Retail Loss Prevention Explained: How Integrated Security Cameras and POS Systems Protect Independent Stores

Table of Contents

Walk into any independent convenience store, corner bodega, or neighborhood grocery on a busy afternoon and the operational reality is immediately clear: one or two staff members are managing a constant flow of transactions, stocking shelves, handling tobacco and lottery requests, and fielding customer questions, all at the same time. That operational stretch is exactly where retail shrink finds its opening. Industry research consistently places shrink losses among the most significant profit-eroding forces in independent retail, yet the majority of small store owners still rely on disconnected tools, a standalone security camera system that records but never communicates with the register, a manual age-verification process that depends entirely on employee judgment, and a POS system that processes sales without any awareness of what the cameras are seeing. The result is a security architecture with gaps wide enough to walk through.

The shift happening across the independent retail sector right now is not just about adding more cameras or stricter policies. It is about integration. Modern retail loss prevention technology is converging around a single insight: when your point-of-sale system, your security cameras, your ID scanning tools, and your age verification workflows share data in real time, the whole system becomes dramatically more effective than any individual component. This article breaks down exactly how that integration works, what it means for high-transaction environments like convenience stores and grocery shops, and why independent operators who invest in connected security infrastructure consistently outperform those who don’t.

The Real Cost of Disconnected Security in Independent Retail

Retail shrink is not a single problem, it is the combined result of shoplifting, employee theft, vendor fraud, and administrative errors. For independent stores operating on thin margins, even modest shrink rates can eliminate profitability entirely. Understanding where losses originate is the first step toward choosing the right technology response.

Where Shrink Actually Comes From

National Retail Federation research consistently shows that shrink in retail comes from multiple sources, with external theft and employee theft each representing significant portions of total losses. For independent convenience stores and grocery operations, the distribution often skews differently than in large-chain environments. Smaller staff teams create fewer checks and balances, and high-volume product categories like tobacco, alcohol, and lottery all carry elevated theft risk due to their resale value and compact form factors.

Administrative errors, miscounted inventory, voided transactions that don’t reflect actual returns, discount misapplication, are frequently underestimated as a shrink source. In stores where the POS system is not tightly integrated with inventory management, a cashier processing a “no-sale” drawer open event or issuing an unauthorized refund may go undetected for days or weeks. The absence of a connected security camera system means there is no automatic visual record attached to that transaction event.

The Compliance Dimension: Age-Restricted Products

For convenience stores and grocery shops that sell tobacco, alcohol, or lottery products, compliance failures carry consequences that go well beyond shrink. A single underage tobacco or alcohol sale can trigger fines, permit suspensions, or license revocations under state and local regulations. The FDA’s tobacco retailer compliance program conducts ongoing inspections and can issue civil money penalties for violations. Manual age-checking processes, where a cashier visually estimates a customer’s age or casually asks for ID, introduce human error into a zero-tolerance compliance environment.

The problem compounds at peak transaction times. When a line forms and a cashier is under pressure to move customers through quickly, the temptation to skip the ID check, especially for customers who appear “obviously adult”, is a well-documented behavioral pattern. No policy memo or staff training session fully eliminates this risk when the process depends on human discretion under time pressure. Technology-enforced verification, built directly into the POS workflow, removes that discretion from the equation.

What Disconnected Systems Cannot See

A standalone DVR camera system records video but provides no actionable intelligence to the business. When an incident occurs, a store owner must manually review footage, often hours or days later, to reconstruct what happened. There is no automatic correlation between a suspicious transaction at the register and the video timestamp. There is no alert when a high-value item leaves the store without a corresponding sale. There is no flag when a cashier’s transaction patterns deviate from normal behavior.

This is the core limitation of legacy security infrastructure in independent retail: it is entirely reactive. It documents what happened after the fact. Modern integrated security camera POS system architecture flips this model toward prevention and real-time awareness, giving store owners operational visibility that standalone systems simply cannot provide.

How Integrated Security Camera POS Systems Work

An integrated security camera POS system links camera hardware directly to the point-of-sale platform so that transaction data and video footage are synchronized in real time. Rather than two separate systems running in parallel, the store operates a unified security and sales intelligence layer that can correlate events across both streams simultaneously.

