Prova

Workplace safety evidence · Axis cameras

When something happens on site, the record holds.

The camera detects. Prova makes the event verifiable.

Prova runs inside your Axis cameras. Every detection that matters to your safety rules becomes a signed incident your auditor can check, with what the camera could see.

Starter, paid at a fixed price: one site, up to 4 cameras, 60 days.

Pedestrians and vehicles, restricted zones, traffic lanes — the scenes ISO 45001 audits ask about.

Illustrative example: a record as the registry stores it
rule
Person near vehicle version 2
zone
Loading dock — vehicle lane version 3
measured
1.4 person heights (threshold 2.0), 0.9 s
evidence
silhouette applied on camera
fingerprint 9f2c…a41b
camera
view clear · clock +0.4 s

signature verified on arrival

What it costs to have no record
  • The inspector's question. How is this known hazard controlled, and how do you know it works? Without a record the answer is a description; with one it is a register.
  • The insurer's question after an incident. Had this happened before, and what was done about it? Memory answers that badly; dated, signed incidents answer it well.
  • The ISO 45001 surveillance audit. Clause 9.1.1 asks you to monitor and measure performance, hazard controls included. The audit pack maps to it and to 6.1.2, 7.5.2, 7.5.3 and 10.2.
  • The fine in Slovenia. An employer without a written safety statement with risk assessment faces €2,000–€40,000, its responsible person €500–€4,000 (ZVZD-1, Art. 76). Risk assessments were the labour inspectorate's most frequent finding in 2024: 2,289 violations, about a quarter of all. A register of near misses shows the assessment follows what actually happens on site.
Two-minute check: will your cameras run Prova?
  • System → About: AXIS OS 12.11.72 or a later 12.x, or AXIS OS 13. Below that floor (AXIS OS 11.11 to 12.10, or an earlier 12.11) the evidence-only package is offered, without rules; there it is measured so far on ARTPEC-6 and ARTPEC-7 (AXIS OS 11.11) and on ARTPEC-9 (AXIS OS 12.10).
  • Chip ARTPEC-8 or ARTPEC-9 (the camera's datasheet says which). Ambarella CV25 and CV75 only after a check on your own camera.
  • AXIS Object Analytics installed and running.
  • Object snapshot enabled in the camera UI.
  • A real NTP server set (not 0.0.0.0).

On an older camera? On AXIS OS 11.11 to 12.x — including 32-bit ARTPEC-6 and ARTPEC-7 — the evidence package records the camera's own events — restarts, storage, tampering, settings — and alerts from partner ACAPs, signed on the camera. The full package uses AXIS OS 12.11.72: a firmware floor, not a list of approved models.

All five? Request the Starter package with the answers — we reply within one business day and bring in your Axis integrator.

From the camera to a pack your auditor can use

Four steps, on hardware you already have.

1 · camera

Axis detects

AXIS Object Analytics — already on your camera — reports people and vehicles. You buy no second detector and no detection licence.

2 · camera

Your rules run on the camera

Restricted areas, people near vehicles, lines into traffic lanes: your zones and rules are judged right on the device, and every image of a detection is anonymised there before it leaves the camera.

3 · camera

Signed where it happened

Each record is signed on the camera with a key that never leaves it, and carries the exact rule and zone version it was judged against.

4 · registry

Verifiable whenever you need it

The registry checks every signature, keeps every record tamper-evident and issues an audit pack your auditor can verify — down to whether the copy in their hands is exactly the one that was issued.

Nothing connects into your network: the camera makes one outbound HTTPS connection to the registry. Incidents wait safely on the camera until they are delivered, so a restart or an outage loses nothing — and if the space set aside for them ever fills, Prova says so instead of silently dropping a record. No route out at all? Talk to us first.

Alongside the detector, not instead of it

Prova does not sell you another detector. It turns the detections AXIS Object Analytics already makes into signed incidents, judged against your own zones and rules — the record your auditor opens months later. The evidence layer for the Axis cameras you already own.

