SECURITY AND TRUST
Security is More Than Just a Task
It’s in the DNA of every employee, every product, and built into our culture. SoundThinking has defined how its systems and applications can be protected from new and emerging threats.
Certifications & Compliance Frameworks
See All Certifications & Compliance FrameworksCybersecurity Framework
Securing our hardware, software, data and AI use.
All US Customer solutions are hosted solely on infrastructure within in the United States. We do not directly use any Chinese company as a subprocessor, and to our knowledge none of our subprocessors do either.
We assign infrastructure access to team members on a least-privilege basis. We enforce multi-factor authentication for AWS. We restrict access to resources using both network-level controls and secrets.
SoundThinking Security Policies
Robust and Comprehensive Security Program
SoundThinking's Overall Information Security Policy — Board-approved and sets the tone for the organization's InfoSec approach
SoundThinking AppSec Program
We integrate security into every stage of the Software Development Lifecycle, starting with secure design principals and validating security during the test and development cycle, prior to release.
Or commitment to transparency and trust means we embrace responsible disclosure and are transparent about material findings and evolving threats.
Key Security Practices
SoundThinking's Overall Information Security Policy — Board-approved and sets the tone for the organization's InfoSec approach
Do you have any Questions?
Get in Touch
Get in TouchSecure Hosting Platform
GovCloud provides specialized cloud computing environments designed to meet the stringent security, compliance, and operational requirements specific to government agencies.
SoundThinking's Overall Information Security Policy — Board-approved and sets the tone for the organization's InfoSec approach
Artificial Intelligence Security
Artificial Intelligence (AI) and Large Language Models (LLM) are at the heart of SoundThinking’s technology having used in Machine Learning in ShotSpotter since the early 2000s, but it’s always deployed responsibly and ethically.
AI-Driven Threat Detection
Our AI-integrated security tools quickly identify, alert and/or neutralize potential threats, from phishing to ransomware.
Human Oversight and Accountability
AI outputs are always subject to human review, ensuring that decision-making aligns with ethical standards and regulatory compliance
Privacy by Design
All personal data processed by AI systems is anonymized and protected, adhering to a zero-trust framework that limits access to only what is essential.
Together with Partners for Greater Public Safety
You can trust SoundThinking to handle your data securely. Our dedicated Compliance Program details our comprehensive security controls and our diligent adherence to all relevant Cybersecurity Laws, Regulations, Attestations, and Frameworks that are important to our customers.
Robust Security & Privacy at SoundThinking
NextGen Security Tools
Automated Threat Detection
Our security tools quickly identify and neutralize potential threats, from phishing to ransomware and alert staff if further action is needed.
Encryption Standards
SoundThinking ensures its GovCloud-hosted CrimeTracer and CaseBuilder applications meet CJIS requirements via FIPS 140-2/3 standards. All data is secured using AES-256 (FIPS 197 compliant) at rest and TLS 1.2+ in transit.
Advanced Intrusion Detection
Edge systems include firewalls, anomaly detection and heuristic analysis to monitor for suspicious activity in real-time.
Multi-factor Authentication
SoundThinking supports two-factor authentication (2FA) in order to provide an additional layer of security to your account.
Data Retention Controls
SafePointe maintains HIPAA compliance to store the required records for a period of 6 years from the date of creation. Access to these records is based on least-privilege and need-to-know.
Internal Audits
The IT & InfoSec teams performs periodic audits to ensure ongoing compliance with our internal and external requirements and compliance audits.
Dedicated InfoSec Team
Security and IT Team maintain industry-best certifications including CISSP, and AWS Security Certifications among others.
Industry Partners
SoundThinking maintains partnerships with key vendors including but not limited to: AT&T Cybersecurity, Level Blue, CJIS Online, Qualys, Secure CyberDefence, & Palo Alto.
Incident Response Detection, Logging and Prevention
Through rigorous monitoring, logging and remediation, we have avoided all major incidents to date. Security logging to a centralized SIEM with retention of at least 365 days.
Key Security Practices
Security is Our Top Priority
Book a demo todayLearn How We Can Help
Maximize impact through data-driven solutions
Connect with Our Team
A representative will reach out by email or phone to schedule a brief introductory call.Discuss Your Needs
During this call, we’ll discuss the specific challenges faced by your agency and explore how we can help.Personalized Solution
We will connect you with a solution architect who will provide a tailored demo and outline a clear roadmap.