Transaction-Level Video Indexing

The most fundamental feature of a truly integrated system is transaction-level video indexing. Every time a transaction is processed at the register, a sale, a void, a refund, a no-sale event, a discount application, the system automatically attaches a video timestamp to that event. When a store owner reviews transactions at the end of the day or investigates a specific incident, they can pull up the video from that exact moment with a single click, without manually scrubbing through hours of footage.

This capability transforms loss prevention investigations from multi-hour forensic exercises into minutes-long reviews. It also changes the deterrent dynamic: employees who know that every register event is automatically linked to a camera recording are significantly less likely to attempt transaction manipulation. The surveillance effect is constant rather than theoretical.

Exception-Based Reporting and Alert Triggers

Advanced integrated systems go beyond passive recording to active exception monitoring. The POS system flags transaction patterns that deviate from normal behavior, an unusually high number of voids during a shift, multiple refunds processed without a manager override, repeated no-sale drawer opens, or discounts applied to transactions with no corresponding coupon scan. These exceptions are automatically surfaced in a reporting dashboard and, in many configurations, trigger real-time alerts to the store owner’s mobile device.

Exception-based reporting is particularly valuable for multi-location operators or store owners who cannot be physically present at all times. Rather than reviewing every transaction, attention is directed to the small percentage of events that statistical analysis identifies as anomalous. Industry experience shows this approach dramatically reduces the time required to identify theft or error patterns compared to manual review processes.

Camera Placement Intelligence for High-Risk Zones

Not all areas of a retail store carry equal shrink risk. Integrated systems allow store owners to designate specific camera feeds as high-priority zones tied to specific POS events. The area around the register, the tobacco display case, the alcohol cooler, and the lottery ticket counter all represent elevated-risk locations that benefit from dedicated monitoring tied directly to transaction activity. When a tobacco sale is processed, the relevant camera feed can be automatically prioritized in the monitoring interface. When the lottery drawer is opened, a timestamp is automatically logged against that camera angle.

The NRS POS system incorporates this kind of integrated camera functionality as a native feature, not a third-party add-on requiring separate configuration and maintenance. For independent store operators who lack dedicated IT staff, having security camera integration built directly into the NRS POS system eliminates the technical complexity of connecting disparate vendor systems and ensures that updates to one component automatically propagate across the integrated platform.

ID Scanning and Age Verification: The Technology Layer That Eliminates Human Error

Age verification at the point of sale is one of the most consequential compliance functions an independent retailer performs, and it is also one of the most consistently mishandled. Tobacco age verification POS integration and alcohol ID scanning represent the highest-stakes compliance checkpoints in convenience store and grocery retail, and the technology available today makes manual verification processes look archaic by comparison.

How ID Scanning Age Verification Works at the POS

Modern ID scanning age verification retail systems use a combination of barcode readers, magnetic stripe readers, and optical character recognition to parse the data embedded in a government-issued ID. When a customer presents a driver’s license or state ID, the cashier scans it directly at the POS terminal. The system reads the date of birth, calculates the customer’s current age in real time, and either clears the sale or blocks it based on the product being purchased and the jurisdiction’s minimum age requirement.

The process takes seconds and eliminates the single largest variable in manual age verification: human judgment. A cashier cannot “eyeball” a customer as 21 when the system has calculated their age as 19 from their verified ID data. The system enforces the policy every time, without exception, regardless of how busy the store is or how confident the cashier feels about the customer’s appearance.

Why Manual Verification Fails Under Real-World Conditions

Research in behavioral compliance consistently shows that manual procedures deteriorate under conditions of high transaction volume, time pressure, and social discomfort. Asking a customer for ID, particularly a customer who appears older or is behaving impatiently, triggers a social friction response that many cashiers resolve by skipping the check. This is not a character flaw; it is a predictable behavioral response to competing pressures in a high-traffic retail environment.

The FDA’s tobacco retailer inspection program has documented that compliance failures cluster disproportionately during peak hours and in stores with high transaction volumes, exactly the operational conditions that characterize successful independent convenience stores. The implication is direct: the more successful your store, the higher your compliance risk under a manual verification system. Technology-enforced verification inverts this relationship entirely.

Fake ID Detection and Database Validation

Sophisticated ID scanning systems go beyond reading the surface data on an ID to performing format validation checks against known ID specifications for each state. A fake ID that carries a plausible date of birth but uses incorrect barcode formatting, an invalid magnetic stripe pattern, or mismatched font specifications will fail validation even if the visual appearance seems legitimate to an untrained eye.

