Call or Text
Firearms (ATF)

Surveillance and Access Control for Oklahoma and North Texas FFL Dealers

Gun stores, pawnshops, and licensed dealers from Lawton to Wichita Falls. Built for the 48-hour clock, and for the day you have to prove what happened.

Call or text (580) 289-8181

Start with the thing no one selling you cameras will say: ATF does not require security cameras. Not for dealers, not for manufacturers, not for pawnbrokers. The words camera, surveillance, video, CCTV, alarm, and vault do not appear anywhere in 27 CFR Part 478, the regulation that governs your license. Not once. There is no such thing as an “ATF-compliant” camera, and a vendor who uses the phrase is describing a standard that does not exist.

What ATF actually requires is records, and it requires them for longer than most dealers realize. Form 4473s and Acquisition and Disposition records are retained until you discontinue the business (27 CFR §478.129), which has been permanent retention since 2022. The commonly repeated “20 years” is not a retention period at all: it is the age at which paper forms may be moved to a separate warehouse. (ATF has proposed replacing indefinite retention with a 20 or 30 year term. That rule is not final, comments close August 4, 2026, and permanent retention governs until it is.) Theft or loss carries a 48-hour reporting window from discovery, under 27 CFR §478.39a and 18 U.S.C. §923(g)(6). That deadline is real, and it is the one that should drive your infrastructure.

A word on enforcement, since most security copy in this industry is a year out of date: the “zero tolerance” policy was repealed on April 7, 2025. DOJ and ATF replaced it with the graduated policy in ATF Order 5370.1H, which weighs willfulness, materiality, and prior compliance history, and sends warning letters for isolated clerical errors instead of revoking licenses. Willful violations still cost you the license. But if someone is still selling you on the zero tolerance era, ask what else they have not checked since 2024.

So why install anything? Because a stolen firearm starts a 48-hour clock you cannot beat without knowing what happened, because your insurance carrier and your landlord frequently do impose surveillance terms in writing, and because the difference between “we think it went missing sometime last month” and a timestamped record is the difference between a report and an investigation into you. Cameras are how you protect your inventory and prove your account of an incident. They are not how you satisfy ATF.

Most FFL dealers we walk through (whether in Lawton, Wichita Falls, or anywhere else in our service area) are running consumer-grade DVR systems they bought ten years ago. No documented retention. No audit trail. No integration with access control. No path to producing footage on any useful timeline. The cameras are there. The evidence is not. Red River Integration deploys the Ubiquiti UniFi ecosystem, enterprise infrastructure used in critical commercial and industrial facilities worldwide, engineered specifically for the licensed firearms operation. The retail floor. The bound book area. The after-hours storage. Every system we install is designed around the obligations you actually carry, documented, and built to hold up under an Industry Operations Investigation, whether it comes from the ATF Dallas Field Division, which covers both North Texas and the entire State of Oklahoma through its Oklahoma City and Tulsa field offices.

The Requirement

What ATF Requires, What Carriers Expect, and What We Build.

Each item says which of the three it is. We do not blur them together.

Not required by 27 CFR 478

Coverage Where Firearms Move: A Business Decision, Not a Regulatory One

No ATF rule prescribes camera placement, because no ATF rule prescribes cameras. What drives coverage is your own risk and your carrier’s terms: the points where firearms are received, stored, displayed, transferred, or repaired, plus the register and the back door. UniFi Protect delivers commercial-grade coverage across those areas, with detection that distinguishes people and vehicles, license plate capture for deliveries, and continuous recording to local NVR hardware regardless of internet status.

All footage records to storage hardware you own, inside your facility. No cloud subscription. No third-party servers. No vendor that can lock you out of your own evidence the day you need it most.

We will scope this to what you are actually protecting against, which for most dealers is inventory shrink and a defensible account of an incident, rather than to a zone list someone invented to lengthen a quote.

