+       |               |
    |       |       |       |               |
 [Access] [NVR]  [Admin] [Suite        [Reception
 Control] Cameras Devices  WiFi]          WiFi]
    |
[Suite Locks]
[Main Entry]
[Back Door]

3.3 VLAN Configuration

VLAN	ID	Purpose	DHCP Range	Security
Management	10	Cameras, access control, NVR, admin	10.0.10.100-200	No inter-VLAN routing
Tenant	20	Suite WiFi for tenant devices	10.0.20.100-250	Client isolation enabled
Guest	30	Reception/waiting area	10.0.30.100-200	Captive portal optional

3.4 Hardware Specification

Item	Model	Purpose	Est. Cost
Router/Controller	UDM Pro or UDM Pro Max	Core routing, firewall, controller	$400-500
PoE Switch	US-8-150W or US-16-150W	Power cameras and APs	$200-300
Access Points	U7 Pro (WiFi 7) x 2-3	Tenant and guest coverage	$600-900
Cabling	Cat6 runs	Cameras, APs, access control	$500-1,000
Total Network			$1,700-2,700

3.5 WiFi Configuration

Network	VLAN	Security	Bandwidth Limit	Visibility
"Luxa-Tenant"	20	WPA3	50 Mbps per client	Hidden optional
"Luxa-Guest"	30	WPA2	25 Mbps per client	Visible
"Luxa-Management"	10	WPA3	Unlimited	Hidden

3.6 Why UniFi (Not Meraki)

Factor	UniFi	Meraki
Licensing Fees	$0/year	$150-400/device/year
Camera Integration	Native (UniFi Protect)	Separate system
5-Year TCO	~$2,500	~$15,000+
Scale Fit	Adequate for 18-suite facility	Enterprise overkill

4. Total Infrastructure Budget

4.1 Budget Option (Nexkey + UniFi)

Category	Hardware	Monthly	Year 1	Year 3
Access Control (Nexkey)	$5,000-8,000	$300-500	$8,600-14,000	$16,200-26,000
Cameras (UniFi Protect)	$2,900-4,600	$0	$2,900-4,600	$2,900-4,600
Network (UniFi)	$1,700-2,700	$0	$1,700-2,700	$1,700-2,700
TOTAL (Budget)	$9,600-15,300	$300-500	$13,200-21,300	$20,800-33,300

4.2 Mid-Range Option (ButterflyMX + UniFi)

Category	Hardware	Monthly	Year 1	Year 3
Access Control (ButterflyMX)	$8,000-12,000	$700-1,100	$16,400-25,200	$32,800-51,600
Cameras (UniFi Protect)	$2,900-4,600	$0	$2,900-4,600	$2,900-4,600
Network (UniFi)	$1,700-2,700	$0	$1,700-2,700	$1,700-2,700
TOTAL (Mid-Range)	$12,600-19,300	$700-1,100	$21,000-32,500	$37,400-58,900

4.3 Comparison Summary

Option	Hardware	Monthly	Year 1	Year 3
Budget	$9,600-15,300	$300-500	$13,200-21,300	$20,800-33,300
Mid-Range	$12,600-19,300	$700-1,100	$21,000-32,500	$37,400-58,900
Difference	+$3,000-4,000	+$400-600	+$7,800-11,200	+$16,600-25,600

5. Implementation Timeline

Week	Task	Notes
-8 to -6	Order hardware	Lead time for access control, cameras
-6 to -4	Rough wiring during build-out	Cat6 runs for cameras, APs, access control
-4 to -2	Install hardware	Locks, readers, cameras, networking
-2 to -1	Configure and test	Software setup, credentials, schedules
Opening	Issue tenant credentials	As tenants sign leases

Coordination Requirements

System	Coordinate With	Notes
Access Control	Electrician, Door Installer	Low-voltage wiring, lock compatibility
Cameras	Electrician, IT	Power, network drops
Network	IT, ISP	Circuit activation, configuration

6. Vendor Quoting Checklist

Get Quotes From:

Access Control (compare all 3):

Nexkey - request quote for 20 doors
ButterflyMX - request quote for 20 doors + video intercom
Kisi - request quote for 20 doors

Cameras:

UniFi Protect installer - 8 cameras + NVR
Reolink system (budget alternative)

Network:

UniFi installer or IT contractor

Quote Request Information

Provide to vendors:

18 suites + 2 entry points (20 total access points)
8 camera locations (expandable)
3 VLAN network requirement
Site visit for wiring assessment

Infrastructure decisions finalize during site selection. Get quotes from Nexkey, ButterflyMX, and Kisi for access control. UniFi networking and cameras are recommended default.

Infrastructure & Security Systems Specification Complete Phase 11: Technology Stack - Plan 02 Ready for contractor quoting and SBA business plan