Some enterprise-grade systems can also perform real-time validation against state DMV databases, though this capability varies by state based on data-sharing agreements. At minimum, format validation provides a meaningful additional layer of protection beyond what any human cashier can perform during a standard transaction. For stores that have experienced compliance violations or are in jurisdictions with elevated inspection frequency, this level of verification capability can be the difference between retaining and losing a tobacco or alcohol license.

Compliance Documentation and Audit Trails

One underappreciated benefit of technology-enforced age verification is the automatic compliance documentation it generates. Every ID scan creates a timestamped log entry in the POS system, recording that verification was performed, what product was being sold, and what the verification result was. When a regulatory inspector visits or a compliance audit is initiated, the store owner can produce a complete verification history demonstrating consistent policy enforcement, something a manual process simply cannot document at the transaction level.

This audit trail capability is particularly valuable if a violation is alleged. Being able to demonstrate that the system blocked attempted underage sales, that verification was performed on every age-restricted transaction, and that staff followed technology-enforced protocols provides a meaningful compliance defense that “we train our staff to check IDs” cannot.

Tobacco Scan Data and the POS Compliance Stack

For convenience stores and independent grocers that carry tobacco products, the compliance technology stack extends beyond age verification into the specific domain of tobacco scan data programs. These programs, operated by major tobacco manufacturers, require retailers to submit detailed transaction-level scan data in exchange for promotional allowances and rebates that can represent meaningful per-carton savings on tobacco inventory costs.

What Tobacco Scan Data Programs Require

Tobacco scan data programs require retailers to capture and transmit product-level scan data, UPC codes, quantities, transaction timestamps, and pricing information, for every tobacco sale. The data must be formatted according to the manufacturer’s specifications and submitted on a defined schedule. Retailers whose POS systems cannot generate compliant scan data are effectively excluded from these programs and the financial benefits they provide.

Many independent retailers have historically been unable to participate in these programs because their legacy POS systems lacked the scan data capture and reporting capabilities required. Generic point-of-sale platforms built for general retail often lack the tobacco-specific compliance architecture needed to meet manufacturer requirements. The NRS POS system’s support for programs like the Altria Tier 4 initiative, as detailed in NRS’s Altria Tier 4 deployment coverage, reflects a purpose-built approach to tobacco compliance that generic platforms cannot replicate.

The Intersection of Scan Data and Loss Prevention

Tobacco scan data creates an interesting secondary benefit for loss prevention: it generates highly granular inventory movement data for one of the highest-theft product categories in convenience retail. When scan data is captured at the transaction level and reconciled against receiving records and physical inventory counts, discrepancies become immediately visible. A carton of cigarettes that leaves the inventory record without a corresponding scan data event is a flag that warrants investigation.

This intersection of compliance data and loss prevention intelligence is a good example of how integrated retail technology systems create value that exceeds the sum of their individual parts. A store owner who views scan data participation purely as a rebate mechanism is leaving a loss prevention intelligence asset underutilized.

POS System Design for High-Transaction Retail Environments

Not all point-of-sale systems are built to handle the operational demands of a busy convenience store or high-volume grocery. A high-transaction retail POS system must perform reliably under conditions that would expose the limitations of a general-purpose platform, rapid sequential transactions, multiple payment types including EBT/SNAP, age verification interruptions, lottery ticket processing, and integrated security camera monitoring, all running simultaneously without lag or system instability.

Hardware Specifications That Matter in Real Operations

The physical hardware components of a POS system, the terminal processor, display, barcode scanner, and card reader, all have performance specifications that determine how the system behaves under sustained high transaction volume. A terminal running on underpowered hardware will introduce processing delays during peak hours, create cashier frustration, and ultimately slow checkout lines in ways that directly affect customer experience and transaction throughput.

For convenience store and grocery environments specifically, hardware durability matters as much as processing speed. Systems deployed in these environments face daily exposure to temperature fluctuation (near open cooler doors), humidity, food particles, and heavy physical use. Consumer-grade tablet hardware repurposed as a POS terminal is a common failure point in independent retail, the hardware simply is not designed for the duty cycle of a commercial retail environment operating 12 to 16 hours per day, seven days a week.

