Foxnet and BigBasket Partner on Security and IT for Dark Store Expansion
Foxnet Securitas is working with BigBasket on security and IT for its dark store expansion, providing surveillance, access control and site network infrastructure on a cloud-managed, template-driven model built for rapid multi-site rollout — the architectural pattern that has come to define Indian quick commerce, where Blinkit and Zepto set the operating tempo. It is a very different engineering problem from securing an office.
What a dark store is, and why it breaks traditional security integration
A dark store is a small, closed-to-the-public fulfilment node — typically a few thousand square feet in a residential catchment, stocked to serve orders within minutes by riders dispatched from the same door. Five characteristics make it hostile to how security is normally delivered:
- Sites open in weeks, not months. Lease to live is measured in weeks; security cannot be the long pole.
- Sites are small. The device count does not justify a design exercise, a bespoke BoQ or a project manager.
- Leases are short and locations provisional. Underperforming sites close, so capital sunk into fixed infrastructure is capital at risk.
- The estate is scattered. No campus, no shared riser, no single facility team.
- There is no local IT. Nobody on site will log into a recorder, check a disk or read a log.
The conventional answer — an NVR in a cupboard at every site, a local controller, a monitor on the manager’s desk — fails all five tests. It needs a site visit to configure, to retrieve footage and to diagnose a failed disk, and it produces an estate where nobody centrally knows which sites are actually recording. Across a hundred sites, silent recording failure is not an edge case; it is the steady state of an unmanaged NVR estate.
Why cloud-managed security is structurally the right fit
The case for cloud here is not about features. It is about the shape of the estate.
- Zero-touch provisioning. A bridge is shipped pre-registered. It powers up, connects, and the cameras behind it appear in the central console already assigned to the right site with the right retention policy. Commissioning becomes verification, not configuration.
- A repeatable site template. Camera views, user roles, schedules, alert rules and retention are defined once and applied to every new site. Site 60 matches site 6 because it inherits.
- Central health monitoring. The decisive central view is not footage but status: which sites are online, which cameras have stopped, which bridge is failing to upload.
- Hardware that survives closure. Cameras, bridges, readers and switches are recovered, wiped, re-registered and redeployed. The asset follows the network, not the lease.
Foxnet applies the reasoning it uses on enterprise cloud deployments — including the Brivo and Eagle Eye deployment at Rippling’s Hyderabad office — with emphasis moved from one high-specification site to a repeatable one. The surveillance and access control layers are cloud-managed; the site network and cabling is deliberately minimal and standardised.
The loss vectors that actually matter in quick commerce
Generic security arguments do not survive contact with a P&L. Four exposures drive the business case in this format.
Shrinkage at pick-and-pack
The pick face is where inventory becomes untraceable. Losses here are rarely dramatic theft; they are small, repeated and hard to attribute, surfacing as variance weeks later. Overhead coverage of the pick aisles and packing bench, time-synchronised so footage joins to an order timestamp, turns a variance report into a reviewable event.
Rider access at the handover point
The handover door is the highest-traffic boundary in the building and the least controllable, because the people crossing it are numerous, transient and not employees. The design principle is that riders never need to enter storage: a defined handover zone, an access-controlled boundary into the store, and camera coverage of both sides. Access events correlated with video answer who was inside and when — the question that matters after a discrepancy.
Cold-chain integrity
Grocery carries an exposure general merchandise does not. Chiller doors left open, a unit failing overnight or stock left out of temperature during a rush destroy inventory and create a food-safety exposure. Coverage of cold-storage doors, plus alerting on door-open duration through the access and alarm layer, converts a loss found at stock count into an alert raised while it can still be acted on.
