Sourcing CCTV and Security Cameras From China: Sensor Size, the Cloud Question and Compliance You Cannot Ignore

The security camera market from China is strange. On one hand you have Hikvision and Dahua, two of the largest and most capable manufacturers on the planet, selling genuinely excellent hardware. On the other hand you have a long tail of Shenzhen assemblers that bolt a decent sensor onto a cheap board, run it through a Chinese cloud, and sell it as an enterprise camera. Both exist, both ship in volume, and the difference is not always obvious from the outside.

If you are buying CCTV cameras for resale or for a project, the hard work is not picking a resolution. It is picking something that will not embarrass you on a compliance questionnaire and will not become a brick after a firmware update. Here is the practical version.

Resolution is not image quality

Everyone sells "5MP" or "4K." Resolution tells you almost nothing about what the camera will actually record at night. The three numbers that decide real performance are sensor size, lens aperture and the processor's ability to denoise.

A 1/2.8" sensor with a good f/1.6 lens in a cheap 4K camera will beat the pants off a 1/3" sensor behind a plastic lens, even at the same pixel count. When pixels get smaller on the same sensor, each pixel collects less light, and night images turn to mush. Ask for the sensor model (Sony Starvis or similar is a strong signal) and the aperture. If the supplier only talks megapixels, they are selling megapixels.

The other number people ignore is the lens field of view in degrees, not millimetres. A 2.8mm lens is wide, an 8mm is narrow, but the actual angle depends on sensor size — so always ask for the horizontal angle of view you will actually get.

The software and cloud question

This is where Chinese cameras diverge hard from Western brands. Many inexpensive cameras only work with a phone app that routes video through a server abroad. For a home user that is fine until the service shuts down. For a commercial buyer it is a data-residency and privacy problem.

Ask, before you buy: does the camera record locally to SD card or NVR, does it support ONVIF, and can it stream to an independent platform? ONVIF support is the difference between a camera you control and a camera that controls you. If a vendor cannot confirm ONVIF Profile S, treat the product as a closed appliance.

Also ask whether the camera phones home. Some cheap firmware sends thumbnails to a Chinese P2P service by default. This is not always malicious, but it is always a conversation you should have with your end customer rather than discover later.

Compliance flags you cannot ignore

If you are selling into the United States, particularly to government, defense, critical infrastructure or anything receiving federal funds, NDAA Section 889 and the FCC Covered List matter enormously. Hikvision and Dahua are on the FCC Covered List, which affects their authorization for equipment in the US. If you want to sell into those channels, you need a supplier whose brand and ODM are clear of these restrictions, and you need documentation, not a verbal assurance. This is not a reason to avoid Chinese cameras — it is a reason to know exactly whose silicon and whose brand you are buying.

For Europe, look for CE marking and confirm whether it is self-declared or backed by a notified body, and check RoHS and, increasingly, the Cyber Resilience Act trajectory. For anything medical, industrial, or connected to public networks, the paperwork is the product.

Camera types and where they fit

Bullet cameras are the workhorse for outdoor coverage — long range, visible deterrent. Dome cameras are more discreet and harder to tamper with, good for indoor retail. PTZ (pan-tilt-zoom) cameras cover large areas and follow motion, but they cost more and have mechanical parts that fail. Turret cameras split the difference and have become very popular for their lower IR reflection. Fixed is almost always more reliable than moving. Do not buy PTZ just because it looks impressive in a demo.

Night vision and IR, honestly

IR distance claims are wildly optimistic. "30m IR" usually means 30m to a white wall in perfect conditions. Real usable range is often half that. Look at the IR LED count and the wavelength (850nm gives a faint red glow, 940nm is invisible but has less range). For license plate or facial detail at night, you need either strong IR, white-light illumination, or a camera with genuinely good low-light sensitivity. Ask for a sample of the night image in the actual location, not a manufacturer's hero shot.

Storage, recording and PoE

Match the recorder to the camera count and the retention period. A 4-channel NVR cannot record 8 cameras, and a hard drive sized for seven days may give you three once motion-heavy scenes fill it. PoE (Power over Ethernet) simplifies wiring but you need a PoE switch with enough total wattage — a camera that draws 12W times eight cameras exceeds many consumer switches.

For weatherproofing, check the IP rating (IP66 or IP67 for outdoor) and the operating temperature range, especially if the buyer is in a cold climate. Heat is the other enemy: metal-bodied cameras last longer than plastic ones because they shed heat better.

The sourcing spec I would write

Sensor model and size, plus minimum illumination (lux).
Lens aperture and horizontal field of view in degrees.
Real night-image sample at the target distance, not a marketing image.
ONVIF support confirmed, and whether local recording works without the cloud.
Compliance position: brand, ODM, CE/FCC status, NDAA/Covered List exposure if US government is in play.
IP rating and operating temperature range.
PoE standard and power draw.
Firmware update policy: can you update offline, and does the camera function if the manufacturer's cloud goes away?
Warranty and RMA process for returns.

The uncomfortable truth is that a lot of the market is fine for a parking lot in a low-risk setting and completely unsuitable for a client with procurement rules. Your job as the buyer is to know which one you are selling. Get the sensor and lens spec, confirm the cloud and ONVIF story, sort out compliance before the PO, and test a night image yourself. Everything else is marketing.