No ATF video retention rule exists

Retention Sized to the Trace, Not to a Rule

To be explicit, because this is where the industry invents numbers: ATF sets no retention period for video. None. What creates the need is the lag: a trace request that lands on a firearm you transferred sixty days ago, a theft you reported and now need to reconstruct, a customer interaction that turns out to matter. UniFi Protect retains footage on local NVR hardware sized to your camera count, typically 90 to 180 days, which is a number we chose against those timelines and will defend on the merits. It is not a floor anyone will cite at you.

Footage is organized and searchable by date, time, camera, and event, so a trace inquiry takes minutes rather than “we will have to call the cloud company.”

The retention that is mandatory is your paperwork: 4473s and A&D records until the business closes (§478.129), and five years for multiple-sale forms and theft reports (§478.129(c), (f)). That is a backup and records problem, and we treat it as one.

After-Hours Access Documentation and the 48-Hour Theft Reporting Window

The 48-hour theft and loss reporting window under 27 CFR §478.39a, implementing the statutory reporting duty in 18 U.S.C. §923(g)(6), is unforgiving. Discovery of the theft is the trigger, not the moment you reconstruct what happened.

Without an integrated surveillance and access control system, “discovery” can mean hours or days of inventory reconciliation before you even know what’s missing. UniFi Access logs every entry to your premises and every entry to restricted areas (vaults, bound book storage, after-hours operations) with timestamp, credential, and camera-linked video record. An after-hours alert is an alert with footage attached, not a question. Time-based permissions automatically lock out credentials outside authorized hours.

Lost or compromised credentials are revoked from the management console in seconds: no rekeying, no lock changes, no exposure window. When ATF asks who was in your bound book area at 2 AM on a Tuesday, you produce the answer with credential, timestamp, and video: from one platform, in seconds.

Bound Book and 4473 Storage Area Protection

Your 4473s and bound book under 27 CFR §478.124 and §478.125 are the records ATF genuinely cares about, and they are the ones you keep until the day you close. (They need not be paper: §478.129(b) permits an ATF-approved electronic alternative, and §478.125 allows an electronic A&D. If a vendor told you paper is required, that is another thing to check.)

ATF inspects during business hours, annually or for cause, rather than “on demand,” so the realistic threat to these records is not the inspection. It is fire, water, and the allegation that someone altered them. Restricted access on the records area, coverage of its entries, and an audit trail of every access event is how you answer a tampering allegation with something other than your word.

Network Infrastructure That Keeps Compliance Systems Running

Surveillance and access control depend on a properly engineered network: both for day-to-day operations and for the remote access, alerting, and management capabilities that ownership and authorized personnel rely on. Ubiquiti UniFi enterprise networking provides the backbone your compliance infrastructure runs on: managed switches, enterprise routers, and professionally deployed wireless coverage across every area of your facility, with network segmentation that isolates surveillance and access control from your point-of-sale, your back-office systems, and any guest network. Segmentation matters specifically for FFLs. A compromised customer-facing terminal or a guest device cannot reach your surveillance system, your access control records, or any system holding your bound book digital backups.

Cellular Failover for Uninterrupted Access and Alerts

UniFi Protect records continuously to local NVR hardware on your network regardless of internet status: that footage is captured and retained on infrastructure inside your facility, not dependent on a cloud connection. What an internet outage does compromise is everything that depends on a working connection: remote access for ownership, real-time alert delivery to ownership and central station monitoring, point-of-sale credit card authorization, NICS background check submission, and the management plane for surveillance and access control. UniFi 5G Max provides automatic dual-SIM cellular failover: the moment your primary connection drops, the system fails over without manual intervention and your remote access, alerting, point-of-sale, NICS submission, and management capabilities stay online without interruption. For dealers in rural locations across Southwest Oklahoma and North Texas where wired service can be inconsistent, 5G Max can also serve as the primary connection, delivering enterprise-grade throughput where wired infrastructure cannot.

