Secure, repeatable branch technology

Every branch built the same way, so any tech can work on any of them.

Branch networks, cameras, controlled areas, teller and workstation connectivity, customer media, and drive-through systems, built the same way at every location.

Common buyersCorporate security · Branch technology · Facilities · Construction and operations
Common triggersBranch opening or consolidation · Camera and access refresh · Network standardization · Customer-experience upgrade
A complete example project

Keep branch technology assets and moves accountable.

A separate IT asset and service log for one office. Track device custody, bench repairs and approved moves without importing customer or financial records.

Stonebrook Advisory is a fictional business. This is an illustrative project and working screen concept, not a completed client installation.
The setting1 advisory office · 25 staff · 150 IT assets
Planning schedule4–6 weeks after scope and equipment readiness
What is deliveredInstalled devices · working pilot app · training · recovery test
01 / What your team sees

A working view of the end result.

Try the sample action. Watch the record, summary and activity log change together.

Stonebrook AdvisoryTeam operations
Sample data
Manager workspace

Work that needs attention

Monday · 10:42 AM
Open tasks3In this demonstration
Completed0This sample session
Assigned owners3Staff / lead / manager
Work / locationStatus
Dock D-019 · returnedIT staging
Assigned
Monitor M-042 · move approvalAsset storage
Assigned
Phone P-012 · inspectIT staging
Assigned

Interactive concept. These fictional records stay in this page; no business system is connected.

How the system works

01
Register

Label and import office IT assets.

02
Assign

Record custody against approved staff reference IDs.

03
Move

Require a reviewer for reassignment or disposal.

04
Audit

Export the dated custody and repair log.

The connection included here

150 asset records and a staff-reference CSV; isolated from financial applications.

02 / Where everything goes

From the network closet to the point of work.

Select a device group to see its photograph, quantity and job. The room plan is conceptual; a site survey confirms routes, mounting, power and wireless coverage.

Proposed device placementDiagram · not to scale

01IT staging

02Asset storage

03IT coordinator desk

04Secure IT closet

Wired path: ISP → gateway → switch → server, wired consoles, printers and access points. Handhelds use staff Wi-Fi. Guest traffic is separated. Each numbered group matches the equipment schedule below.

03 / The complete technology stack

The hardware is only one part of the system.

01

Staff screens

Zebra handhelds capture barcodes and staff actions. The Elo manager workstation shows exceptions, history and the agreed reports.

02

Business application

A custom task-and-asset pilot with three roles, validated records, timestamped actions and the described import/export. You approve the screens and rules before development.

03

Server and data

The Lenovo server runs the application and PostgreSQL database locally. It is the authoritative record; client screens request changes through the application API rather than editing the database directly.

04

Network and devices

The gateway and managed switch connect fixed equipment. Access points connect mobile staff devices. Device profiles, labels, port records and separate guest access make the setup supportable.

05

Backup and recovery

Encrypted off-site backups, database transaction-log archiving and a witnessed restore exercise. Example targets: no more than one hour of committed data loss and restoration within one business day when replacement compute is available; these are tested targets, not an SLA.

06

Ownership and support

Customer-owned business data, administrator handover, CSV export, configuration records and an operating guide. Custom source-code ownership/license terms and support responsibilities are written into the agreement.

Explore the proposed software and recovery design

Application: React and TypeScript browser interface, Node.js API, PostgreSQL database, and a Linux server distribution supported by the final Lenovo configuration. Zebra DataWedge sends scanned barcode input to the focused application field. The server validates every transaction and records its unique identifier to prevent duplicate posting.

Deployment: Containerized application services, HTTPS, named staff accounts, manager approval for sensitive changes and MFA for administrator access. A customer-controlled management VPN limits remote administration. No database port is exposed to the public internet.

Recovery: PostgreSQL base backups and archived transaction logs go to an encrypted customer-owned object-storage account. Daily backup checks and a sample restore prove the selected retention and recovery target. A nightly export alone would not meet the one-hour target.

When a connection fails: The local workflow can continue through an ISP outage while the server, LAN and required local services remain available. Off-site backup transfer pauses. A disconnected device shows an unconfirmed action and cannot claim it saved; staff use the documented manual fallback and reconcile before retrying. A failed server stops the application until recovery. This single-server pilot has no automatic failover.

Licensing: The proposed React/Node/PostgreSQL application does not assume a paid per-user application subscription. Commercial OS support, the selected device-management service and any third-party software/API licenses are qualified separately; only the allowances listed below are in this budget.

04 / What this example costs

See the equipment. See the hours. See the total.

USD planning example prepared September 2026. Catalog-priced items use Glass Tech’s customer planning prices. Configuration-dependent items use explicit customer budget allowances; they are not manufacturer quotes or orderable offers.

