How owners keep the record of what is on the wall at their largest customers, and turn it into next year’s plan, whether they ever sell or not.
Sometime in the next few weeks, a facilities manager at one of your longest-standing customers will be asked what the building needs next year.
They will answer for the roof and the chillers from records somebody keeps. For the security and fire systems, they will answer from whatever they were last told. The company that told them, with a date and a reason, is the one they plan with.
Every recurring account has two records. The first is the billing record: the agreement, the invoices, and the payment history. It gets kept because the bank and the accountant ask for it. The second is the site record: what is actually installed on the customer’s walls, when it went in, on what platform, and how much life it has left. In most established companies the first record is in the software and the second is with the technicians who know it. That is not neglect. It is twenty years of jobs, each one filed the way jobs were filed at the time, and the people who did them still on the payroll, able to answer almost any question about them from memory.
A site record moves the second one onto paper. It gets written a site at a time, mostly on visits already scheduled, it starts with the fifty largest accounts, and it pays off whether you ever sell the company or not.
What is a site record?
One page per site, held the same way for every site. The plain version has eight lines:
- The panel: intrusion or fire, make, model, firmware, and the year it was installed.
- The communication path: cellular, network, or a telephone line, and which central station receives the signal.
- Video: camera count, the recorder or the cloud service, storage in days, and the software version.
- Access control: the head-end, the number of doors, and the computer it runs on, with its operating system.
- Software and licenses: what is on subscription and the month each one renews.
- Manufacturer status: supported, end of sale announced, or end of support, with the date.
- Service history: the last inspection, the open deficiencies, and the last three service calls.
- The customer’s people: who owns the system day to day, who signs off on capital, and the month their budget closes.
Half of this is already on the last inspection report and the last service ticket. The other half a senior technician can fill in standing in the electrical room, on the next visit that is already on the schedule. Fifty pages is a real claim on a senior technician’s time, and it is spread across a season of calls that were going to happen anyway. Written the same way for every site, the pages answer questions the billing software cannot: how many panels still report over a phone line, which access control servers run an operating system that no longer receives security updates, and which recorders are past the manufacturer’s support date.
Each of those three questions comes with a date, and all three dates have already passed.
The dates already on the calendar
Windows 10 reached the end of support on October 14, 2025. Microsoft’s own notice says that computers still running it no longer receive security updates or fixes. A workstation installed in 2018 or 2019 as the head-end for access control or video often shipped with it. Some of those machines run a long-term servicing edition that Microsoft still supports, some were upgraded in place, and some have been running without updates since last October. The site record says which is which, one site at a time, and it answers the customer’s IT department before they ask.
The telephone line under a fire alarm communicator runs on a different clock. In March 2025 the FCC eased the rules carriers follow to retire copper lines and discontinue the legacy services that run over them. A panel that still reports over phone lines is reporting over a service its carrier is now freer to retire, and a dedicated alarm line is a monthly bill with one job.
Companies serving fire and life safety accounts told SDM Magazine in August 2026 that modernization is being driven by code changes, the retirement of the phone network, and customers asking for it.
The third date belongs to the manufacturers. Panels and cameras reach end of sale and then end of support on a published schedule, and several access control product lines from one major manufacturer reached the end of telephone technical support in the first half of 2026.
The reasoning behind those schedules is now written down in public. In February 2026 the federal government’s cybersecurity agency directed federal agencies to remove or replace internet-facing network equipment that no longer receives updates from its manufacturer, describing the exposure as substantial and constant. No commercial customer runs on federal directives. But the reasoning travels, and a customer who learns the status of their own equipment from their security company hears it from the right person.
The page the customer carries into the budget meeting
The site record produces one page per customer, and it is the page the facilities manager was hoping someone would hand them.
