How CivicGuard protects and manages data

What is collected

License plate images, vehicle characteristics, date and time stamps, and camera location identifiers for plates registered to government agencies, elected offices, and contracted public fleets.

What is not collected

Facial recognition, biometric identifiers, automated driver identification, and civilian plate indexing. Context footage may incidentally contain people or private vehicles; privacy masks and access restrictions apply. Readers discard non-enrolled plate matches.

Retention

Event retention defaults to 7 days. Published, board-approved schedules may select 1–30 days; 14 days is an available preset. A legal or investigative hold requires a written reason, approver, and expiry. Administrative audit records are separate and retained for 7 years.

Security standards

CivicGuard maintains SOC 2 Type II and ISO 27001 controls, including encryption in transit and at rest, MFA for every user, and logically separated customer environments.

This website

This site shows you what any website can learn from an ordinary visit. Your visitor file is assembled in your own browser from four sources: details your browser shares with every site (device, screen, browser, language, time zone, fonts, keyboard layout, screen refresh rate, battery and connection where your browser allows it, the names of your cameras, microphones, and headphones once you allow the camera, browser extensions that announce themselves to pages, and permissions you’ve already given this site), how you use these pages (pages, time, how long each section stays on your screen, whether you scroll with a trackpad or a mouse, how your phone is being held or carried if its motion sensors are available, text you highlight, clicks, keys pressed outside form fields, text you type, paste, or let your browser autofill into this site’s forms, text you copy, cursor movement, scrolling), connection details Cloudflare provides with each request (IP address, network operator, and an approximate city-level location), and, if you complete the presence review, your camera.

CivicGuard does not store your visitor file on a server. The location lookup at /api/whoami returns your own connection details to you and keeps nothing. Visit data stays in this tab until you close it. A short visit history (first visit, number of visits) stays in this browser until you erase it under Privacy preferences.

The presence review runs face detection and an expression and age estimate in your browser using face-api.js, downloaded from jsDelivr. One small still image is kept in this tab so it can appear in your file. It is never uploaded. The camera turns off when the review ends.

We use Google Analytics and Cloudflare Web Analytics to count visits. Visitors in the UK, the EU, and the EEA are asked first, and Google Analytics only loads if they accept cookies. Cloudflare Web Analytics doesn’t use cookies. They receive standard page-view and device information under their own policies. They do not receive your photo, anything you type, or your visitor file. When your file shows a map, OpenStreetMap receives the coordinates to draw it. If you choose to share your precise location, those exact coordinates go to OpenStreetMap for the map and stay in this tab otherwise. If you type an email address or phone number, the file reads the email’s domain and the phone’s area code using a list stored on this site. Nothing you type into this site’s forms, including the promotional email form, is sent anywhere. It stays in this tab so it can show up in your visitor file, and it’s gone when you close the tab or erase the file. If your file shows the weather where you are, Open-Meteo receives your approximate coordinates to look it up. If you try voice verification, the site measures how loud it is around you for five seconds; no audio is recorded, kept, or sent anywhere. If you download your case file, the PDF is built in your browser using jsPDF, downloaded from cdnjs, and saved straight to your computer.