Why It Matters

Why Local, Private Infrastructure Matters for Federal Firearms Licensees

Cloud-based surveillance and access control vendors present a specific problem for FFLs: your operational data (every customer interaction, every transfer, every access event in restricted areas, every minute of footage of your retail operation) is stored on servers owned and operated by a third party, accessible to parties beyond your operation under terms you accepted without negotiation. For a federally licensed business operating under regular ATF inspection, where the privacy of customer interactions and transfer records is both a competitive concern and a regulatory one, that architecture is exactly the wrong choice. Every system Red River Integration deploys records and stores locally.

Your footage stays on hardware you own, in your facility, accessible only by personnel you authorize. Your access logs stay on systems you control. No third party holds your transfer records, your customer footage, or your access logs. When ATF or law enforcement requests footage with a proper legal basis, you produce it from your own storage on your own systems, and only in response to that legal basis.

Why This Is Different

What You Are Actually Choosing Between

Consumer / prosumer gear Cloud-subscription vendor Red River on UniFi
Where the footage lives A card in the camera The vendor's cloud Local NVR hardware you own, on site
If the internet drops Recording stops Recording stops Keeps recording; cellular failover keeps alerts flowing
Retention Whatever fits the card Whatever the plan tier allows Sized to your rule, documented for the inspector
Access audit trail None Partial, and theirs Every door, every credential, every timestamp, exportable
Who owns the equipment You They do, or you lease it You. Outright. No lock-in.
Ongoing cost None, until it fails A subscription that renews forever A support plan you can cancel; the system still works
When the inspector asks "Let me check the card" "I have to call the vendor" You produce it from your own storage, in minutes
Who We Build For

Built for Your License Type

  • Type 01 Dealers in Firearms Independent gun stores, sporting goods retailers, and outdoor outfitters with retail FFL operations. We design surveillance, access control, and recordkeeping infrastructure that satisfies ATF inspection expectations across the sales floor, transfer area, and restricted records storage.
  • Type 07 Manufacturers Manufacturing FFLs face a more complex recordkeeping posture: production records, serialization documentation, and ITAR considerations for certain components. Their physical security mandate is identical to a dealer’s, which is to say ATF imposes none. What changes is the value and the volume in the building, and that is an insurance and risk conversation.
  • Type 09 and Type 10 Destructive Devices Higher scrutiny in practice, though Part 478 adds no physical security requirement here either. If your operation touches explosives, that is where a real federal mandate appears: 27 CFR Part 555 governs magazine construction, locks, and siting in detail. We engineer for that environment.
  • Pawnshops with FFL Operations Pawnshops carry both an FFL burden and a state-level pawnbroker burden: Oklahoma’s Pawnshop Act under Title 59 O.S. §§ 1501–1515, administered by the Department of Consumer Credit, and Texas’s under Chapter 371 of the Texas Finance Code, administered by the OCCC. Worth knowing before someone bills you for it: neither pawnbroker act imposes a surveillance requirement (there is no camera or video provision anywhere in 59 O.S. §§1501-1515). Two inspection regimes, both focused on transaction records and holding periods. We design systems that serve both, and we do not invent a third.
  • Indoor Ranges with Retail Operations Range operations layer customer safety documentation, insurance carrier surveillance requirements, and the standard FFL compliance posture into a single infrastructure design. We deliver systems engineered for the combined operation.

Every Installation Is Engineered for That License. Not Adapted From a Template.

We don’t sell a standard FFL package. We assess your license type, your facility layout, your inspection history, and the gaps in your current infrastructure, and we engineer a system that meets ATF expectations, documents every event, and produces the evidence trail an Industry Operations Investigation will demand. Built on the Ubiquiti UniFi ecosystem, enterprise infrastructure deployed in critical commercial facilities worldwide, installed and configured by a team that understands what a “willful violation” finding actually means and how to build infrastructure that does not produce one.

