BodyCam Analytics is built for prosecutors, defense attorneys, and the legal staff who handle bodycam evidence — evidence that is often sensitive and always subject to chain-of-custody and confidentiality expectations. This page explains how BodyCam Analytics approaches data protection and security compliance.
1.Built for law enforcement and legal evidence
BodyCam Analytics is designed around the realities of criminal-justice evidence handling: chain of custody, controlled access, and CJIS-aware operational practices. Our infrastructure and safeguards are built with those requirements in mind, rather than borrowed from an unrelated regulatory framework.
2.Enterprise-grade infrastructure
BodyCam Analytics is built on Google Cloud. The Google Cloud services we use to store and process footage — including Cloud Storage and the AI models — run inside a dedicated, US-region project with enterprise-grade security controls. The infrastructure that holds and processes your data is operated under strong contractual and technical safeguards.
Encrypted, never accessed for other purposes, and deletable by you. Your footage is encrypted in transit and at rest, is not viewed by our personnel in the ordinary course of operating the Service, is never used to train AI, and can be deleted by you at any time — including in full when you cancel your subscription.
3.Security controls
Our safeguards fall into three categories:
Technical safeguards
- Encryption of all data in transit (TLS 1.2+) and at rest (AES-256).
- Authenticated and authorized access to every file — each request is checked against your account.
- Account-scoped isolation, so one customer cannot reach another's content.
- Audit logging of access and administrative actions.
Administrative safeguards
- Least-privilege access, limited to a minimal number of administrators.
- Multi-factor authentication on administrative access.
- A standing policy that personnel do not access customer content except at the customer's request.
Physical safeguards
- Footage is stored in Google Cloud data centers, which maintain physical-security and environmental controls and hold independent compliance certifications.
The Security page covers these in more technical detail.
4.Subprocessors
We use a limited set of vendors to operate the Service — Google Cloud, Firebase Authentication, Stripe, and Resend. The vendors that handle case content do so under their own data-protection commitments. The current list is maintained in our Privacy Policy.
5.Data-protection principles
We apply core data-protection principles to all customer data: we collect only what we need, use it only to provide the Service, never sell it, never use it to train AI, and let you delete it at any time. These principles align with the expectations of modern privacy laws, including U.S. state privacy statutes.
6.Your professional responsibilities
BodyCam Analytics is a tool that supports your work; it does not replace your own professional and ethical obligations. Attorneys remain responsible for their duty of confidentiality, their duty of technological competence, and any client-specific or court-imposed handling requirements for the evidence they process. Our aim is to give you infrastructure you can rely on while meeting those duties.