Lenovo ThinkSystem ST50 V301 / 1 unit

Lenovo ThinkSystem ST50 V3

Example configuration allowance: 32 GB ECC memory, two enterprise SSDs of at least 960 GB, compatible storage protection and three-year hardware support. Final CPU, drive/controller combination and supported Linux OS are qualified before ordering. Tower stands in the secured room, outside the shallow network rack.

1 × Secure IT closet
$3,8001 × $3,800Example allowance
Zebra TC22 Wi-Fi handheld02 / 2 units

Zebra TC22 Wi-Fi handheld

TC22 from the TC22/TC27 family; standard-range barcode scanning, Android application profile, battery and protective boot allowance. Each device is assigned to a staff role. Indoor ambient use; no cellular service or freezer rating assumed.

1 × IT staging1 × Asset storage
$2,0002 × $1,000Example allowance
Zebra ZD421 label printer04 / 1 unit

Zebra ZD421 label printer

Direct-thermal, 203 dpi Ethernet configuration allowance, with an initial indoor paper-label roll and tested asset/location template. Durable, refrigerated or chemical-resistant labels require separate media qualification.

1 × IT staging
$8501 × $850Example allowance
EloPOS manager touch workstation05 / 1 unit

EloPOS manager touch workstation

15.6-inch touch workstation with a current supported Windows configuration and manufacturer power supply. Exact orderable SKU and application support are confirmed before purchase. Photograph represents the family; no obsolete OS configuration is assumed.

1 × IT coordinator desk
$2,4001 × $2,400Example allowance
UniFi Cloud Gateway Max06 / 1 unit

UniFi Cloud Gateway Max

ISP handoff, firewall, network management and staff/guest separation. Only the approved management path can reach the application; guest devices cannot.

1 × Secure IT closet
$4401 × $440Catalog planning price
UniFi 24-port PoE switch07 / 1 unit

UniFi 24-port PoE switch

Wired connections for the listed endpoints and 2 access points. AP planning load is 42 W against the switch’s 95 W PoE budget; final port and power schedule is checked before install. This example uses 1 Gb switching.

1 × Secure IT closet
$5501 × $550Catalog planning price
UniFi U7 Pro access point08 / 2 units

UniFi U7 Pro access point

Ceiling-mounted access points with wired uplinks. These are proposed locations, not an RF coverage prediction. Survey, roaming and actual device signal tests determine final placement.

1 × IT staging1 × Asset storage
$5602 × $280Catalog planning price
APC BX1000M battery backup09 / 1 unit

APC BX1000M battery backup

Protects the server and core network long enough for the measured shutdown plan. Load, plug count, signaling compatibility and runtime are tested; no all-day operation or automatic failover is promised.

1 × Secure IT closet
$3101 × $310Catalog planning price
Eaton Tripp Lite 6U network enclosure10 / 1 unit

Eaton Tripp Lite 6U network enclosure

Wall-mounted network enclosure for switch, patching and accessories. The tower server and tower UPS stand separately in the same secured room. Mounting substrate, device depth, airflow and cable bend space require field verification.

1 × Secure IT closet
$3501 × $350Catalog planning price
trueCABLE 24-port patch panel11 / 1 unit

trueCABLE 24-port patch panel

Labeled modular patch panel. Matching jacks, patch cables and supports are included in the materials allowance below.

1 × Secure IT closet
$901 × $90Catalog planning price

Materials, labor and delivery

6 complete Cat6 links — materials

Customer budget allowance for cable, two jacks per link, patch cables, faceplates, labeling, pathway supports and ordinary firestop. Average 100 ft run, accessible indoor routes, maximum permanent-link length 90 m. Labor is listed separately.

$660
Mounts, network shelf, power distribution and consumables

Small network shelf, approved power distribution, starter label stock and ancillary hardware. Exact load, rack compatibility and mounting details follow the site survey.

$400
Installation and cable testing

20 technician-hours × $125/hr. Mounting, cable runs, termination, labels and link test records. Person-hours, not elapsed days.

$2,500
Server, network and device commissioning

16 lead-technician hours × $155/hr. OS staging, device profiles, network separation, backup setup and cutover checks.

$2,480
Custom application, import and acceptance work

112 development hours × $125/hr. One scoped pilot application, three permission roles, the described CSV interface, audit history, dashboard, deployment and acceptance fixes. This is a defined first release.

$14,000
Staff training and handover

8 technician-hours × $125/hr. Two staff sessions, an administrator session, operating notes and a witnessed recovery exercise.

$1,000
Planning and coordination

8 coordination hours × $85/hr. Confirm scope, schedule, access, device assignments and the handover record.

$680
Local mobilization and delivery

Illustrative allowance for local transport and delivery, normal weekday work and no overnight stay. The actual job address and shipment plan set the final travel charge.