What is installed. What has reached or is approaching end of support, with the date. What you recommend, and in which year. A quote for the items that belong in next year, and a range for the ones that belong in the year after. The page also says what is fine as it is, which at most sites is most of the page, and that is the line customers remember. Nothing on it is marked urgent, which is the point. A customer who hears about a 2028 item in the fall of 2026 gets to make an unhurried decision. In the companies we know, the unhurried decision usually goes to the company that raised it.
The page is written for the customer’s calendar, which is why the eighth line on the site record is the month their budget closes. For most of the commercial customers we know, that month is in the fall. For a school district or a city, it is often the spring, ahead of a fiscal year that starts in July. A page that arrives after the customer’s budget cycle closes waits a year. A page that arrives in the week the server fails is not a plan at all. It is an emergency purchase, priced and decided in a hurry, and the customer remembers the hurry longer than they remember the fix.
The page is a technician’s work. The person who has serviced the site for years writes the first draft, because they are the one who knows the panel is on its last board and which door controller has been reset twice this year, and the page says who wrote it, so the customer knows whose knowledge they are reading. The depth chart asked which seats still keep their knowledge in one head. A site page is that knowledge in a place the whole company can see.
What the record does for retention
The attrition ledger records a reason beside every customer who leaves, and two of the reasons filed under service or competitor begin on the wall: a system that failed before its replacement had been planned, and an upgrade proposal from someone else that reached the customer first. A customer holding a plan they were handed a year earlier makes the first call to you, and has less reason to hear the second one out.
Service calls read differently with the record beside them. The durable dollar asked whether each account pays for itself, and the sites that absorb the most technician hours are usually the ones running the oldest equipment. With the two facts on the same page, the answer is rarely to walk away from the account. It is to put the equipment in the customer’s budget, so the site stays secure and the system keeps working.
The expansion line starts here
We wrote in the revenue bridge that two of the growth lines come from customers already on the books, and that each one needs a name and a month beside it. The site record is where those names come from.
Read across fifty pages and the expansion line writes itself. The access control head-ends that need a new server or a move to a hosted platform, which SDM’s April 2026 access control report called a notable contributor to the market’s growth in 2025. The recorders that are candidates for cloud video, a migration one manufacturer described to SDM in February 2026 as having reached only the tip of the iceberg. The fire communicators to move off phone lines. The deficiencies from last year’s inspection that are still open. One dealer on SDM’s 2026 forecast panel described selling more than $100,000 of new technology to existing customers over a few weeks. Each item on the list has a site, a customer contact, a budget month, and a technician who already knows the building.
That is the difference between a growth percent and a list.
What a serious reader sees
The customer retention record is the first thing we ask for when we read a company. Not long after, we ask what is installed at its largest accounts and how old it is. The answer tells us two things the financial statements cannot: whether the recurring revenue is attached to systems with a future in front of them, and whether the company’s plan for next year rests on its own records.
A site record that answers in an afternoon says the company knows its customers’ buildings as well as it knows its own invoices. We wrote in the five fundamentals that drive the value of a commercial security company that the fifth is a story the numbers back up. The site record is that story with the customer’s equipment in it, and a company that keeps it has part of its next two years already written, in its own hand.
Where we stand
A record of what is on the customer’s walls is a company saying it intends to be there when the equipment needs replacing. We built Halo Service Partners on the conviction that in commercial security, trust is the product, and that record is the conviction in practice. Continuity is the center of how we partner, because the trusted local company is the thing worth protecting. The name stays, the team stays, and the customer relationships stay. What changes is what stands behind them: shared resources across the network, technology and finance among them, so an owner planning a year of site visits and customer budget pages is not doing it alone, and a company can take the step it has been weighing. Founders choose their own path forward: step back, stay on to lead, or take a larger role across the network.
ProTech Security and Verified Security both run under their own names today, with the leaders and teams who built them still serving the customers who know them.
If you’re thinking about the future
If you own a commercial security company and you are thinking about its future, in any direction, we are glad to compare notes: on what is installed at your largest accounts, on the market, and on what your next chapter could look like. Start the record yourself first. Whatever the first pages show, that is where the conversation starts.