The buyer’s rep is going to ask about the DVR. Put a 90 day indexed incident log in the OM before they do.

Because the part of the asset buyer due diligence wants the most, and cannot get from your T-12 or rent roll, is operational security data. Crime, loitering, package theft, parking-lot incidents. Today the buyer asks for the raw DVR and discovers the log is unreadable, the password is lost, retention is 7 days not 30, and remote login does not work. That discovery lands in their risk narrative and shows up as a price concession at the LOI table. A pre-listing HDMI tap lets you surface the same data yourself, in a clean 9-field exportable shape, so the buyer is evaluating your packaged disclosure instead of inventing their own risk story.

The shortest deployment we have seen generate a usable baseline is 72 hours, but we recommend 30 to 90 days. A 30 day tap gives you roughly 7,000 indexed events on an average 16 camera property, which is enough to chart incident density by tile.label, by hour-of-day, and by event_class. A 90 day tap covers a full operating month plus seasonality and is the shape most brokers now want to drop into the OM data room. Once the unit is plugged in, the data accrues whether or not the property is on the market, so taps started 6 to 12 months out cost nothing extra and produce a richer graph at listing time.

A one page summary, a CSV, a PDF, and a thumbnail gallery. The summary has four numbers: indexed events per 1000 resident-days, events-per-tile ranked, events-by-hour distribution, and events-by-class distribution. The CSV has one row per event with the nine field payload (tile.label, tile.index, tile.coords, property, layout_id, overlay_mask, event_class, iso8601_ts, latency_ms). The PDF is the summary with chart panels suitable for attaching to the OM. The thumbnail gallery is 480x270 JPEGs with filter bar so the buyer's rep can spot-check any event class or tile without asking the seller for DVR access.

Either works. The public OM usually summarizes at the property level (one paragraph plus a single chart), and the data room holds the CSV, the PDF, and the thumbnail browser. Brokers we have seen list with the 9 field export tend to put a one-line disclosure in the OM (Section: Operational Data, sub-bullet: Indexed Incident Log, 90 days, exportable) and route serious buyers to the data room for the full pull. The value is the same either way: buyer sees a measured incident rate, not a speculative one.

Three reasons. First, most sellers cannot produce the DVR password because the recorder is five years old and the admin credential was rotated by a property manager who is no longer at the company. Second, even when the password works, the DVR's built-in search is a motion scan keyed on channel number, not an event-classified log. The buyer can stare at the timeline for 45 minutes and get nothing actionable. Third, the HDMI tap is one-way and read-only, so the seller is not handing over administrative control of a device that is still recording on the day the buyer's rep is looking at it. The DVR keeps running. Cyrano sits inline on the HDMI cable and reads the multiview the recorder is already rendering.

Cyrano ships overlay mask templates for Hikvision DS-7xxx, Dahua XVR and NVR, Lorex, Amcrest, Reolink NVR, Uniview, Swann, Night Owl, Q-See, ANNKE, EZVIZ, Bosch DIVAR, Honeywell Performance, and Panasonic WJ-NX. The overlays are how the detector blanks the clock, the camera-name strip, and the channel bug so they do not pollute the event log. The 9 field payload is identical across brands. The buyer's rep sees the same schema whether the recorder in the closet is a 2017 Hikvision or a 2023 Reolink.

It is, but the alternative is worse. When the OM is silent on operational security, buyers project their worst-case assumption onto the property and price the asset accordingly. When the OM shows a measured incident rate, with a real CSV in the data room and a standardized event shape, the buyer has something to benchmark instead of a blank. Brokers who run this playbook consistently report fewer security-related concession requests at the LOI, because the risk has been priced at the sell side rather than invented at the buy side.

Nothing, if they want. The Cyrano unit stays plugged into the HDMI on the recorder in the office closet and the 9 field log continues to accrue under the new owner. The buyer inherits the seller's event history as a queryable archive, and the first 30 days under new ownership are directly comparable to the trailing 30 days under old ownership. Most buyers keep the unit. A few unplug it and use the $450 hardware at another acquisition. The subscription is per-unit, per-month, and transfers with the property at close.

The one scenario is a property with a hidden chronic problem (for example, nightly loitering in a specific breezeway that has never been reported to the office or the MLS). The tap will surface it, and the seller will have to decide whether to fix it before listing, disclose it in the OM, or pull the tap. This is a feature, not a bug, because the buyer's rep would find the same pattern in the first week after close, and the resulting litigation or concession dispute is far more expensive than a quiet pre-listing fix. Running the tap 90 days out gives the seller a decision window that no last-minute buyer discovery ever does.

A security audit is a point-in-time walkthrough plus a report. A 90 day indexed log is a time-series dataset with 20,000 to 30,000 event rows and JPEG thumbnails. The audit tells the buyer what a consultant saw on one day. The log tells the buyer what the property actually does across 90 days. The audit is $5,000 to $15,000 per property. The pre-listing tap is $450 in hardware plus $200 per month per property. On a 90 day tap the total is under $1,050, the output is richer, and the file is one that a lender or carrier can independently audit.

Yes. The hardware is not tied to a specific recorder brand, a specific DVR UI, or a specific property-management system. If the next owner swaps the DVR, the HDMI output of the new recorder still feeds the same Cyrano unit, and the unit picks up the new tiles under their labels. If the next owner sells the property five years later, the same tap produces their own 90 day pre-listing export and the cycle repeats. Most operators treat the unit as a permanent fixture of the asset, the way they treat a smart thermostat or a keybox.