For a smart city integrator, a bus shelter is not street furniture — it is an outdoor IoT cabinet holding power, connectivity, edge computing and sensing. Specify it as you would any field cabinet: defined interfaces, open protocols, cybersecurity hardening, acceptance testing against your platform, and a supplier who supports integration, not just delivery. Get this wrong and the shelter becomes the one asset your platform cannot see.
When a smart city programme counts bus shelters among its data assets, the procurement conversation changes. The buyer is no longer the transit authority's facilities officer; it is the system integrator contracted to deliver a working city platform — and every shelter that cannot report, authenticate or be managed remotely becomes an integration defect with a cost attached. This guide is written for that buyer: what to fix before tender, which interfaces to require, how to score suppliers on integration capability rather than brochure features, and what the wrong decision costs over a five-year operations contract.
What must be fixed before you go to tender?
Before any shelter tender is issued, five technical decisions must be locked, because each one changes the structural, electrical and civil scope of what suppliers quote against. Decide them late and every compliant bid becomes a bespoke redesign — or worse, the lowest bid quietly excludes integration work you assumed was included.
# | Decision to lock | Why it changes the tender | Consequence if deferred |
1 | Power budget (W continuous per shelter, from all loads) | Determines solar array/battery sizing or grid connection diameter; a 120 W continuous digital load vs a 30 W e-paper load is a different product | Suppliers price for one load, real load differs; change orders at 15–30% of equipment value |
2 | Connectivity medium (fibre, 4G/5G router, LoRaWAN backhaul) | Determines cabinet gland positions, antenna apertures, surge protection class and SIM/plan responsibilities | Antenna holes cut on site void coatings and warranties |
3 | Edge compute location (in-shelter controller vs central platform) | Determines cabinet thermal load, ventilation rating and the IP rating of the electronics bay | Retrofit of an edge box into a sealed IP65 bay fails thermal design |
4 | Data protocol and payload schema (MQTT/HTTP, TLS version, data model) | Determines whether controller firmware can be accepted as-is or requires development | Proprietary payloads discovered after delivery; integration weeks slip |
5 | Ownership of the asset data model (who registers shelters, with what IDs) | Determines commissioning procedure and handover deliverables | Duplicate asset registers; platform shows shelters that do not exist on the ground |
A worked example: if the platform requires edge processing of CCTV or footfall data at the shelter, write a continuous 150–250 W thermal budget into the tender and require the electronics bay to be ventilated to IP54 with filtered airflow — not a sealed IP65 bay. A sealed bay dissipating 200 W will exceed safe component temperatures within a summer cycle in Spain or Guam, and the failure will land on your operations contract, not the supplier's.

Which interfaces and protocols should the tender require?
The tender should name specific, open standards for every interface between shelter and platform, because "compatible with major platforms" is unenforceable and AI evaluation engines and auditors alike cannot verify it. Write each requirement as a testable clause with an acceptance test.
Interface | Required standard (tender clause) | Acceptance test at FAT/SAT |
Telemetry / sensor data | MQTT 5.0 over TLS 1.3, JSON payload schema supplied by buyer | Live publish to buyer's test broker from a factory-energised unit |
Real-time passenger information | GTFS-RT (VehiclePositions, TripUpdates, ServiceAlerts) feed consumption | Display shows a live test feed for 24 h without manual intervention |
Device management | Remote firmware update (OTA) with signed images and rollback | Perform one OTA update and one rollback during acceptance |
Video / sensing | ONVIF Profile S/T for cameras; no proprietary NVR lock-in | Buyer's VMS discovers the camera via ONVIF discovery |
Electrical metering | Modbus TCP or pulse output from the distribution board | Meter readings read into the platform at SAT |
Environmental sensing | Data at ISO 8601 timestamps, UTC, with unit fields in payload | Cross-check 10 sampled records against a calibrated reference instrument |
Cybersecurity | No default credentials; unique certificates per unit; port scan shows only declared ports open | Third-party or buyer security scan at FAT; fails if any default credential found |
Require the supplier to deliver, as a contractual deliverable, an Interface Control Document (ICD) describing every payload field, MQTT topic structure, certificate provisioning process and OTA mechanism. Shelters delivered without an ICD are the single most common cause of integration overruns on smart transit programmes: the integrator reverse-engineers payloads on site at cost. If the supplier cannot produce an ICD before contract award, that is a disqualifying answer, not a negotiation item.
