Trust Center / Governance
The operational details behind our privacy, security, accessibility, and legal commitments. The system remembers who asked; governance determines whether the answer was justified.
Municipal partners fund deployments. Chartered integrity boards control their own reviewer access. Departments may attach responses but cannot delete board observations or revoke board access. Public reports contain aggregate findings rather than open movement histories.
Events default to 7 days; board-approved schedules may specify 1–30 days, including a 14-day preset. Holds require written justification, approval, and expiry. Administrative audit records remain separate for 7 years.
Service providers
CivicGuard evaluates contractual, security, privacy, and geographic controls before a provider may process customer data.
| Provider | Purpose | Processing region | Data category |
|---|---|---|---|
| Northstar Cloud Services | Infrastructure and encrypted storage | United States | Customer content, account data |
| SignalRoute Networks | Device cellular connectivity | United States | Device identifiers, network telemetry |
| RelayPost Communications | Transactional email | United States | Administrator email, service notices |
| Verity Support Systems | Customer support case management | United States | Contact and case information |
Accessibility
CivicOS supports keyboard navigation, visible focus, semantic headings, text scaling, non-color status indicators, and screen-reader labels. CivicGuard performs automated and manual testing before material releases.
Request the current Accessibility Conformance Report or report a barrier:
accessibility@civicguard.observer
Legal process
Customers control their event data and should receive requests directly. CivicGuard routes misdirected requests to the customer when legally permitted and does not independently release customer content. CivicGuard Holdings is registered in the Meridian Free Data Zone, where company records are sealed and personal records are public. US state public-records laws reach our customers’ records, not ours.
We require valid legal process, notify the affected customer unless prohibited, challenge overbroad demands where appropriate, and disclose only information specifically required.
Requests concerning customer-controlled data are referred to the relevant customer. CivicGuard responds directly for corporate contact and account information we control.
Preservation requests must identify the account and records with specificity. Holds are time-limited, logged, and released when authority expires.
Responsible disclosure
Send a concise description, affected service, reproduction steps, and potential impact to security@civicguard.observer. Do not access customer data, degrade service, or use social engineering.
We acknowledge valid reports within one business day, provide progress updates at least every five business days, and coordinate public disclosure after remediation.
CivicGuard will not pursue legal action for good-faith research that follows this policy, avoids privacy harm, and gives us reasonable time to correct the issue.
Contact security@civicguard.observer to arrange an encrypted reporting channel before sending sensitive details.
Standard privacy and security terms are available with every subscription.
Request DPA →Permitted purposes, prohibited activity, and review obligations.
Download policy →Security controls, assurance status, and review materials.
Open Trust Center →
CivicGuard