$600

Ongoing budget · $355/month before tax

Encrypted off-site backup storage$75/mo

Illustrative monthly allowance for up to 250 GB retained backup data. Provider, retention and actual storage/transfer charges are confirmed in the agreement.

Monitoring, updates and recovery review$250/mo

Illustrative service allowance: scheduled OS/application maintenance, backup checks and up to one hour of remote support monthly during business hours. No 24/7 response or additional development included.

Handheld management and support licensing$30/mo

2 devices × $15/month planning allowance. Management platform, OS support term and license entitlements are selected and quoted before enrollment.

Already supplied by the customer: internet service, usable power circuits, a secure ventilated IT room and any existing business-system subscriptions. Their charges are not included in the monthly total. Expanded support, third-party connector fees and additional development require a separate scope.

The finish line

What you can test before handover.

  • Complete the sample workflow on the installed devices and reconcile the dashboard to its source records.
  • Import the agreed sample file, reject invalid rows and verify role permissions and the activity log.
  • Test every installed cable link and the handheld route; confirm guest devices cannot reach private records.
  • Disconnect a device, reconcile the unconfirmed action and prove it cannot post twice.
  • Restore the application and sample records from backup, record the measured recovery time and train the administrator.
Scope and next steps

Make this example your own.

Core banking, trading, client records, vault access, regulated retention and compliance attestation are excluded.

The schedule assumes approved screen designs, clean data, available hardware, accessible routes and normal weekday access. Electrical work, permits, lifts, demolition, unusual construction and additional locations are separately scoped.

To price your implementation, bring a floor plan, staff/device counts, a sample export and your priorities. Glass Tech confirms the bill of materials, software rules, acceptance checks and fixed scope before installation.

The problems we design around

Start with what creates delay, risk, and repeat work.

01

Security context must be deliberate

Customer areas, teller lines, vault-adjacent spaces, offices, ATM or drive-through zones, and back-of-house entries have different purposes.

02

Branch consistency drifts

Building history and local exceptions create support, training, and replacement problems across the portfolio.

03

Changes happen during regulated operations

Access, records, change approval, vendor coordination, and customer-impact windows must be explicit.

Systems that fit the operation

One environment. Connected layers.

Every layer is scoped with its purpose, dependencies, administrator, acceptance evidence, and change boundary. Select systems can stand alone; integrated programs share one site plan and closeout.

01

Network core and structured cabling

A documented physical layer for workstations, phones, operational endpoints, cameras, controls, and future expansion.

  • MDF and IDF planning
  • Cat6 or Cat6A pathways and drops
  • Racks, patching, UPS, labeling, and test results
  • Switching, routing, and deployment configuration
Pricing pathPublished network packages and installed per-drop options are shown below. Larger environments are built in the project estimator.
Explore this capability
02

Video security and operational visibility

Camera placement, recording, viewing, and retention planned around the decisions the footage must support.

  • Indoor, outdoor, overview, detail, and specialty views
  • Local, cloud-managed, and open-platform options
  • Retention and viewing-station planning
  • Placement schedule, naming, and administrator handoff
Pricing pathLocal and cloud-managed camera packages plus installed per-camera options are shown below.
Explore this capability
03

Access control and controlled entry

Credentialed doors, gates, restricted areas, and entry records tied to the way the facility actually operates.

  • Door and hardware review
  • Local or cloud-managed credentials
  • Schedules, groups, and administrator setup
  • Intercom and camera coordination where required
Pricing pathPublished one-door and four-door packages are shown below; door condition and life-safety interfaces are verified before agreement.
Explore this capability
04

Visitor and contractor entry workflow

A defined path from arrival through identity, host notification, approved access, and departure.

  • Lobby, kiosk, intercom, and badge options
  • Host notifications and approval rules
  • Temporary credential and escort workflows
  • Entry records and retention boundary
Pricing pathDesign-to-quote based on locations, identity workflow, badge hardware, software licensing, and access-control integration.
Explore this capability
05

Media displays and digital signage

Customer-facing menus, promotions, wayfinding, dashboards, room displays, and video walls built as an operable system rather than a loose screen installation.

  • Display, mount, player, power, and data plan
  • Content-management and input-source options
  • Single-screen, menu-board, dashboard, and video-wall layouts
  • Remote administration, training, and content handoff
Pricing pathDesign-to-quote: display class, size, mounting, player, content platform, licensing, and electrical readiness determine the installed price.
Explore this capability
06

Parking, perimeter, and vehicle entry

Coverage and control for parking areas, gates, loading zones, vehicle queues, and exterior approaches.

  • Outdoor network and pathway plan
  • Gate, intercom, credential, and vehicle-view options
  • Overview and detail camera placement
  • Lighting, mounting, weather, and retention coordination
Pricing pathDesign-to-quote from civil pathway, power, mounting, gate hardware, camera purpose, coverage area, and trenching requirements.
Explore this capability
Product options and published pricing

Concrete starting points—not a mystery quote.