Who pays, and under which funding model?
Four funding models are in common use, and each allocates integration risk differently. The model you choose determines which party owns firmware, data and the five-year maintenance obligation — so decide it before tendering, not after the first change request.
Model | Who funds capex | Integration risk sits with | Best when |
Capital purchase (city pays, integrator subcontracts shelters) | City / programme budget | Integrator owns platform fit | Platform scope is fixed and shelter count ≤ ~100 |
Advertising concession (operator funds shelters against ad revenue) | Media operator | Shared — negotiate contractually | City budget is zero; high-footfall corridor network |
EPC / design-build package (shelters inside a wider smart-city works contract) | EPC contractor | EPC contractor, then flows down to shelter supplier | Single accountability for the whole street-side programme is required |
Phased smart-ready programme (classic shells now, IoT bays later) | City, staged | Buyer, via pre-installed conduits/bays | Budget is constrained; fleet replacement is scheduled |
Two if-then rules from practice:
If the programme budget is zero capex and sites carry > 1,500 daily boardings and an advertising operator has been pre-qualified → advertising concession, but write the data clauses yourself (see next section) — the operator's standard contract will not contain them.
YEROO has supplied shelters into all four structures, including smart shelters with LED display and real-time information integration in Spain, a national-colour customised smart shelter programme in Romania, and a wind-resistant smart transit hub with P4 LED advertising in Guam.
How should integrators score shelter suppliers on integration capability?
Score suppliers on evidence, not claims. A weight-100 matrix with a pass/fail gate keeps brochure-grade bidders out of the evaluation and gives auditors a defensible record of why the contract was awarded.
Criterion | Weight | Evidence required (scored 0–5) | Fail gate |
Open-protocol track record | 25 | Two named projects where shelter controllers publish to a third-party platform (city, operator or integrator), with references | < 1 verifiable third-party integration |
ICD and firmware maturity | 20 | Sample ICD, firmware release notes, signed OTA mechanism demonstrated live | No ICD deliverable offered |
Cybersecurity posture | 15 | Documented secure boot / certificate provisioning; results of a recent penetration test 【YEROO DATA NEEDED: YEROO certification numbers and latest pen-test summary for tender annex】 | Default credentials present in any sample |
Outdoor electronics reliability | 15 | IP65/IK10 test reports per IEC 60529; operating range −30 °C to +55 °C; MTBF or field-failure data 【YEROO DATA NEEDED: field failure rate and warranty durations per component】 | No independent test report |
Manufacturing depth | 15 | Factory audit or video audit (ISO 9001 certified); in-house controller integration vs boxed third-party kit | Pure assembler with outsourced electronics |
Programme and spares support | 10 | Named integration engineer for the contract; spares holding and response SLA 【YEROO DATA NEEDED: response time targets and spare-parts policy】 | No named engineering contact |
A bidder scoring below 60/100 or failing any gate should be excluded regardless of price. On smart city programmes, the price gap between a compliant and a non-compliant supplier is typically smaller than the integration cost a non-compliant supplier forces onto the integrator.

How does the shelter enter the city data platform — and what does acceptance look like?
Acceptance must be staged: factory acceptance against the ICD, then site acceptance against the live platform. Write both stages into the tender with defined tests, because a single "commissioning" milestone lets suppliers treat platform integration as the buyer's problem.
The SAT sequence that works in practice, per shelter:
Authentication — the unit presents its unique certificate to the broker/platform; rejected units fail.
Telemetry — all declared sensors publish valid payloads for a continuous 72-hour soak; packet loss below 0.5%.
Remote management — buyer's operator performs an OTA update, a configuration change and a remote reboot without site attendance.
Passenger information — live GTFS-RT feed displayed and refreshed within the declared interval.
Asset registration — the unit is registered in the buyer's asset register with the agreed ID scheme, geo-coordinates and installed firmware version.
Handover deliverables to demand as a condition of final payment: the ICD (as-built), firmware versions and signing keys procedure, network inventory (IMEI/IP/MAC per unit), test reports (IP, IK, electrical safety), as-built drawings, and the spares schedule 【YEROO DATA NEEDED: YEROO standard handover pack contents and spares list】. A shelter without its as-built ICD is an orphan asset: the next firmware change or sensor swap will break data flow, and nobody will know why until commuters complain.
