Step 3 of 4 · Comply
The audit is every day now.
Regulation packs turn the law into clauses, and the cameras score them continuously, site by site. Every alert is sealed at the source, so it holds up with a regulator, an insurer or a customer.
Live score
Where you stand, this minute.
An audit tells you where you stood months ago. FloFusion scores your packs from the alerts your cameras raise and the health of the cameras raising them.
One score per pack
Every pack you subscribe to gets a score from 0 to 100, kept current, and the packs roll up into one score for the organisation.
A status for every clause
Compliant, at risk, non-compliant or not measured. You see how many obligations are evidenced, and which are not.
Gaps stated as facts
“73.1% of 28 events closed within 24h (target 95%)” tells a supervisor what to fix. Nobody has to translate it.
A trend you can check
The 30-day trend is drawn from signed snapshots, so every point on it can be reproduced later.
Regulation packs
The law, in clauses a camera can score.
Each pack breaks a regulation into weighted clauses and ties every clause to camera evidence. Packs are versioned, so a signed score always names the version it was scored against.
Featured packs
International · Safety management
ISO 45001:2018 Supplier Audit Baseline
v2018 · 6 clauses
Vision-evidenced subset of ISO 45001 clauses commonly sampled in supplier audits (SMETA-style).
International · Occupancy & queues
Occupancy & Queue Limits
v2026.2 · 4 clauses
Rooms, zones and queues kept within the limits you set: cleanroom headcounts, venue capacity, queue length and how long stays last. Scored from measurements, not alerts.
United Kingdom · Data protection & residency
UK GDPR & ICO – Monitoring Workers
v2023.10 · 6 clauses
UK GDPR and the Data Protection Act 2018 for camera processing of staff, following the ICO’s monitoring-workers guidance (October 2023): DPIA, consultation, transparency, on-site processing and logged access.
International · Quality & production
ISO 13485:2016 – Contamination Control & Production
v2016 · 12 clauses
Gowning, zone flow, line clearance and material control evidence for medical device and IVD manufacturing (§6.4, §7.5, §8.5.2). Certification stays with the manufacturer and its notified body.
United States · Quality & production
FDA QMSR – 21 CFR Part 820
v2026.1 · 6 clauses
The Quality Management System Regulation (in force 2 February 2026), which incorporates ISO 13485:2016: gowning, controlled-area entry, line clearance, CAPA closure and records, mapped to Part 820.
United Arab Emirates · Labour & worker safety
UAE Labour – Midday Break & Worker Safety
v2025.1 · 6 clauses
Midday work ban (15 Jun – 15 Sep, 12:30–15:00), heat stress, PPE, egress and incident closure for UAE sites.
All packs11 packs in 6 regions, with versions and clause counts
| Pack | Area | Version | Clauses |
|---|---|---|---|
| International | |||
| ISO 45001:2018 Supplier Audit BaselineSafety management · v2018 · 6 clauses | Safety management | v2018 | 6 |
| ISO 13485:2016 – Contamination Control & ProductionQuality & production · v2016 · 12 clauses | Quality & production | v2016 | 12 |
| Occupancy & Queue LimitsOccupancy & queues · v2026.2 · 4 clauses | Occupancy & queues | v2026.2 | 4 |
| United Kingdom | |||
| UK GDPR & ICO – Monitoring WorkersData protection & residency · v2023.10 · 6 clauses | Data protection & residency | v2023.10 | 6 |
| United States | |||
| FDA QMSR – 21 CFR Part 820Quality & production · v2026.1 · 6 clauses | Quality & production | v2026.1 | 6 |
| United Arab Emirates | |||
| UAE Data Protection & Dubai SIRA CCTVData protection & residency · v2025.1 · 8 clauses | Data protection & residency | v2025.1 | 8 |
| UAE Labour – Midday Break & Worker SafetyLabour & worker safety · v2025.1 · 6 clauses | Labour & worker safety | v2025.1 | 6 |
| Saudi Arabia | |||
| KSA PDPL & Labour – Midday Ban and Worker SafetyLabour & worker safety · Clause list on request | Labour & worker safety | On request | |
| Indonesia | |||
| Indonesia Halal & Food Safety (UU 33/2014, GR 42/2024)DraftDraft – pending validation by an accredited LPH auditor.Halal & food safety · v2026.1-draft · 5 clauses | Halal & food safety | v2026.1-draft | 5 |
| Indonesia K3 / SMK3 Worker Safety (PP 50/2012)Labour & worker safety · v2025.1 · 5 clauses | Labour & worker safety | v2025.1 | 5 |
| Indonesia Personal Data Protection (UU 27/2022)Data protection & residency · v2025.1 · 5 clauses | Data protection & residency | v2025.1 | 5 |
New packs follow the law, and new versions keep the old ones checkable.Which rules apply where you operate
Clauses, the way the engine reads them.
Each clause carries its source, the requirement in plain words and the measured sentence behind its score. The auditor reads it; the supervisor fixes it.
| Clause | Requirement and evidence | Status | Score | Weight |
|---|---|---|---|---|
| ISO45001-8.1.2 | ISO45001-8.1.2 Hazard controls effective (PPE) 1.2 PPE violations per 100 watched hours over 30 days (target 0.5 or fewer). ISO 45001:2018 Supplier Audit Baseline · ISO 45001 §8.1.2 At risk78 | At risk | 78 | 2 |
| OQ-4 | OQ-4 Stays within their time limit 26.1% of 682 stays lasted over 30 minutes (target 5% or less), across 1 zone. Occupancy & Queue Limits · Your stay limits Non-compliant0 | Non-compliant | 0 | 1 |
| UK-ICO-1 | UK-ICO-1 DPIA completed for camera monitoring Attested by the data protection officer; valid until June 2027. UK GDPR & ICO – Monitoring Workers · ICO monitoring workers guidance – DPIA Compliant100 | Compliant | 100 | 2 |
| ISO13485-6.4.1a | ISO13485-6.4.1a Gowning complete at entry to classified areas 0.4 gowning alerts per 100 watched hours over 30 days (target 0.5 or fewer). ISO 13485:2016 – Contamination Control & Production · ISO 13485 §6.4.1 – personnel clothing Compliant96 | Compliant | 96 | 2 |
See it for your industry
Examples for your industry
Audit ledger
Hand the auditor a link, not a binder.
