FRENCH PHARMACIES
≥ 700
Running non-compliant gestural-AI surveillance under CNIL's definitive ruling, June 2025.
01 / 09ON-PREMISE AI · LOSS PREVENTION · MINDORA'S BOX
Behavior detection
that never leaves the box.
Mindora's Box plugs into your existing CCTV and detects theft, robbery, and risk behaviors in real time — entirely on-device. No cloud. No exported video. GDPR-native by architecture.
LIVE · ON-DEVICEEU-HOSTED MLOPSCE-READY HARDWARE
02 / THE MARKET VACUUM
Europe's leading AI surveillance vendor was ruled GDPR non-compliant.
INCUMBENT
€53M
Raised. 5,000+ stores. Cloud architecture ruled non-compliant on the right to object.
AEPD · SPAIN
15 Jul
Confirmed 2025: it can already enforce against AI under GDPR — ahead of the AI Act transposition.
The market needs a GDPR-native alternative — especially in small high-value formats.
03 / THE PRODUCT
Detection happens in the store.
Not in the cloud.
ARCHITECTURE · DATAFLOWLIVE
Five vision specialists run in parallel on the box. An on-device LLM agent fuses their evidence into a single, explainable alert. Cameras feed in. Only metadata flows out.
- 01
Open-vocabulary specialist ensemble
Five specialists running in parallel: HOI (Qwen2.5-VL), social, individual/skeleton, spatio-temporal, anomaly.
- 02
Configurable agent runtime
Pydantic AI v1.0 + Qwen2.5-3B-Instruct AWQ INT4. Reasoning cycle under 1.5 seconds on AGX Orin.
- 03
Multi-camera orchestration
DeepStream 7.1 + Triton in-process. 8+ cameras at sustained 15 FPS.
“Video never leaves the box.”
04 / LIVE FEED
REC · CAM 03 · STORE FRONT
1920×108015 FPS14:22:08 CET · 2026-05-03
CONFIDENCE 0.8714:22:08.412
ALERT · HOI SPECIALIST
Hand-to-pocket gesture detected. Concealment posture sustained 1.4 s. Subject paused at shelf 2 prior. Recommend operator review.
cam 03 · 14:22:08 · 0.87
REAL-TIME EXPLAINABLE ALERT·CITES CONTRIBUTING SPECIALIST·EVIDENCE CLIP LINKED (LOCAL)
05 / THREE FORCES, 2026
Three forces opened a window. We're already through it.
REGULATION
CNIL opened a vacuum. AEPD enforces.
~700 French pharmacies are a capturable churn pool. Spain has confirmed it can already enforce against AI under GDPR.
HARDWARE
Jetson Orin made the math work.
Multi-model on-device is finally viable. 43 tok/s for 3B INT4 LLMs in €700–€900 of hardware (NVIDIA, Dec 2024).
MODELS
Open-source made distillation viable.
Qwen2.5-VL, InternVideo2, RT-DETR, RTMPose. Confidence-gated KD holds the loss to 3–5 pp.
06 / FOUR VERTICALS, ONE BOX
Same hardware, same ensemble.
~80% surface area shared.
Marginal cost of a new vertical: about three weeks of prompt-pack and agent configuration.
Pharmacy
Y1 BEACHHEAD
€1,800
ARR / STORE
Payback < 6 moPROMPT-PACK · CONCEALMENT · STAGING
Tobacco
Y1 SAME CHANNEL
€2,160
ARR / STORE
Payback 8–14 moPROMPT-PACK · DISTRACTION · GROUP-PLAY
Jewellery
Y2 CONDITIONAL
€3,600
ARR / STORE
Payback < 6 mo (with insurance)PROMPT-PACK · DURESS · SMASH-AND-GRAB
Supermarket
STRATEGIC ANCHOR
€10,800
ARR / STORE
Payback ~ 9 moPROMPT-PACK · SELF-CHECKOUT · SHRINK
07 / GDPR-NATIVE BY ARCHITECTURE
Compliance is the architecture, not the policy page.
- Video never leaves the box
Frames are processed and discarded on-device. Egress is structurally impossible.
- Outbound data is metadata only
JSON event records, alert IDs, timestamps. No imagery, no embeddings of bodies.
- Optional skeleton-only privacy mode
Pose-only inference path; pixels never reach downstream specialists.
- Customer-controlled retention
Evidence-clip lifetime is set by the operator. Default is short.
- EU-hosted MLOps stack
Hugging Face Paris · Scaleway Paris · Mender Oslo. No US transfer.
- CE-ready hardware platform
Industrial chassis, fan-cooled, mounted in the back-of-house cabinet.
The EU AI Act classifies behavior-monitoring systems in retail as high-risk where they enable inference about persons. The compliance burden — legal basis, right to object, data-minimisation, transparency — falls on the controller, i.e. the retailer.
A cloud architecture cannot meet that burden cleanly: video crosses jurisdictions, recipients multiply, and the right to object becomes administratively intractable. CNIL's June 2025 decision on Veesion turned this from theory into enforcement.
Mindora's Box answers the burden at the architectural layer. Personal data is processed locally, retained briefly, and never transmitted as imagery. What leaves the box is a record of an event, not a record of a person.
08 / TECHNICAL VALIDATION
We've already smoke-tested the thesis on out-of-distribution footage.
0.939
AUC · IN-DISTRIBUTION
VadCLIP on UCF-Crime.
0.844
AUC · OOD
VadCLIP, out-of-distribution clips.
5
CV SYSTEMS · IN PROD
Already shipped via founder consultancy.
€40–50K
CONSULTANCY · LAST YEAR
Covers operations end-to-end.
Smoke test conducted April 2026 on consumer hardware (RTX 5070 Ti), 26 UCF-Crime clips + 18 OOD clips. Validates the open-vocabulary thesis zero-shot on out-of-distribution behavior.
09 / WHO WE ARE
Three founders. Five CV systems already in production.
A
Adrià
CEO · COMMERCIAL & STRATEGY
M
Miquel
CTO · COMPUTER VISION
A
Artur
HEAD OF AGENT RUNTIME
MINDORA TECHNOLOGIES, S.L. · BARCELONA, SPAIN · FOUNDED MAY 2025
— BOOK THE DEMO
Twenty minutes.
We'll show you the box.
MindoraOn-premise AI for retail loss prevention. Built in Barcelona.
CONTACT
- hello@mindoratechnologies.com
- Tarragona HQ
ORIGIN
Built in the EU.
Hosted in the EU.
Compliant by design.
© 2026 MINDORA TECHNOLOGIES, S.L.BOX.MINDORATECHNOLOGIES.COM