HomeMy WebLinkAboutC37840 - 3 Automated License Plate Reading Systms (ALPR) Contract No..C37840
STAFF REPORT
CITY OF PALM DESERT
ADMINISTRATIVE SERVICES DEPARTMENT
MEETING DATE: November 15, 2018
PREPARED BY: Stephen Y. Aryan, Risk Manager
REQUEST: Authorization to purchase and utilize three (3) Automated License
Plate Reading systems from Vigilant Solutions (Livermore, CA) in the
amount of 52,053, for use by the City of Palm Desert Police
Department.
Recommendation
By Minute Motion,
1. Authorize the purchase and use of three (3) Automated License Plate Reader
(ALPR) systems in the amount of $52,053 from Vigilant Solutions, for installation
on marked Palm Desert Police vehicles and used within the City's jurisdictional
boundaries.
2. Authorize the City Manager to execute any related contract documents.
3. Declare the three previous ALPR units as "surplus," to be traded-in to Vigilant
Solutions, for a reduced cost on the purchase of three new ALPR units.
4. Authorize the use of Riverside County's vendor, Vigilant Solutions, under Palm
Desert Municipal Code Section 3.30.160 (I): Best Interest of the City.
5. Appropriate$52,053 from Unobligated Fund 229 to Account No. 2294210-4391400.
Commission Recommendation
The Public Safety Commission initially reviewed this matter on October 10, 2018.
However, the Commission had various inquiries including, (1) what the warranty options
were on the new ALPR units and (2) what was the success rate of the previous units (i.e.
the "hit rate"). The response to these inquiries are included in the body of this report below.
The Commission will review this request again on November 14, 2018. A verbal report on
the Commission's actions will be provided for the City Council.
Strategic Plan
This matter is related to the Public Safety and Emergency Services section of the Palm
Desert Strategic Plan, specifically under Priority 1: Enhance the Delivery of Public Safety
Services. The priority's strategy is to expand the existing superlative services provided by the
Staff Report: Automated License Plate Reading System Purchase
November 15, 2018
Page 2 of 4
fire and police departments to address future growth and safety concerns. One of the action
steps is to identify Public Safety needs including new equipment.
Executive Summary
As a result of ownership and operational changes of the prior vendor (3M), the Automated
License Plate Reading (ALPR) systems previously purchased and owned by the City of
Palm Desert Police Department are no longer supported, nor a viable option for continual
use. The new Riverside County vendor, Vigilant Solutions has offered discounted trade-
in rate on the three existing ALPR units, which allows the City of Palm Desert Police
Department an opportunity to save an estimated $15,000, as an incentive to submit a
purchase order by December 15, 2018. The discounted costs to purchase three ALPR
systems has been quoted to be approximately $52,053 (includes 7.75% State sales tax).
Background
In 2016, Senate Bill 34 — `Automated License Plate Recognition Systems: Use of Data,"
became law. This Civil Code requires agencies using Automated License Plate Reader
(ALPR) systems, to post the policy on the agency's website and provide the opportunity for
public comment at a regularly scheduled meeting of the agencies governing body.
Prior to SB 34, the Sheriff's Department used ALPR technology in Riverside County and the
City of Palm Desert Police Department owned and actively utilized three (3) ALPR systems
within its jurisdictional boundaries. As a result of the bill, the use of this ALPR technology
was seized until the requirements defined within SB34 were met.
On July 12, 2018, the City of Palm Desert provided an opportunity for public comment during
a regularly scheduled meeting, during which no comments were made. The Riverside
County Sheriff's Department has since revised and publicly posted its Usage and Privacy
Policy on its website and it is attached to this report.
The ALPR system consists of cameras mounted to police vehicles that automatically take
photographs of vehicle license plates, which are then translated into letters and numbers.
The resulting data is compared to law enforcement databases to identify vehicles reported
stolen, wanted for being used in a crime, related to abducted or missing children and adults,
or are displaying lost or stolen license plates. If the license number is found to be wanted,
the system alerts the deputy driving so they can investigate further. Prior to any enforcement
activity being initiated, deputies are required to verify the alert with dispatch, or directly via
the California Law Enforcement Telecommunications System (CLETS). The ALPR data is
only accessible by law enforcement personnel for official investigative purposes and all
access is logged by the user.