These are current Glass Tech catalog planning prices for standard scope. They show the hardware class, included installation, and recurring platform cost when applicable. Site conditions, pathways, quantities, schedule, taxes, licensing term, and verified scope can change the fixed agreement.

ProfessionalUbiquiti UniFi

Office Pro

A proper head-end, clean rack, and wall-to-wall Wi-Fi.

Up to ~4,000 sq ft · ~30 devices

Planning price · starting at$7,250
  • Ubiquiti UniFi Cloud Gateway MaxUniFi Cloud Gateway Max1 included
  • Ubiquiti UniFi Switch Lite 16 PoEUniFi Lite 16 PoE switch1 included
  • Ubiquiti UniFi U7 Pro access point2× UniFi U7 Pro access points2 included
  • trueCABLE Cat6 CMR riser cable8× Cat6 data drops8 included
  • Eaton Tripp Lite SmartRack SRW6U wall-mount rack, 6U6U wall-mount rack + 24-port patch panel1 scoped set
View complete package
ProfessionalVerkada

Cloud Watch 8

Indoor and outdoor coverage on one cloud platform.

Up to 8 cameras · ~10,000 sq ft

Planning price · starting at$23,700+ $176/mo
  • Verkada CD42-512E dome camera5× Verkada CD42-512E dome camera5 included
  • Verkada CB52-256E outdoor bullet camera (dealer-sourced image; superseded by CB53-E on verkada.com)3× Verkada CB52-256E bullet camera3 included
  • Verkada CD42-512E dome camera8× Verkada Command cloud license8 included
  • trueCABLE Cat6 CMR riser cable8× Cat6 data drops8 included
  • trueCABLE Cat6 toolless keystone jackMounting, patch cables & finish hardware1 scoped set
View complete package
EnterpriseVerkada

Vault 4

Enterprise access control, unified with your Verkada cameras.

4 doors

Planning price · starting at$9,600+ $100/mo
  • Verkada AC42 4-door access controller (AC41 is end-of-sale; AC42 is the current model)Verkada AC42 controller1 included
  • Verkada AD34 door reader (AD33 is end-of-sale; AD34 is the current model)4× Verkada AD34 reader4 included
  • HES 9600 Series electric door strike4× electric strike4 included
  • trueCABLE Cat6 CMR riser cable4× Cat6 data drops4 included
  • Verkada AC42 4-door access controller (AC41 is end-of-sale; AC42 is the current model)4× Verkada Access cloud license4 included
View complete package
Installed option pricing

Build the site one requirement at a time.

Unit prices are planning references attached to the current catalog. Quantities and compatibility are validated before agreement.

Extra Cat6 dropAdditional wired location, terminated & certified$250
4K zoom cameraUniFi G5 Pro with 3× optical zoom$1,250
Extra 8TB storageOne compatible 8TB surveillance drive, installed and retention-checked; data migration is separate$600
Access-controlled doorUniFi Access reader, hub & strike, installed$2,250
Credentials, 25-packBadges or fobs, programmed and ready to hand out$300
Rackmount battery backupPure sine wave UPS for the head-end$750
Integrated commercial project floor$3,950

Catalog items below that amount remain useful planning references. Targeted industry programs are built around the complete operational outcome, not an isolated device. Custom media displays, inventory, ordering, automation, AV, fiber, and OT systems are quoted after their real dependencies are mapped.

That floor is a component minimum, not the whole story — a project’s planning price is derived from its full cost basis (equipment, labor, travel, contingency) with a protected margin, so it will normally run above hours × rate, and travel is priced through that basis rather than the per-mile line alone.

Price the facility
What to expect

A controlled path from operating problem to usable handoff.

01

Readiness

Confirm the organization, site, current condition, desired outcome, stakeholders, timing, and decision path.

02

Field and design

Validate pathways, devices, counts, dependencies, work windows, customer responsibilities, and acceptance criteria.

03

Agreement and staging

Fix the scope, products, exclusions, schedule, change boundary, payment milestones, and material plan.

04

Deployment

Protect live operations, coordinate access, communicate milestones, test work, and preserve rollback where required.

05

Closeout

Deliver labels, results, photos, as-builts, credentials through an approved secure path, training, warranty terms, and the next owner.

The operating outcome

What should be different after the work.

  1. 01A repeatable branch standard
  2. 02Purpose-driven camera and access design
  3. 03Controlled change and cutover records
  4. 04Consistent documentation across locations
Your financial services environment

Start with the problem. Leave with a clear system.

Tell us the site, the workflow, what is failing now, and the outcome that matters. We will turn it into a planning path with visible assumptions and product options.