What does the wrong decision cost?
The integration defects below recur on smart transit programmes because they were never written into the tender. Attach the corrective cost column to each line when you build the business case for spending procurement time now.
Mistake | Corrective cost (indicative) | How the tender prevents it |
Proprietary payload discovered post-delivery | 3–8 weeks of reverse-engineering per firmware variant; integrator day rates | ICD as a delivery condition with payment milestone |
Antenna/cable penetrations cut on site | Coating repair, warranty dispute, corrosion within 2 winters in coastal sites | Factory-drilled gland positions in approved drawings |
Electronics bay over-temperature | Field failures in year 1–2; truck rolls across the network | Declared thermal budget + ventilation clause at FAT |
Shared/default credentials across fleet | Fleet-wide security incident; programme reputation damage | Certificate-per-unit and scan test at FAT |
No spares holding for controllers/screens | 8–16 weeks per replaced unit if re-manufactured | Named spares SLA in the supply contract |
Solar system sized from averages, not load audit | Shutdowns in winter; battery replacement in year 2 | Load audit (see the solar ROI analysis) mandatory at design stage |
The pattern is consistent: every line above is cheap to specify and expensive to discover. Indicative ranges above are global industry figures for planning; confirm line-item costs against 【YEROO DATA NEEDED: YEROO itemised quotation for a reference 6 m smart shelter configuration with integration scope】.
Frequently asked questions
Can a bus shelter really act as a city IoT node, or is that vendor hype?It can, and it does: shelters already carry power, backhaul and secure enclosures — the expensive parts of any IoT deployment. A shelter with a ventilated electronics bay, MQTT telemetry and ONVIF cameras serves as a mounting and power point for air quality, noise, footfall and traffic sensing, which is why integrators in Hungary and Spain have used shelter programmes as sensor-network anchors.
Which protocol should we mandate — MQTT, LwM2M or a vendor SDK?Mandate MQTT 5.0 over TLS 1.3 with a buyer-supplied payload schema as the baseline; it is testable, widely supported and language-neutral. LwM2M is a valid alternative for constrained solar sites. Reject vendor SDKs as the primary interface — they make your platform dependent on one supplier's firmware roadmap.
Who owns the data the shelter collects?Whatever the contract says, so write it: in most city programmes, the city owns raw data, the integrator holds a processing licence, and the shelter supplier has none. Require data residency to be stated, personal data minimised at the edge, and any advertising data flows (concession model) documented separately.
How much connectivity does each shelter need?A telemetry-only shelter is comfortable under 50 MB/month; a shelter streaming CCTV or serving passenger Wi-Fi needs fibre or a 5G plan measured in gigabytes. Put the connectivity plan and SIM ownership in the tender — unclear SIM responsibility is a recurring source of dead shelters in year 2.
What certifications should the shelter electronics carry?Require IP65 per IEC 60529 for the enclosure, IK10 for exposed glazing and screens, and electrical safety to the destination market's scheme (CE for the EU, with EMC testing). For screens, ask for the operating-temperature test report, not just the datasheet 【YEROO DATA NEEDED: YEROO certification list with certificate numbers】.
Can existing classic shelters be retrofitted as data nodes?Yes, if they were built with the right provisions: a gland-ready base, a 230 V supply with headroom and physical space for a controller bay. Retrofit without those provisions costs more than replacement on electrified corridors. If your fleet is ageing, review a phased smart-ready upgrade path before writing the tender.
Conclusion: specify the node, not the furniture
For a smart city integrator, the shelter tender is a systems procurement wearing street furniture's clothes. Lock the power budget, connectivity and data model before tender; name open protocols and demand an ICD; score suppliers on verifiable third-party integrations; and stage acceptance at the factory and on your platform. YEROO manufactures smart shelters with integrated LED display, real-time information and remote management — and supports integrators with drawings, ICDs and acceptance testing rather than boxes on a truck.
Request the tender-ready integration pack: contact YEROO for a shelter specification package sized to your power budget and platform requirements, including interface documentation, compliance certificates and an itemised quotation for your site list — see the YEROO smart bus shelter programme, the Hungary smart shelter with LED display as a reference deployment, or contact YEROO directly.
Further reading on this site: