Argus
For
Argus Systems AG, Zug, Switzerland
Physical security & critical infrastructure - NDA
Argus sells hardware-agnostic video and audio monitoring to logistics operators, industrial sites and utilities across the DACH region. The cameras worked. The recordings existed. But when something actually happened, retrieving defensible evidence meant a security lead, a DVR, a file share and roughly half an hour, inside a regulatory window that gives you twenty-four. I was brought in as the sole product designer to close that gap, and I covered here bellow one feature all the way down: Incident & Evidence Review.
⦿ Role
⦿ Team
⦿ Timeline
Jun – Dec 2025
The challenge
Argus had a working monitoring product and a real compliance problem sitting on top of it. Under the EU NIS2 directive, an operator of essential services has 24 hours to file an early warning once an incident is classified as significant, and must later produce a defensible record of who saw what and when. Under the revised Swiss FADP, the audio these devices capture can qualify as sensitive personal data. None of that obligation lived in the software. It lived in a DVR, a shared drive, and whoever happened to be on shift.
The solution
My role
Sole product designer across all six months, discovery, research, IA, interaction design, visual system, two rounds of usability testing, and the engineering handoff. I also built the design system as code, and a React foundation that the in-house engineers inherited, which is why roughly a third of this case study is about tokens, component contracts and contrast maths rather than screens.
< 4 min
To retrieve and export defensible incident evidence, down from ~35 minutes of manual DVR and file-share work.
12 min
To bring a brand new camera or microphone online, down from 2.3 days of ticket-based provisioning.
0 / 14
Incidents classified as potentially NIS2-reportable that missed the 24-hour early-warning window.
01 · NIS2
The EU's NIS2 directive had a transposition deadline of 17 October 2024. For in-scope entities, once an incident is classified as significant, an early warning is due within 24 hours and a full notification within 72. The clock does not start on every motion event: it starts on classification. That distinction turned out to be the single most important thing to get right in the interface, because the previous workflow gave nobody a moment where classification visibly happened.
02 · revFADP
Switzerland's revised Federal Act on Data Protection has been in force since 1 September 2023. Audio capture is always personal data; it may qualify as biometric data where it is used to uniquely identify a person. That conditional is doing real work: it means residency and retention are decisions someone has to make deliberately, per device, at the moment of installation. So I moved them there, instead of leaving them as a global default nobody reviews.
Reviewed manually · Avg. reply < 24h