What every record carries for the auditor

Every field answers a question auditors actually ask.

What fired, and against what

The rule and the zone with their version numbers pinned into the record — not resolved later. A zone edited today does not change what last month's incident meant.

A signature made on the camera

The signing key is created on the camera and never leaves it, and the registry recognises that camera from the first time it reports in. A record altered in even one field afterwards is rejected, and the rejection is logged.

Evidence with a fingerprint

The camera takes a fingerprint of the object image; the registry checks it before it accepts the file. The image is never overwritten, and its fingerprint outlives it.

Anonymisation applied at the source

In an incident snapshot, persons are coarsely pixelated by default (the silhouette policy) — on the camera, before any image exists off it. A site may relax that after a DPIA, and the record says which policy was applied. A no-image policy is also a supported answer.

The camera's clock, on record

Where the offset of the camera's clock from the registry's is known — measured by the registry, or on the push path as the camera reports it — every incident carries it, so a record can be lined up against a door controller or a shift log instead of assumed to agree.

Whether the camera was working

Prova subscribes to AXIS Image Health Analytics, so a record comes with an attested answer to “was the lens clear and the view unobstructed”.

And a camera that stops speaking is reported as silent within 90 seconds — a distinct state from never seen and from fine, and your alert channels hear of it within about two and a half minutes. A dashboard that goes green when nothing is arriving is worse than no dashboard.

Once a day Prova also confirms that the camera's analytics chip is working correctly. If it is not, that camera turns red on your camera list.

The operator view, on a demonstration fleet: every camera's reporting state, its licence, and only what the device reports out of the ordinary. A camera whose image is too dark stands out at a glance, with its configuration changes; the cameras with nothing to report say so in one word — and the register underneath is the same data the audit pack is built from.
The operator view, on a demonstration fleet: every camera's reporting state, its licence, and only what the device reports out of the ordinary. A camera whose image is too dark stands out at a glance, with its configuration changes; the cameras with nothing to report say so in one word — and the register underneath is the same data the audit pack is built from.

The audit pack you hand over

One PDF for a site and a period: a summary, leading indicators per zone and class, and the full incident register — time, zone, rule, dwell or distance, the anonymisation policy that was applied, and a fingerprint of each image — and which cameras were watching, for how much of the period.

The registry can also be asked: “how many incidents in the last seven days”, “which camera”, in English, Serbian, Slovenian or German. Answers are built from the records with citations, and an answer of zero is reported as what it is — a statement about the register, not proof that nothing happened.

What else the pack contains

It ends with a method-and-boundaries section that states what the data does not show, and a mapping to ISO 45001 clauses 6.1.2, 7.5.2, 7.5.3, 9.1.1 and 10.2. It carries a document reference, an issue number and the issue history, so a later re-issue is a new version of the same document rather than an unrelated file. The pack prints a fingerprint of the records it covers, which anyone can recompute, and the registry keeps the fingerprint of the issued file itself, so any copy can be checked against it.

Evidence images are purged on a stated schedule — 72 hours by default, and every customer sets its own period. One confirmed incident can be kept for one case, with a named owner and an end date, and never longer than a year. The incident, its fingerprint and the fact of the purge stay. The database is backed up every hour and, with the images, every day; the copies are kept on the registry's server, and we test restoring them every week.

Download a sample audit pack (PDF)

Demonstration data from a simulated warehouse camera, every record signed on it.

Built this way on purpose

Every boundary below is a choice that makes the record easier to defend.