Payment Type Coverage as a Competitive Necessity

A convenience store POS system or grocery store point of sale software that cannot process all relevant payment types creates operational friction and lost sales. In the current retail landscape, this means seamless handling of cash, credit, debit, EBT/SNAP, contactless payments, and OTC (over-the-counter) benefit cards, all within a single transaction flow that can handle split-tender situations without manual intervention.

EBT/SNAP acceptance is particularly critical for independent grocery and bodega operators serving communities where SNAP participation rates are high. The NRS partnership with NationsBenefits for OTC card acceptance, for example, reflects how modern integrated POS platforms are expanding beyond basic payment processing to accommodate the full range of benefit programs that independent retailers’ customer bases rely on. For stores in underserved communities, the ability to accept every form of payment their customers carry is not just a convenience feature, it is a fundamental business requirement.

Understanding markup and margin dynamics on these high-velocity product categories also matters for operators managing thin margins. The distinction between markup and margin is a concept every independent retailer should have firmly in hand when pricing tobacco, alcohol, and other regulated items where compliance costs affect net profitability.

Speed, Uptime, and the Cost of System Failures

In a high-transaction retail environment, system downtime is not an abstract IT concern, it is a direct revenue event. A POS system that goes offline during a Friday evening rush, or that requires a manual restart to clear a processing error, costs the store real money in abandoned transactions and customer frustration. Cloud-dependent systems that lose functionality when internet connectivity is interrupted are particularly risky for stores in locations with inconsistent broadband service.

Robust offline capability, the ability to continue processing transactions locally when the internet connection drops, then sync data when connectivity is restored, is a non-negotiable feature for independent retail environments. This is an area where purpose-built retail POS platforms consistently outperform generic app-based systems that were architected with the assumption of always-on connectivity.

Building a Layered Loss Prevention Architecture

Effective retail loss prevention technology is not a single product purchase, it is a layered architecture where multiple systems work together to create overlapping protection. Understanding how these layers interact helps store owners make informed technology investment decisions rather than reacting to incidents after they occur.

The Four Layers of Modern Retail Security

The critical insight from this framework is that each layer becomes exponentially more effective when integrated with the others. Physical deterrence cameras that feed into transaction-indexed video monitoring are far more effective than standalone recording. Compliance enforcement that generates audit trail data feeds directly into the inventory intelligence layer. Exception-based transaction monitoring that triggers camera review closes the loop between what the register recorded and what the camera saw.

Employee Theft vs. External Theft: Different Technology Responses

Loss prevention technology should be calibrated to the actual source distribution of shrink in a given store. External theft, shoplifting, is primarily addressed through physical deterrence and floor monitoring. Employee theft and transaction manipulation require a different response: exception-based reporting, transaction-linked video, and behavioral pattern analysis.

For independent stores where a small number of trusted employees handle all transactions, the social dynamics of internal theft prevention are delicate. Many store owners are reluctant to implement monitoring that might signal distrust to long-term staff. The practical approach is to frame technology-enforced monitoring as a protective tool for employees as well, when transaction records are automatically linked to camera footage, false accusations become impossible to sustain in either direction. Employees who are performing their jobs correctly have nothing to fear from a system that creates objective records. Employees who are not will find that the system makes manipulation significantly more difficult.

Vendor and Delivery Fraud

An often-overlooked source of shrink in independent retail is vendor fraud during deliveries, short-shipping on invoiced quantities, substituting lower-grade products, or manipulating receiving records. For stores that receive daily deliveries of tobacco, beverages, and packaged goods, the cumulative impact of even small per-delivery discrepancies can be substantial over time.

Integrated receiving functions within the POS system, where incoming deliveries are scanned and logged against purchase orders, create a record that can be audited against invoices. When the receiving data is housed within the same system as transaction records and camera footage, discrepancies are much easier to identify and document for supplier dispute resolution.

Facial Recognition Technology: Understanding the Current Landscape

Facial recognition technology has entered the retail security conversation with significant momentum, though its deployment in independent retail raises both capability and regulatory questions that operators should understand before making technology decisions. Facial recognition systems in retail contexts typically function by comparing live camera feeds against a database of known shoplifters or individuals subject to trespass orders, generating an alert when a match is identified.

