Tenant isolation
Every query is scoped to the user’s municipality; cross-tenant attempts are denied and audited, verified by automated tests.
Trust
Privacy, responsible AI and security
Privacy
What the platform will not do
- No facial recognition or face matching.
- No biometric identification of any kind (gait, tattoos, skin tone…).
- No licence-plate reading.
- No predictive policing or criminality inference.
- No audio on public views.
- Private by default: public views need an explicit, masked, delayed publish.
- Least privilege: eleven roles with explicit permissions; office viewers see only assigned cameras.
- Missing-person searches only by authorized case reviewers, with a stated purpose and time window.
- Searches, case views and publishing are audited.
Responsible AI
How TrakIQ uses AI
- TrakIQ is powered by OpenAI models, called only from the server. The API key lives in server configuration, never in the browser.
- The platform computes the numbers; the model only phrases them and must cite each fact.
- The model only sees facts from modules the asking user can access. Case data is never sent.
- Questions are treated as untrusted input; the assistant cannot change its own rules or take actions.
- Consequential steps (publishing, notifying, creating work) are proposed for human confirmation only.
- Every AI call records model, tokens, cost and latency, under a monthly budget cap.
Security & data governance
Controls built into the platform
Audit trail
Sign-ins, reviews, searches, case views, publishing and settings changes are logged with who and when.
Encryption & accounts
HTTPS in transit, bcrypt-hashed passwords, hashed session tokens, CSRF protection and sign-in throttling. Encryption at rest depends on the hosting disk.
Retention
Analytics and search are limited to a 90-day window. Configurable per-municipality retention policies are planned.
- Every number in a report names its source table and time window.
- Synthetic demo data is flagged in the database and can be switched off platform-wide.
- No external delivery of reports or messages.