Flock Safety End to End Data Security Overview (1).pdf

June 2020
Overview of Flock Safety End to End Data Security
The following is an overview of the end to end data security of the Flock Safety system. The
Flock Safety system is defined as the combination of the Flock Safety ALPR camera and the
Flock Safety built software hosted in the Flock Safety AWS Cloud environment.
All footage taken by the cameras is encrypted at rest while on the camera. Additionally, unlike
more traditional LPR solutions, the Flock Safety cameras have no public IP, and therefore, it is
not possible for anyone to connect to the camera remotely to access footage.
Once the footage is ready to be uploaded and in turn be processed, the camera pushes the
footage to the cloud. The footage is sent using secure sockets and a proprietary handshake
developed by Flock Safety. Additionally, all footage is encrypted in transit.
Once in the cloud, all footage is encrypted at rest and all CJIS data is stored in the AWS Gov
Cloud. Flock Safety uses KMS based encryption, instead of AES, therefore, limiting access to
the encryption keys to only a few select Flock employees (when using AES, Amazon also has
access to the encryption keys). These employees have undergone extensive background
checks (as have all Flock Safety employees), as well as CJIS training and fingerprinting.
CJIS data is only made available to Law Enforcement agencies who have signed a
Memorandums of Understanding (MOU) that governs the sharing of this data between Flock
and the agency. No CJIS data is shared with non-Law Enforcement Flock Safety Customers.
For Hotlist alerts, metadata (license plate # and state) for each license plate captured is
checked against relevant national, state, local, and custom hotlists. If the metadata matches a
license plate on one of these hotlists, the metadata, along with a single image, is provided to the
Law Enforcement agency with jurisdiction via the Flock environment in the AWS Gov Cloud.
Access to all CJIS data, along with all activities taken by users of the Flock Safety system are
logged and available for auditing. Flock Safety has a set of alarms that help to monitor the
health of the cameras; however, no Flock Safety employee monitors the footage taken by
customer cameras unless they are given express permission from the customer (this permission
and activity is also logged). Finally, all Flock Safety activities and process are governed by the
Flock Safety Internet Security Policy.
                     1170 Howell Mill Rd. NW · Suite 210, Atlanta, GA 30318