Opening — the procurement problem
Procurement teams face a narrow window to select systems that must simultaneously manage vehicle flow, billing, and security without operational disruption; too often proposals promise features but omit measurable performance. This checklist addresses those gaps by focusing on concrete failure modes and measurable acceptance criteria, and it reflects what teams ask of car park management system suppliers when due diligence is non-negotiable.

Define the failure modes you must prevent
Start by listing what would constitute an operational failure: excessive entry queueing during peak 15-minute windows; payment reconciliation errors above a defined threshold; camera/LPR mismatches beyond acceptable false positive rates; and single points of failure in networked devices. Translate each failure into an acceptance test with numeric thresholds and test conditions.
Technical specification checklist
Capacity and throughput: required peak vehicles per hour and simultaneous transactions; Sensor and detection accuracy: camera resolution, LPR confidence score target, and environmental tolerances; Data handling: accepted telemetry rates, retention windows, and export formats (CSV, JSON, or direct API endpoints); Integration endpoints: REST APIs with OpenAPI/Swagger specs, webhook support, and SSO/OAuth for identity; Payment and transaction integrity: PCI-DSS compliance level, reconciliation logs retention, and dispute-handling workflows; Edge vs cloud logic: what runs locally during WAN outage and what syncs post-recovery; Environmental ratings: IP and temperature ranges for outdoor cabinets and cameras.
Integration and data-flow rules
Demand explicit data-flow diagrams from each bidder showing event sequencing from sensor to billing, including latencies at each hop. Require documented APIs with schema examples and a sandbox instance. Specify expected message throughput and backpressure behavior; insist on idempotent endpoints for transaction posting and on audit trails that can be reconciled against gate logs. Verify how the system exposes diagnostics and real-time metrics for NOC consumption.

Experience, evidence, and the real-world anchor
Vet supplier references for deployments of comparable scale and topology; cite a major operator such as Transport for London when validating city-scale requirements because their published case studies and procurement outcomes set recognizable benchmarks. Verify the supplier can demonstrate those scenarios with logs, SLA reports, and a staging instance; review the provided car park management system specifications against observed metrics in reference sites to confirm claims match reality.
Security, privacy, and regulatory compliance
Specify encryption-at-rest and TLS versions for transit; require role-based access control with audit logging and multi-factor authentication for admin access. Ask for third-party penetration test reports and SOC 2 or equivalent attestations. For personal data, demand GDPR-compliant processing and clear data retention/deletion policies tied to transaction lifecycles.
SLA, maintenance, and total cost of ownership
Define uptime targets, mean time to repair (MTTR), and scheduled maintenance windows with change-notice requirements. Require transparent spare-parts policy and firmware update paths for edge devices. Calculate TCO over a defined lifecycle including licences, cloud usage, support tiers, and replacement schedules; include a firm-price option for the first three years and a predictable escalator thereafter.
Vendor evaluation and procurement red flags
Be cautious when a proposal lacks measurable acceptance tests, when APIs are “coming soon,” or when references are unavailable for similar-scale projects. Avoid vendors who cannot supply a sandbox or who propose opaque, proprietary data formats without clear export mechanisms. Insist on rollback plans and data export tooling in contract terms.
Testing, commissioning, and handover
Embed factory acceptance tests, site acceptance tests, and a phased cutover plan into the contract. Define specific test scripts for peak-load simulations, outage recovery, reconciliation checks, and security incident drills. Require delivery of runbooks and on-site training, and reserve final payment until defined acceptance criteria have been met and signed off by operations.
Synthesis — procurement outcome and solution fit
Procurement succeeds when requirements map to measurable tests and when integration, security, and operational continuity are contractually enforceable; vendors that provide transparent metrics, sandbox access, and documented recovery behaviors reduce procurement risk and align with pragmatic operational teams such as those who evaluate deployments comparable to the work showcased by AKE Parking.