Buying and contractsOperating guide

Plan a monitoring contract exit

Plan the exit before the contract ends: confirm notice, equipment ownership, record export, account removal and the exact coverage handover time. Avoid a gap between the outgoing provider stopping and the incoming service accepting responsibility.

Two document folders, an external drive and a sealed envelope on a slate desk
Follow the information beyond the original recorder.

The easiest time to agree an orderly exit is before anyone needs one. Find out what stays yours, what stops working and what must be retrieved before access ends.

The idea in view · Planning diagram

Commercial closure and technical closure differ

  1. Notice and dates
  2. Duty handover
  3. Record ownership
  4. Transfer checked
  5. Access removed
  6. Remaining service tested
Closing the contract does not itself transfer records, revoke access or prove the replacement duty works.

Find dependencies early

Identify rented gateways, SIMs, licenses and administrator accounts. Ask which devices continue recording after termination. Map who can renew or cancel each dependency; the organization paying for the camera may not own the cloud account.

Preserve required records

Agree an authorized export of incident records and relevant clips before access expires. Verify that the receiving team can open the files. Apply the organization’s retention and preservation decisions rather than copying all footage indefinitely.

Close access deliberately

Coordinate credential changes with IT and the incoming service. Remove outgoing provider accounts and integrations once the handover is verified. Record a final coverage check, who holds the new fault contacts and any remaining billing dispute separately.

Build the handover around an exact cutover

Write a timeline showing the final outgoing duty, the first accepted incoming duty and who owns the interval between them. Check time zones and notice deadlines separately. Ask what happens to local recording when a cloud license or managed connection ends. Test the answer through authorized support before you rely on it.

After cutover, reconcile access as well as equipment. A returned gateway does not remove cloud users, service accounts or integration credentials. Have IT confirm each path has been revoked or reassigned. Keep unresolved billing questions in their own record so a dispute does not obscure whether the site currently has a working review and response arrangement.

Plan the exit while responsibilities are still clear

A monitoring exit plan should describe how the service ends without leaving access, records or duties in an uncertain state. Start with the contract's notice requirements, proposed last active shift, responsible decision makers and the locations affected. Separate the commercial end date from the technical removal of access and the operational handover. They may need different actions and owners even when they occur on the same day.

Ask which systems and accounts the outgoing provider uses. Include camera or recorder permissions, remote connectivity, event integrations, shared inboxes and any response-partner arrangements. Do not put credentials in the exit sheet. Record the approved account or role alias and the administrator responsible for removal. A provider saying it has stopped monitoring does not itself prove that every access path has been removed or that a new party has accepted the duty.

Decide what records must remain available

List recordings, incident records, configuration notes, view registers, accepted operating instructions and unresolved work that the business needs to retain or transfer. Identify the system of record, the receiving owner, the authorized format and the check that demonstrates a usable transfer. A bulk download that cannot be opened is not a completed handover. Access to a proprietary player or export tool may need to be resolved before the old service ends.

Retention and transfer must follow the organization's actual obligations and approved data-handling arrangements. Do not keep everything indefinitely merely because a contract is ending, or delete records that are subject to an approved incident hold. Where responsibility is unclear, resolve it with the relevant owner before the cutover. Keep a record of the decision and its authority without copying sensitive footage or personal details into a general project log.

Reference context: GOV.UK: Recovery and Acquisition of Video Evidence v3.0 (2022)

A site drawing, notebook and camera on a facilities planning desk
A good monitoring plan starts with the work the site needs done.

Make the cutover an operating event

Name who owns each monitored duty immediately before and after the cutover. If a replacement service is involved, verify its accepted views, hours, event delivery and response contacts. Do not assume the new provider's access means the previous scope has been accepted. If there is a gap, the business should understand it and authorize any temporary arrangement before the outgoing duty ends.

Schedule removal of obsolete accounts and integrations with the system owner, then verify the required remaining service. Removing a shared route can affect more than the departing provider. Conversely, keeping a shared account active because another task still uses it may preserve access you intended to revoke. Use named roles and explicit checks rather than a blanket instruction to disconnect everything. Record what was removed, what remains and why.