The Riverside County Sheriff's Department is committed to operating ALPR technology in a
measured means that balances personal privacy concerns and public safety. The
Department follows strict protocols in the access, storage and use of ALPR data to ensure
its integrity and compliance with applicable laws. ALPR data is listed within the Riverside
County Records Management and Archive Policy A-43 and is purged two years after being
collected. Data may only be used for official law enforcement purposes, and cannot be
Staff Report: Automated License Plate Reading System Purchase
November 15, 2018
Page 3 of 4
shared, transferred, or sold for any other use. Employees are required to attend four hours
of training about the system and policy prior to being given system access. Annual audits of
the system,to ensure privacy and security, are conducted by the Sheriffs Technical Services
Bureau.
The authorized vendor with access to the ALPR system are required to maintain security
procedures and practices, including operational, administrative, technical, and physical
safeguards, to protect ALPR information from unauthorized access, destruction, use,
modification, or disclosure. The use of Automated License Plate Reader (ALPR) technology
is a valuable law enforcement tool. This technology assists in identifying stolen or wanted
vehicles, vehicles associated with missing or wanted people, and stolen license plates. For
example, in 2016, there were approximately 1,350 vehicle thefts within the unincorporated
areas of Riverside County and approximately 1,150 recoveries. Within contract cities, there
were approximately 5,000 vehicle thefts and approximately 4,200 recoveries. Of these stolen
and recovered vehicles(within contract cities), 185 were stolen and 73 were recovered within
the City of Palm Desert. The ALPR system was instrumental in many of those recoveries,
which led to the arrest and prosecution of criminals and the quick recovery of the victim's
vehicle. As a result of Data Retention policies, the exact number of vehicles recovered as a
result of ALPR technology during the referenced time period is unknown.
Previous ALPR "Hit Rate"
Prior to the enactment of Senate Bill 34,the Riverside County Sheriff's Department had active
ALPR equipment deployed in various areas of the county for approximately 10 years. During
this period, approximately 14,885,961 license plates were read, which yielded approximately
13,980 hits. "Hits" are defined as law enforcement agencies "want' of a specific vehicle,
which can vary from stolen vehicles, lost/stolen license plates, vehicles involved in a violent
crime, and missing/abducted adults and children.
Unfortunately, due to data retention policies that governed the collected data prior to SB34,
the data was purged and the only quantifiable figure of its prior effectiveness is a hit rate of
.093% or 1 hit out of every 1,000 reads. ALPR technology is not perfect and "misreads"can
be experienced with defaced or obstructed license plates. It is unknown what percentage of
the .093% hit rate were "misreads" or legitimate finds of wanted vehicles. While this hit rate
alone seems insignificant, the true value of an ALPR system is achieved through its ability to
read and compare hundreds of license plates per minute to a wanted database, while an
average patrol deputy may only inquire on 10-15 license plates during a single shift. Vigilant
Solutions provided comparison statistics it obtained from the La Verne Police Department.
In summary, prior to the implementation of ALPR Technology, La Verne P.D. experienced
an average of 1.5 occupied stolen vehicles per year, which increased to a yearly average of
55 occupied stolen vehicles after implementation, which is a significant increase.
Warranty Options
The quote provided by Vigilant Solutions includes a one year warranty.An extended warranty
may be purchased for an additional one to four years at a rate of$525 per camera, per year.
This extended warranty must be secured either at the time of original purchase, or within the
first year of the factory warranty, for the entirety of coverage desired. Vigilant Solutions does
not do year by year extended hardware warranty renewals. The Palm Desert Police
Staff Report: Automated License Plate Reading System Purchase
November 15, 2018
Page 4 of 4
Department intends on purchasing three ALPR units (four cameras p/unit), resulting in a
$6,300 additional warranty cost per year.
To warranty all cameras an additional four years, it would cost $25,200. Based on the
maintenance and repair history of the previous ALPR units, staff and the Police Department
do not recommend purchasing an extended warranty. Additionally, most defect issues are
typically discovered within the first year of use.
In order to reduce criminal activity and help in any future criminal investigations, the City of
Palm Desert Police Department wishes to purchase three Automated Vehicle License Plate
Reader systems. These units would be installed onto marked Palm Desert Police vehicles,
which will be utilized within the City's jurisdictional boundaries. Staff respectfully recommends
moving forward with this purchase.