Read the full list
  • The record, not the reflex. Prova records and classifies for audit. It does not warn, slow or stop any vehicle, and it is not a safety component. That way it adds evidence to your site without becoming one more safety function on it.
  • Built on the current Axis platform. The full package runs on AXIS OS 12.11.72 or a later 12.x, or AXIS OS 13, and Prova has been verified on AXIS OS 13.0.114 (ARTPEC-8). Cameras below that floor, and 32-bit cameras on any AXIS OS 11.11 to 12.x, get the evidence package: the camera's own events (restarts, storage, tampering, settings) and partner-ACAP alerts, signed on the camera.
  • Privacy by construction. No faces, no identity, no biometrics. A record carries an object type (person or vehicle), where it was, and when — never who. Colour and clothing attributes the camera reports are dropped at the door and never stored. If Prova ever stops unexpectedly, nothing from its memory is written to the camera.
  • Your detection, our evidence. Prova reads what AXIS Object Analytics already sees — people and vehicles — and adds no model of its own. The classes in your records are the ones your Axis camera already trusts, with nothing extra to license, tune or explain. To it a vehicle is a vehicle: a forklift, a van and a truck read alike, so a rule drawn for forklifts fires for every vehicle in its zone.
  • Your video stays yours. Prova never uploads, stores or streams footage. One still per incident, anonymised on the camera by your policy — or none at all. Recordings stay in your own system, where they already are. The one exception, and you switch it on: pictures for drawing zones show the whole scene, are kept only in working memory and are deleted after at most 24 hours.
  • The picture follows the record. The camera sends the object image as the object leaves the scene, so a brand-new record may show “image pending” for a few minutes. That is by design, and the record says so.
  • Nothing goes missing quietly. Stills need Object snapshot switched on in the camera. Prova counts every detection that arrived without one, so a gap is a number you can see, never a silence.
  • One clear view per camera. On multi-sensor cameras you choose the channel the rules read, so every record is clear about which lens it speaks for.
  • Answers with citations. Ask the registry — “how many incidents in the last seven days?”, “which camera?” — in English, Serbian, Slovenian or German, and every answer cites the records it comes from. Built on your records, not on guesswork.
  • Made for your auditor, not instead of one. The audit pack maps incidents to ISO 45001 as a ready starting point for your audit. It supports your auditor's judgement; it is not a certificate.

Get started in three steps

No extra hardware. No detection licence. Prova sends no video anywhere — only a signed record and, if you choose, one anonymised still.

1 · check

Confirm the camera

AXIS OS 12.11.72 or a later 12.x, or AXIS OS 13, on ARTPEC-8 or ARTPEC-9, with AXIS Object Analytics. Open the camera’s System → About page and read the version before you install.

2 · install

Install Prova on the camera

The signed ACAP package goes on the device. Zones and rules run there; no second box and no detection licence from us.

3 · enroll

Enroll and go live

Your Axis integrator sets up the site with your HSE lead and turns on the registry; if they are not our partner yet, we bring them in. We review your first audit pack.

Request the Starter package How Prova is paid

How Prova is paid

No per-user fees and no detection licence — AXIS Object Analytics is already on your camera. You buy Prova through your Axis integrator, who quotes it together with the installation; if they are not our partner yet, we bring them in.

  1. 1On the cameraOnceper camera

    A perpetual Prova licence for that camera. Zones and rules keep running on the device even if the registry lapses — evidence is never held hostage.

  2. 2On your siteOnceper site

    Your Axis integrator sets up zones and rules with your HSE lead as part of the installation. We review your first audit pack.

  3. 3In the registryYearlyper site

    Part of every installation: tamper-evident records, silence and health alerts, backups with a weekly restore test, audit packs. Sized by the cameras on the site, and lower when paid for several years ahead.

What the price depends on: how many cameras and sites, how many years ahead, and the installation work your integrator quotes.

The way in — Starter, paid at a fixed price: one site, up to 4 cameras, 60 days, goals agreed up front; set-up, licences, registry and a reviewed evidence report included. Order within 30 days and it counts in full towards your first year.

If you leave, you can export everything for 90 days from cancellation — free — and verify the signatures without us.

Request the Starter package