Dispute resolution on order accuracy
Every operator carries a running volume of “item missing” claims and refunds them largely on trust. Timestamped video of the packing bench lets disputes be adjudicated on evidence, and shows whether the cause is a process problem, a specific shift or a claims pattern. Retention should be set deliberately — long enough for the dispute window, no longer — consistent with the purpose- and storage-limitation expectations of the Digital Personal Data Protection Act 2023, which treats CCTV footage of identifiable people as personal data. A documented visitor and contractor management process keeps that handling defensible rather than incidental.
“In a rollout like this the engineering is not in the individual store, it is in the kit and the method. Design one site properly — camera positions, cable schedule, switch, bridge, reader, labelling, test sheet — so any team in any city gets the same result. Design a hundred sites and you have created a hundred chances to be inconsistent.”
— Pulkit Verma, Co-Founder, Foxnet Securitas
The site kit: the real deliverable in a multi-site rollout
The most useful thing an integrator can produce for a high-growth estate is not a design but a kit and a method: a fixed, versioned bill of materials with a fixed installation sequence. A defined camera set with positions specified relative to the pick face, packing bench, cold store and handover door; one switch specification with PoE headroom calculated once; a standard bridge, controller and reader set; a fixed cable and labelling schedule; and a one-page commissioning test sheet completed before the team leaves site.
What that buys is disproportionate. Procurement becomes a volume order against one SKU list rather than a hundred small BoQs. Installers are briefed once and deployed anywhere. Estimating is accurate because cost per site is known. Spares are common, and diagnosis is faster because every site is wired identically. When the kit improves, the improvement is versioned and rolled forward.
Variance is then a small set of named exceptions — an unusually long site, a first-floor unit, a location with no viable broadband — rather than bespoke design. That is the difference between a rollout that gets faster with each site and one that gets slower.
Why BigBasket is a genuinely different competitive proposition
India’s dark-store footprint now runs into the thousands of sites and continues to expand as operators push into more cities and deeper into existing ones. Blinkit, Zepto and Swiggy Instamart have driven that build-out; BigBasket is scaling its own quick-commerce operation against them. Directionally, the market is still adding stores faster than it is consolidating them.
BigBasket enters from a structurally different position. It began as a scheduled-delivery grocery business, so it already operates supply chain competence the pure-play instant-delivery entrants had to build from nothing: sourcing relationships with farmers and FMCG brands, private-label ranges, cold-chain handling and category management across a far wider catalogue than a convenience-led model carries. Tata ownership adds patient capital and a group retail ecosystem — the ability to fund a build-out through a long competitive phase without each cohort of stores paying back on a venture timetable.
The strategic argument is that quick commerce is converging on full grocery rather than staying at convenience, and that assortment depth will matter more as the format matures than delivery time alone. If that holds, an operator with an existing grocery supply chain defends a harder-to-copy asset than one with a faster rider network. It is not a certainty — execution speed and store density are real incumbent advantages — but it is why this expansion is worth watching as something other than a fourth entrant.
For a security and IT partner the implication is simple: the estate will grow, churn and disperse for years, and anything requiring a specialist site visit will not survive that.
“Multi-city rollouts fail on process, not on product. What we hold ourselves to is that every store is commissioned against the same test sheet, that the as-built exists before the team leaves site, and that the central health view tells us a camera has dropped before operations notices. At this cadence you cannot inspect quality in afterwards.”
— Amit Sadhu, Head of India Operations, Foxnet Securitas
Foxnet does not publish store counts, schedules or commercial terms for client programmes; scale references here are directional.
About Foxnet Securitas. Foxnet Securitas Pvt. Ltd. is an integrated physical security systems integrator and one of India’s fastest growing system integrators, with field teams across 15+ Indian cities. Foxnet designs, installs, commissions and maintains access control, video surveillance, fire alarm and life-safety, public addressing, audio-visual and IT infrastructure systems for clients in fintech and BFSI, healthcare, manufacturing, government, enterprise campuses, warehousing and logistics, and IT/ITES. Foxnet brought Brivo cloud access control to India and works with OEMs including Brivo, Honeywell, Notifier, EST and Edwards.