Vality/ Solutions/ Investigation & evidence <- Crowd & public space Retail loss prevention ->

S·06 · INVESTIGATION & EVIDENCE

Search by behavior, not by timestamp

Compressing hours or weeks of manual footage review into minutes — locating the relevant events across large volumes of video and data, and assembling clear, structured, defensible findings ready for operational or legal use.

Weeks of footage compressed to minutes, and assembled into a case file 01 — THE ARCHIVE WEEKS OF FOOTAGE · MANY SITES · MANY CAMERAS BEHAVIORAL QUERY — NOT A TIMESTAMP RANGE VIDEO CORRELATED WITH POS, TRANSACTION + OPERATIONAL DATA UP TO 20× FASTER VALITY CONTROL-SYSTEM FIGURE MINUTES — RELEVANT EVENTS LOCATED 02 — EVIDENCE ASSEMBLY STRUCTURED · CORRELATED · DEFENSIBLE E·01 VIDEO SEGMENT E·02 POS RECORD E·03 ACCESS LOG E·04 TIMELINE E·05 TRANSCRIPT CASE FILE SEQUENCE · EVIDENCE · CONTEXT READY FOR OPERATIONAL OR LEGAL USE
FIG 01 — 20× FIGURE STATED BY VALITY FOR ITS CONTROL SYSTEM · PROPORTIONS SHOWN FOR EXPLANATION ILLUSTRATIVE · NOT MEASURED DATA
01 / 05

The evidence exists. Finding it is the problem.

Almost every organization with cameras already holds the evidence it needs. What it doesn't have is a way to reach it. The standard method has barely changed: an approximate time, a list of cameras, a scrub bar, and an analyst who watches. Recall is vague, clocks drift between systems, the incident turns out to sit just outside the window you were given, and the half-minute that matters is somewhere in a fortnight of recordings from every camera on the site. Reviewers work in shifts. Nearly everything they watch is nothing.

The real cost of that is not only hours. Investigations that are expensive get rationed. A case has to be worth a week of review before anyone will open it, so the small and medium losses are never examined at all. Patterns that run across sites are never found, because nobody can afford to look for them. Enforcement quietly narrows down to whatever happens to be cheap to prove, and everyone in the building learns where that line sits.

Vality changes the unit of search. Because the platform understands behavior rather than pixels, the query stops being "show me two till six on camera six" and becomes "show me every instance of this behavior, across these sites, in this period" — a void completed after the customer walked away, a door opened outside its window, an item that left without a scan, a person returning to the same station again and again. Video is correlated with sales, POS, access and operational records, so a signal that means nothing on its own becomes decisive in combination.

And what comes out is not a folder of clips. It is a structured case: the sequence reconstructed step by step, each step evidenced, with the correlated records, the timing, the actors and the transcription attached — in a form that survives an operational review, a disciplinary process or a court. Vality states this as a control-system figure: events investigated up to 20× faster than conventional tools, and roughly 10× the control output achievable with standard tooling.

02 / 05

What manual review actually costs

The effort is measurable, and it has been measured. Footage is present in a minority of cases, it takes longer to search than it takes to watch, and the queue behind it does not move.

45 → 29%

CCTV was available to investigators in 45% of 251,195 crimes recorded on the British railway network, and judged useful in 29% — two thirds of the cases where footage existed at all

Footage available in 45% of cases, useful in 29% AVAILABLE 45% USEFUL 29% 251,195 RECORDED CRIMES · 2011–2015

SRC · ASHBY — EUR. JOURNAL ON CRIMINAL POLICY & RESEARCH, 2017

0MIN

average time trained police reviewers needed to search an 18-minute 21-second video for target faces — roughly three times its running time, in a controlled test

Searching the footage took about three times its duration FOOTAGE 18:21 REVIEW TIME 58.6 MIN · ≈3× REAL TIME

SRC · DAVIS ET AL. — APPLIED COGNITIVE PSYCHOLOGY, 2018

0DEVICES

awaiting digital forensic analysis in England and Wales — a backlog that, in Parliament's own words, has not shrunk in years

A digital evidence backlog that has not shrunk SUCCESSIVE YEARS · NO REDUCTION

SRC · HOUSE OF LORDS SCI. & TECH. COMMITTEE, HL 256, 2026

0HOURS

of footage searched after the 2011 London riots, from which 4,000 suspects were identified

200,000 hours reviewed by hand ONE OPERATION · 4,000 SUSPECTS IDENTIFIED

SRC · BBC NEWS, CITED IN DAVIS ET AL., 2018

None of this is a failure of effort. It is what happens when the only way to find an event is for a person to watch until they see it.

03 / 05

What the platform reads across the archive

An investigation is a question. The platform makes behavior itself the searchable field, and answers across every camera and every connected system in one pass.

C·01 · QUERY

Ask for a behavior

Search the archive by what happened rather than when it happened: an action, a sequence, an interaction, a relationship between two actors — resolved across sites and cameras together.

C·02 · CORRELATION

Every data point, connected

Sales data, POS and self-checkout events, access records and camera footage in one investigation system, so timings that mean nothing separately line up into a sequence that means everything.

C·03 · OUTPUT

A case, not a clip folder

The event reconstructed step by step, each step evidenced by the segment that shows it, with transcription and context — structured for operational, disciplinary or legal use.

What it reads

  • Behavior as a search key — actions, sequences and interactions across the whole archive
  • Video aligned with POS, transaction, access and operational records on one timeline
  • The same actor across cameras, across sites, and across separate visits
  • Full event context: what came before and after the moment somebody flagged
  • Repetition — the same behavior recurring at a station, on a shift, or at a site
  • Cross-site patterns that no single reviewer would ever have thought to compare
  • The absence of an expected action, which is often the more telling signal

What it flags

  • Transactions with no matching physical action, and actions with no matching transaction
  • Voids, refunds, discounts and no-sales that don't fit what the camera shows
  • The same actor recurring across events that were logged as unrelated
  • Repeat behavior at a till, door or dock that no single review would have connected
  • The missing step in an otherwise ordinary-looking sequence
  • Timing that only becomes suspicious once two systems are laid over each other
  • Cases where the evidence does not support the suspicion — closed as quickly and as clearly as the ones where it does
04 / 05

What it does to the caseload

The figures below are Vality's own, stated for the Vality control system against conventional tools. The structural change behind them is simpler: when investigation stops being expensive, it stops being rationed.

Up to 20×

Events investigated up to twenty times faster than with conventional tools, revealing dimensions of security and operational insight that were previously invisible.

VALITY CONTROL-SYSTEM FIGURE

Roughly 10×

Loss-prevention and operations output multiplied by around ten times the control activity achievable using standard tools.

VALITY CONTROL-SYSTEM FIGURE

Minutes

Hours or weeks of manual review compressed into minutes — so cases that were never worth opening become routine to examine.

TIME TO FINDING

Ask the archive a real question

Give us a behavior you would like to find and a period to find it in. We will show you the search, the correlation and the case file that comes out of the other end.

ACTION · 001 REQUEST A DEMO MAILTO : CONTACT@VALITY.CO.IL

OR — TALK TO OUR TEAM ABOUT A TAILORED DEPLOYMENT.