A score you can edit is an opinion. Every score goes into a signed, chained ledger with the clause evidence behind it.
- Content hash
- A SHA-256 hash of the snapshot. Change one score, one timestamp or one word, and it no longer matches.
- Ed25519 signature
- Each snapshot is signed with the deployment’s key. The public key is published, so anyone can verify it without asking us.
- Chain link
- Every snapshot holds the hash of the one before. Delete or reorder one, and the chain visibly breaks.
What a snapshot holds
- The pack, its version and the score at the moment of signing
- Every clause as evaluated: requirement, source, measured evidence, status, score and weight
- The devices and cameras that contributed, so coverage can be checked
- Snapshots on a schedule, plus one on demand before an audit
- A time-limited auditor link, with no video or images, and a signed file to download
Supply chain
Supplier assurance, without the site visit.
Suppliers keep their footage and data. You see only the signed scores they agree to share, as their operation runs.
Invite
Name the supplier, the packs you need and the detail: pack scores, or clause statuses too.
They consent
Per pack and per buyer. They can withdraw it at any time, and both sides see the change.
You see signed scores
A live scorecard per supplier, each number with the hash of the snapshot it came from.
No video, images or personal data cross between companies.
Cost and time
What it costs, and what it saves.
Audits cost so much because someone has to look, write it down and be believed. The cameras look, FloFusion writes it down, and the signature makes it believable.
| What changes | The audit cycle | Continuous compliance |
|---|---|---|
| Cadence | A yearly or quarterly audit; unknown in between | Scores update continuously, all year |
| Evidence | Sampled walkthroughs, self-reported checklists | Every camera, every shift: detections and camera health |
| Audit preparation | Weeks of binders and spreadsheets | A link to a signed snapshot with the clause evidence |
| Suppliers | Site visits, travel and questionnaires | Signed scorecards shared by consent, no footage |
| Tamper resistance | Editable PDFs and screenshots | SHA-256 hash, Ed25519 signature, chained ledger |
| Consistency | Each auditor reads the standard differently | One versioned pack scores every site the same way |
Comply is added per site, priced by the size of the site. How pricing works.
What is at stake
Every rule by country, in the regulation navigatorEuropean Union
EU AI Act
€35M or 7%
of global turnover at most. High-risk duties apply from December 2027.
European Union
GDPR
Actively enforced. Video of identifiable people is personal data.
United Kingdom
UK GDPR and the ICO
Monitoring staff on camera needs a DPIA, clear notice and the least intrusive means.
United States
OSH Act
Employers must keep the workplace free of recognised hazards.
Questions
What auditors, buyers and suppliers ask.
How scores are worked out, what leaves a site, and how anyone can check a number without trusting us.
How is a compliance score worked out?
A regulation pack is a set of clauses, each mapped to detection rules and camera health. FloFusion scores every clause from 0 to 100 from measured events, such as the share of alerts closed within 24 hours, then weights the clauses into a pack score. Scores update as new events arrive; nothing is self-reported.
Link to this questionWhere does the score come from?
From the other three steps. FloFrame detects on site, FloFusion measures what happened, the packs score it, and the clause that costs you most becomes the next thing to improve.
Link to this questionWhat if a clause has no camera evidence?
It shows as an evidence gap, never a silent pass. Each pack shows its evidence coverage, and clauses cameras cannot see, such as a yearly plan review, are covered by documents or attestations.
Link to this questionHow is the evidence behind an alert protected?
FloFrame seals each alert and its evidence on the device, with the device’s own key, the moment it happens. FloFusion checks the seal when it arrives, so a changed frame or clip shows.
Link to this questionDo people still review alerts?
Yes. A vision-language model checks each alert first, then your team marks it valid, false positive, invalid or repeated. The decision stays with the alert in the record.
Link to this questionHow do we prove a score was not changed later?
Every score is kept as a signed snapshot: a SHA-256 hash, an Ed25519 signature with a published key, and a link to the previous snapshot’s hash. Anyone can verify all three without trusting us.
Link to this questionWhat does an auditor see?
A time-limited link to the signed scores and the clause record, and every view is logged. Auditor links carry no video or images.
Link to this questionDoes any of a supplier’s footage reach us?
No. Suppliers keep video, images and personal data on their own sites. With their consent, per pack and per buyer, you see their signed scores and, if they allow it, clause statuses; they can withdraw consent at any time.
Link to this questionWhich regulations do packs cover?
Packs today include ISO 45001, ISO 13485, occupancy and queue limits, UK GDPR worker monitoring, FDA QMSR (21 CFR Part 820), and labour, worker-safety and data-protection packs for the UAE, Saudi Arabia and Indonesia. The Indonesia Halal & Food Safety pack is a draft, pending auditor validation. Packs are versioned, and new ones follow the law.
Link to this questionDo you still provide conformity documentation?
Yes. Documentation for the EU AI Act, GDPR and the data-protection laws where you operate, DPIA-ready processing records and a data-residency statement come with every deployment. The packs add the live score on top.
Link to this questionSee it on your own cameras.
A pilot on the cameras you already own, with success criteria agreed up front.
- From Cameras to Cognition, 14 pages.Read the whitepaper