You see it after.
Footage is reviewed once you notice the loss. The product, and the person, are already gone.
CAMGUARD IS PART OF THE MINDORA PLATFORM
See the platform →Mindora's Box plugs into your existing CCTV and turns it into an active theft-detection system. Real-time alerts the moment something happens — on your phone or back-office screen. GDPR-by-design via edge processing + Article 21 opt-out mechanism. No cloud. No replacement cameras.
AECOC Barómetro 2025: Spanish retail loses 1.1% of revenue — €2.8B/year — to shrinkage.
By the time someone reviews the footage, the product is gone. Mindora's Box watches in real time, so the alert reaches the counter while the person is still in the store.
Footage is reviewed once you notice the loss. The product, and the person, are already gone.
AEPD and CNIL rulings have repeatedly found centralized AI surveillance fails proportionality once an edge-only alternative exists. The compliance climb gets steeper every quarter.
Hiring more eyes for the floor adds payroll without solving counter-zone, self-checkout, or after-hours risk.
Push notification within ~1.5 seconds of a risk behavior — concealment, sweep-and-run, distraction theft, duress. Tap to see the clip.
Every alert tells you what was detected and why. Not a confidence score — a sentence. "Hand-to-pocket gesture, cam 03, 14:22."
Any IP camera with an RTSP feed. 4–8 cameras per box. Your CCTV installer plugs it in — typically one afternoon.
Detection runs on the box itself. Nothing is uploaded. Only short text alerts leave the building. GDPR-compliant by architecture.
Hand-to-pocket gesture detected. Concealment posture sustained 1.4 s. Subject paused at shelf 2 prior. Recommend operator review.
Pick your store type. We'll show you what Mindora's Box detects in your context, and what it typically saves per location per year.
Independent pharmacies in Spain and France lose €22,000–€28,000 per year to shrinkage (Checkpoint Europe 2.17% × FEFE 2024 €1.124M avg revenue) — dermocosmetics, fragrance, OTC analgesics. ~700 EU pharmacies on a non-compliant cloud AI vendor under CNIL's June 2025 ruling need a compliant alternative.
PHARMACY ~€22–28K · TOBACCO N/A · JEWELLERY ~€3–10K · SUPERMARKET ~€55–165K
CONSERVATIVE 10% · TYPICAL 18% · STRONG 28% · CAP 35%
ESTIMATES — REAL FIGURES VARY BY FORMAT, FOOTFALL, AND CCTV PLACEMENT. WE'LL MODEL YOUR ACTUAL CASE ON THE DEMO.
SOURCES: SHRINKAGE BENCHMARKS PER AECOC BARÓMETRO 2025, COFM FARMADRID, CICOR. REDUCTION RATES TRIANGULATED FROM FORRESTER TEI (SEPT 2024), GROCERY VENDOR DISCLOSURES, AND ONE NAMED AIRPORT-RETAIL DEPLOYMENT.
+ €18 / camera / month (pharmacy · tobacco)
+ €25 / camera / month (jewellery, premium tier)
+ €15 / camera / month (pharmacy · tobacco · supermarket)
+ €20 / camera / month (jewellery)
For 25+ locations, supermarkets, integrators
ALL PRICES EXCL. VAT · INSTALLATION QUOTED BY YOUR CCTV PARTNER · MONTH-TO-MONTH SOFTWARE BILLING · HARDWARE IS YOURS · NO EXIT PENALTY
GDPR and the EU AI Act are technology-agnostic — neither prohibits cloud inference outright. What they require is proportionality. Once an edge-only alternative exists, every centralized architecture faces a harder proportionality test than it did before.
The direction is consistent across European regulators. AEPD has fined operators of centralized biometric systems on proportionality grounds (Aena €1.8M, Nov 2025; Yoti €950K, Mar 2026; FC Barcelona DPIA deficiency €500K, Mar 2026). CNIL ruled in July 2025 that augmented cameras for age estimation in tobacco shops were neither necessary nor proportionate. The EU AI Act's full high-risk regime applies from 2 August 2026, and most algorithmic video surveillance for evaluating people falls inside it. Mindora's Box was designed for that direction of travel. Your DPO inherits our DPIA, our Article 21 mechanism, and our AEPD-ready documentation.
No cross-border data flow. Frames are processed and discarded on-device.
No faces, no images, no clips. Alerts are sentences and timestamps.
Consultation areas and waiting rooms processed without recording images.
In-store signage, QR opt-out form, per-store roster, technical suppression in the agent layer.