A fictional exit involving a shared recorder

Imagine a tenant ends a monitoring agreement but shares a recorder and network with a landlord's separately operated cameras. A rushed instruction to remove all remote access could interrupt the landlord's legitimate service. Leaving the outgoing provider's shared administrator account active would create a different problem. The exit owner needs a view and permission map before choosing the change.

The team confirms the tenant's required incident exports, verifies playback, establishes the landlord's separate authorized access and arranges removal of the outgoing provider's role. The final check includes event delivery for the remaining service and confirmation that the old role no longer works through the relevant paths. The checklist records these results and the last accepted monitoring period. It does not contain a password or claim that an untested integration is safely retired.

Make the call

Which dependency could interrupt the handover?

SituationDecision to makeWhat to ask for
The provider owns a gateway or SIMWhether replacement is neededOwnership and return dates
The old account contains incident recordsWhich records must be preservedAn authorized export and playback check
The new provider is not accepted yetHow the coverage gap will be handledA written transition and fallback plan

Before you move on

  1. Check notice and ownership against signed terms.
  2. Test a permitted export before the termination date.
  3. Confirm coverage acceptance and remove old access with IT.
Take this to your teamCSV / No signup

A worksheet you can actually use

Start with the blank sheet. Add one row per item, assign an owner and mark anything unresolved as pending. The completed example shows the level of detail to aim for.

Keep completed security plans private. Use aliases; keep passwords, access codes, personal contacts and footage links in your approved systems.

How to fill the worksheet

Dependency
List a system, access route, record category or operating duty that needs a specific transition decision at exit.
Owner
Identify the role authorized to implement or approve this action, rather than assigning an obligation to an unconfirmed contact.
Exit requirement
Describe the required transfer, removal or handover result and distinguish it from the commercial end date.
Deadline
Use the relevant date, time and zone where sequence matters. Coordinate notice, transfer and access removal deliberately.
Verification
Record the evidence of usable transfer or revoked access, and check that the intended remaining service still functions.

A worked example

Fictional warehouse: the outgoing supplier owns the gateway. The site schedules its replacement before contract expiry and verifies local recording during the change.

Illustrative entries, not an actual customer record
DependencyOwnerExit requirementDeadlineVerification
GatewayOutgoing supplierReplacement before returnEnter dateAccepted video test

Questions readers bring to this task

What else should you know?

Can we change providers without replacing cameras?

Possibly. The incoming provider must assess the exact devices, firmware, access architecture and required functions. An interoperable video stream may still leave event delivery, audio or recorder access unresolved. Confirm the accepted replacement scope before ending the old one.

Link to this answer ↗

Who removes monitoring access at the end of a contract?

The administrator or system owner authorized to manage the relevant system should perform or approve removal. The departing provider should identify the access it used and confirm its own actions. Keep an independent check of the remaining permissions rather than relying solely on an informal statement that the account is no longer needed.

Link to this answer ↗

Can the old and new services overlap?

An agreed overlap may help verify the handover, but the parties need to define who acts on events and prevent conflicting instructions. Confirm the permitted access, data handling and response ownership for the overlap period. Two reviewing teams do not automatically mean a clearer or better response.

Link to this answer ↗

What should remain after the exit is complete?

Retain the approved closure record, relevant contract and retention decisions, usable records that the business is entitled and required to hold, and unresolved actions transferred to their new owners. Record any remaining access explicitly. A closed invoice is not a substitute for operational and technical closure.

Link to this answer ↗

Notes & sources

Contract rights and record retention vary. Obtain advice on disputed termination terms; do not disable a live service without an agreed fallback.

Reviewed October 27, 2026. The examples and worksheets are planning aids, not customer results or a statement of contracted service.

  1. Axis: device hardening guide

    Manufacturer guidance on accounts, access, network boundaries and time settings; use your equipment vendor’s instructions.

  2. ONVIF: conformance process

    Conformance records are tied to specific firmware or software versions.

  3. GOV.UK: Recovery and Acquisition of Video Evidence v3.0 (2022)

    Native retrieval, playback and source context. A formal forensic procedure requires appropriate expertise.