Built on Ubiquiti UniFi

The Same Platform Running Hospitals, Campuses, and Fortune 500 Sites

Not a consumer brand with a professional badge. Enterprise hardware with a two-decade track record, a single management console, and no mandatory cloud between you and your own footage.

Dream Machine

Dream Machine

Gateway, firewall, VLAN segmentation

UniFi Access Points

UniFi Access Points

Wi-Fi 7 coverage, no dead zones

UniFi Protect

UniFi Protect

AI detection, local recording

UniFi Access

UniFi Access

Doors, credentials, audit trail

UniFi Talk

UniFi Talk

One phone system, every site

Enterprise Switching

Enterprise Switching

PoE, managed, documented

One console. One vendor. You own all of it.

What You Get

Every Installation Ships With This

A labelled, documented rack

Not a hand-tied tangle in a closet. Organised, cooled, and built so the next person can work on it.

As-built network diagram

Yours to keep. VLANs, IPs, port assignments, and what is plugged into what.

A written retention configuration

What the rule requires, what we set, and how to prove it. The page you hand an inspector.

Credentials handed to you

Admin access to your own system, in writing. No vendor holding the keys.

Managed from day one

Monitoring, firmware, and health checks, so it still works in year three.

A named person who answers

You call the person who built it, not a ticket queue.

Service Area

Serving Southwest Oklahoma and North Texas

Red River Integration serves federal firearms licensees across Southwest Oklahoma (including Lawton, Duncan, Altus, Chickasha, Anadarko, and the surrounding counties) and across North Texas, including Wichita Falls and the surrounding communities.

Common Questions

Questions We Get Asked

Does the ATF require security cameras for an FFL?

No. Nothing in 27 CFR Part 478 requires cameras, alarms, safes, or vaults. Those words do not appear in the regulation at all, and there is no ATF storage mandate for your inventory either. (The "secure gun storage device" language you may have seen is 18 U.S.C. §923(d)(1)(G), which requires you to have such devices available for sale to customers. It says nothing about how you store your own stock.) What ATF requires is records: 4473s and A&D records kept until you discontinue the business (§478.129), and theft or loss reported within 48 hours of discovery (§478.39a). Cameras are how you satisfy your insurance carrier, protect your inventory, and prove your account of an incident. They are not how you satisfy ATF, and "ATF-compliant camera" is a phrase with nothing behind it.

How long should an FFL keep surveillance footage?

There is no ATF answer, because ATF sets no video retention period. The practical answer is longer than you think: trace requests and investigations routinely reach back further than a 30-day window, and a gap is not fixable after the fact. We size retention against those timelines, typically 90 to 180 days, and tell you plainly that it is our engineering judgment rather than a rule.

Are NFA (Class 3) dealers or gunsmiths held to extra security requirements?

Not by regulation. 27 CFR Part 479 (NFA) contains no camera, alarm, or vault requirement either, so a Type 07 or Type 09 licensee carries the same physical security mandate as a Type 01, which is to say none. The genuine exception is explosives: 27 CFR Part 555 imposes real, detailed magazine construction, locking, and siting rules. If someone quotes you "enhanced NFA security requirements," ask for the section number.

Can you cover the bound book and 4473 storage area?

Yes, and we specifically design for it. Continuous coverage of the record storage area, plus access control with an audit trail showing exactly who entered and when.

Do you work with pawnshops as well as gun stores?

Yes. Any federally licensed dealer across Southwest Oklahoma and North Texas, including Lawton, Duncan, Altus, and Wichita Falls.

Free Scoping Session

Ready to Talk About Your Operation?

Your license is the business. Don’t trust it to consumer-grade equipment and a cloud provider you’ve never met. Call us at (580) 289-8181 or fill out the form on our contact page. Consultations are confidential and there’s no obligation.

Pick a time below, or call or text (580) 289-8181. Consultations are confidential and there is no obligation.

Pick a time

Real openings from our calendar. 30 minutes, free, no obligation.

Prefer to write it out? Send us the details instead.