You decide what is stored and for how long. Model registry in Paris, fleet management in Oslo, telemetry in Paris.
For any retailer running a cloud-based AI behavior-detection system today — same cameras, new box, half a day of work.
~700 EU pharmacies on a non-compliant cloud AI vendor are now under definitive non-compliance (Le Moniteur des Pharmacies, September 2025). The ruling's scope: real-time gesture/behaviour video analytics has no legal basis under GDPR for retail use in France — the entire technology category, not one vendor's configuration.
If your store runs cloud-based AI surveillance today, your DPIA must defend the cloud architecture itself — proportionality, cross-border transfers, retention, Article 21 right to object. Each is a known pressure point in current European enforcement. Exposure compounds with every transaction.
Edge-only processing + Article 21 multi-mechanism opt-out + Article 13 explainable alerts + customer-configurable confidence thresholds. We provide the DPIA template, in-store signage, AEPD/CNIL-ready documentation, and we coordinate the migration so you don't have a coverage gap. Same cameras, new box, half a day of work. Ask about switching-cost coverage.
Almost certainly. We support any IP camera with an RTSP feed — that covers ~95% of CCTV deployed in EU retail in the last decade. We send you a one-line checklist before the demo so you can confirm in two minutes.
From the moment a behavior happens to the alert hitting your phone: typically under 1.5 seconds. Fast enough for a counter-zone response while the person is still in the store.
Honest answer: triangulated from three sources, not a single vendor claim. Forrester TEI Everseen Evercheck (September 2024, $88K/store/year = 0.14% revenue ≈ ~14% reduction on 1% baseline shrink, n=4 anonymous interviews) is the floor. Panoptyc-disclosed grocery case studies (33% one anonymous client, methodology not published) and one named airport-retail deployment at Amsterdam Schiphol (40% across 150+ cameras) sit at the upper bound. We claim 18% typical, 28% strong, capped at 35% — sitting honestly in the inter-vendor middle. We will not promise 50% or 60% reduction because no defensible third-party study supports those numbers in retail SMB context.
Cloud AI vendors upload your video to their servers for analysis. Mindora's Box runs the analysis on a small device in your back office — your video never leaves the building. Same outcome (alerts on your phone), with an architecture that's structurally easier to defend in a DPIA.
In principle, yes — neither GDPR nor the AI Act prohibits cloud inference outright. In practice, the proportionality test European regulators are applying has hardened. AEPD and CNIL rulings in 2024–2026 have repeatedly found centralized architectures fail necessity and proportionality once a less-intrusive alternative exists. We don't tell you cloud surveillance is illegal. We tell you it's a harder thing to defend in a DPIA every year, and we offer the easier-to-defend alternative.
Every alert includes the evidence clip and the reason. Mark it as a false positive in one tap; the system uses that signal to retune for your store. We target a precision ceiling, not a recall ceiling — fewer, higher-quality alerts.
Detection still runs — it's all on the box. Alerts queue locally and deliver when connectivity returns. The box can drive a wired buzzer on the counter for offline-critical use cases.
Video never leaves the box. We provide GDPR-compliant in-store signage, a QR-code opt-out form, a per-store opt-out roster, and technical suppression in our agent layer when a customer is flagged. Your DPO receives our DPIA template ready for AEPD or CNIL submission. For pharmacy consultation areas, skeleton-only mode processes movement without recording images at all. Mindora's Box detects behaviors, not identities — no face matching, no employee scoring.
Edge processing alone doesn't solve Article 21 — that's why CNIL ruled the way it did. Our full mechanism: (a) clear in-store signage at every entrance and detection zone with QR code linking to opt-out form; (b) per-store opt-out roster maintained by you (manual flag at POS or DPO contact); (c) technical suppression mode in our agent layer that suppresses any alert involving a flagged person for the session, with optional cross-session persistence via opt-in identifier (e.g., loyalty card hash). Documented in your DPIA — we provide the template. Combined with edge-only architecture (no cross-border data flow, no annotator pipeline), this addresses each CNIL finding directly: Article 21, legitimate-interest proportionality, FP rate, opacity. Your auditor reviews it; we provide the documentation.
A small fanless industrial computer designed for back-of-house mounting. Two ethernet ports, USB-C, HDMI, and a single status LED. Sized to sit on the same shelf as your DVR.
Yes. Software is month-to-month after a 30-day pilot. Hardware is yours. No exit penalty.
We'll tailor the demo to your store format, model your shrink, and answer the questions your auditor will ask. No slides unless you want them.
On-premise AI for retail loss prevention. Built in Barcelona.