Current Capabilities and Limitations

Enterprise retailers have deployed facial recognition at scale with reported reductions in repeat shoplifting incidents. For independent operators, the practical barriers include the cost of maintaining and updating a meaningful database, the accuracy limitations of lower-cost camera hardware, and the potential for false positive identifications that create uncomfortable situations with legitimate customers.

The regulatory landscape for facial recognition in retail is actively evolving. Several states have enacted or are considering legislation that restricts commercial use of biometric data, including facial recognition, without explicit consent. Illinois, Texas, and Washington have existing biometric privacy laws, and additional state-level regulation is anticipated. Independent retailers considering facial recognition technology should consult with legal counsel regarding applicable state law before deployment.

A Practical Assessment for Independent Operators

For most independent convenience stores and groceries, the more immediate ROI from security camera integration comes from transaction-linked video monitoring and exception-based reporting rather than facial recognition. These capabilities address the most common and financially significant loss sources, employee theft, transaction manipulation, and vendor fraud, without the regulatory complexity that biometric data collection introduces. Facial recognition may become more accessible and better-regulated over time, but today’s independent operator is better served by ensuring their foundational integrated security architecture is solid first.

Choosing the Right Integrated POS Platform: A Decision Framework

With the principles of integrated security and compliance technology established, the practical question for an independent retailer is how to evaluate POS platforms against these criteria. The following framework focuses on the features that matter most for loss prevention and compliance outcomes in independent retail environments.

The Integrated Security POS Evaluation Matrix

Questions to Ask Before Committing to a POS Platform

Beyond the feature checklist, store owners evaluating POS platforms for loss prevention integration should ask several practical questions:

• Does the camera integration require a separate subscription or hardware purchase from a third-party vendor, and does the vendor have a track record of maintaining that integration when either system updates?
• Can the age verification system be configured by product category, so that alcohol and tobacco trigger different verification thresholds based on applicable state law?
• How are exception reports delivered, are they pushed to a mobile device in real time, or do they require logging into a dashboard to review?
• What happens to transaction data and camera footage when internet connectivity drops, is local storage maintained and automatically synced when connectivity resumes?
• Does the platform support the specific tobacco scan data format required by the manufacturer programs the store participates in?
• Is there dedicated support from people who understand independent retail operations, or does support route through a generic call center with no industry-specific knowledge?

For independent operators considering upgrading their infrastructure, the NRS point-of-sale platform addresses all of these criteria within a single integrated system designed specifically for the operational demands of convenience stores, grocery shops, and similar independent retail environments.

Regulatory Context: What Independent Retailers Must Know About Age Verification Laws

The legal framework around age verification for tobacco and alcohol sales is enforced at both the federal and state levels, with meaningful variation in minimum age requirements, inspection frequency, and penalty structures. Understanding this landscape helps store owners calibrate the urgency and specificity of their compliance technology investments.

Federal Tobacco Age Verification Requirements

The FDA requires retailers to verify the age of any tobacco purchaser who appears younger than 27 years old, a threshold that is deliberately conservative to account for the difficulty of accurately estimating age from appearance. Federal inspection programs conduct compliance checks using underage volunteers and can issue civil money penalties for first violations, with escalating consequences for repeat offenses including permit suspension.

The Tobacco 21 law, which raised the federal minimum purchase age to 21, has been in effect since late 2019. Retailers who have not updated their age verification thresholds in their POS systems since that change should audit their configuration immediately. A system still set to flag customers under 18 or under 19 is out of compliance with federal law and creates regulatory exposure regardless of what the cashier does manually.

State-Level Variations and Stricter Requirements

Several states have enacted tobacco and alcohol compliance requirements that are stricter than federal minimums, including mandatory ID checking for all customers regardless of apparent age, specific approved ID types, and electronic verification requirements for certain license categories. Retailers operating near state borders should be aware that the applicable law is the law of the state where the sale occurs, not the customer’s home state.

Alcohol age verification operates under a parallel but distinct regulatory framework, administered at the state level through alcohol control boards. The consequences of alcohol compliance violations can be even more severe than tobacco violations in many states, with immediate license suspension as a potential first-offense penalty. For stores that carry both tobacco and alcohol, having a unified POS-integrated verification system that handles both product categories within a single workflow is a significant operational advantage over managing two separate compliance processes.

Practical Implementation: Getting Your Store’s Security Integration Right

Knowing what integrated security technology does is one thing, implementing it effectively in a live retail environment is another. Store owners who approach the transition thoughtfully tend to see faster ROI and fewer operational disruptions than those who treat it as a pure technology swap.

Inventory and Shrink Baseline First

Before deploying new technology, establishing a clear baseline for current shrink and compliance performance gives the store owner a benchmark against which to measure improvement. This means conducting a thorough physical inventory count, reviewing the past 60 to 90 days of transaction records for patterns that suggest manipulation or error, and documenting any known compliance incidents. Without a baseline, it is impossible to quantify the ROI of the technology investment or identify which specific loss prevention measures are producing results.

For operators planning to open a new location or significantly restructure an existing one, having this kind of operational clarity built into the planning process from the beginning pays dividends. A well-structured grocery or convenience store business plan should include specific loss prevention technology as a capital line item from day one, not as an afterthought once shrink becomes a visible problem.

Staff Training That Reinforces Technology-Enforced Compliance

Integrated security technology does not eliminate the need for staff training, it changes the nature of what training needs to accomplish. Rather than training staff to remember and execute manual verification procedures (a high-failure approach), training in a technology-integrated environment focuses on:

• Understanding why the system prompts for ID scanning and what to do when a customer refuses to provide ID
• Handling customer disputes when the system blocks a sale, de-escalation language that explains the technology is enforcing the policy, not the individual cashier
• Recognizing and reporting system errors that might create gaps in the verification workflow
• Understanding the exception reporting dashboard and knowing how to escalate alerts to management
• Proper receiving procedures that feed accurate data into the inventory intelligence layer

Staff who understand the purpose and mechanics of the integrated system are more likely to use it correctly and less likely to attempt workarounds. Transparency about how the technology works, and why it protects both the business and the employees, tends to produce better compliance behavior than deploying monitoring technology covertly.

Remote Monitoring for Multi-Location and Absentee Operators

For store owners managing multiple locations or those who cannot maintain a constant physical presence at a single location, remote monitoring capabilities are among the most valuable features an integrated security POS system provides. Being able to review live camera feeds, pull up transaction-indexed video, and receive exception alerts on a mobile device from anywhere changes the practical economics of operating an independent retail business.

Operators who previously felt they needed to be physically present to maintain control of store operations often find that well-configured remote monitoring gives them better operational visibility than being on-site, because the technology surfaces relevant events systematically rather than requiring the owner to observe everything personally and hope to notice anomalies by chance.

Frequently Asked Questions

Key Takeaways for Independent Retail Operators

• Integration is the differentiator. Standalone cameras and standalone POS systems create reactive, fragmented security architectures. An integrated security camera POS system that links transaction data to video footage in real time enables proactive loss prevention and faster incident investigation.
• Technology-enforced age verification eliminates the human error problem. Manual ID checking degrades under time pressure and social friction. Built-in ID scanning that automatically blocks non-compliant transactions at the register is the only reliable path to consistent tobacco age verification POS compliance.
• Compliance documentation is as valuable as compliance itself. The automatic audit trail generated by technology-enforced verification provides a legal defense capability that no manual process can replicate. In a regulatory inspection or violation dispute, documented verification history matters.
• Exception-based reporting focuses attention where it matters. Rather than reviewing every transaction, smart reporting surfaces the small percentage of events that deviate from normal patterns, delivering loss prevention intelligence efficiently even for owners who cannot maintain constant physical presence.
• Tobacco scan data programs reward compliance investment. Stores with POS systems that support manufacturer scan data programs access per-carton financial benefits that generic platforms cannot unlock. The intersection of compliance and inventory intelligence creates value beyond just avoiding violations.
• Purpose-built platforms outperform generic retrofits. A convenience store POS system or grocery store point of sale software designed specifically for independent retail environments handles the full compliance and security stack natively. Generic flat-rate platforms require third-party integrations that create maintenance burdens and security gaps.
• Offline capability is not optional in independent retail. A high-transaction retail POS system that loses functionality when the internet drops is a business continuity risk. Local processing with automatic cloud sync is a baseline requirement, not a premium feature.

Baseline first, then measure. Implementing retail loss prevention technology without establishing a shrink and compliance baseline makes it impossible to quantify ROI or identify which specific measures are producing results. Take inventory and review transaction patterns before deployment.