Fiscal Analysis
The discounted costs to purchase three ALPR systems was quoted to be approximately
$52,053 (with trade-in of old units), of which $3,300 are annual hosting fees. Staff will
utilize COPS/SLESF funds under Account No. 2294210-4391400 and not require any
general fund expenditure. The Police Department will follow the City's purchasing policies;
however, they informed staff that this item should be classified as sole source from the
vendor selected by Riverside County for compatibility of equipment and software. Utilizing
a single source assists in creating a countywide network of data sharing and crime solving.
This database of suspect license plates is a key benefit of the system. Additionally, as
more Sheriff's Stations join the Vigilant Network, each Sheriff's contract city will benefit by
a reduced annual Camera Licensing Key (CLK) fee, which is calculated based on the total
amount of agency cameras on the network.
LEGAL REVIEW DEPT. REVIEW FINANCIAL REVIEW CITY MANAGER
N/A
do/ ,
Lori Carney
Robert W. Director of A inistrative = Moore Lauri Aylaian
Hargreaves Services Director of Finance City Manager
City Attorney
Attachments: 1. Vigilant Solutions Quote
2. Vigilant Solutions Enterprise Service Agreement
3. Sheriff's Department Directive #16-074
Nki
y Vi G I LANT
SOLUTIONS
Quote For:
Riverside County Sheriff - Palm Desert Station
3 4-Camera Mobile Systems - Trade In
Quoted By:
Vigilant Solutions, LLC
Greg Mills
Date: 10-01-18
Be Smart. Be Safe. Be Vigilant.
Vigilant Solutions, LLC Be smart. Be safe.
\ /Se 1152 Stealth Street
'' VIGILANT Livermore, California 94551 Be Vigilant.
(P)858-287-0067
Attention: Riverside County Sheriff-Palm Desert Station Date 10/1/2018
Project Name: 3 4-Camera Mobile Systems-Trade In Quote Number: GSM-0903-03
PROJECT QUOTATION
We at Vigilant Solutions are pleased to quote the following systems for the above referenced project:
Qty Item# Description
(3) Mobile LPR SYS-1 Mobile LPR 4-Camera System wl Integrated Processor
CDM-4-1123RE Hardware:
• Qty=2 Combination IR/Color LPR Cameras-16mm lens package
• Qty=1 Combination IR/Color LPR Camera-25mm lens package
• Qty=1 Combination IR/Color LPR Camera-35mm lens package
• Cameras w/integrated solid state DSPs(No moving parts)
• Wiring harness w/ignition control (Direct to Battery)
o Single point power connection
• Field installed GPS receiver for MDC(USB Connect)
Software:
• CarDetector Mobile LPR software application for MDC unit
o LPR vehicle license plate scanning/real time alerting
o Full suite of LPR tools including video tool set
(3) VS-LBB-02-E LPR Camera Mounting Brackets-Light Bar Mounting Style-Complete Set
• LPR Camera Mounting Bracket-Rooftop under light bar
• Compatible with most Whelen, Code3,TOMAR, Federal Signal,Arjent S2 Light Bars
• Mounts up to four(4)LPR cameras
(3) USB-CABLE- USB CABLE EXTENDER 6FT
EXTENDER-6FT • USB Cable Extender for GPS Units
(3) SSU-SYS-COM Vigilant System Start Up&Commissioning of'In Field'LPR system
• Vigilant technician to visit customer site
• Includes system start up,configuration and commissioning of LPR system
• Applies to mobile(1 System)and fixed(1 Camera)LPR systems
(3) VS-SHP-01 Vigilant Shipping&Handling Charges
• Applies to each Mobile LPR System
• Shipping Method is FOB Shipping
(1) VSBSCSVC-04 Vigilant LPR Basic Service Package for Hosted/Managed LPR Deployments
• Managed/hosted server account services by Vigilant
o Includes access to all LEARN or Client Portal and CarDetector software updates
• Priced per camera per year for over 60 total camera units
• Requires new/existing Enterprise Service Agreement(ESA)
(3) Installation Installation of Vigilant Hardware
(1) VSPK1 SVC-04 Vigilant LPR Standard Service Package for Hosted/Managed LPR Deployments
• Optional Service Package Benefits
o Extended access to Vigilant'Private Data'via CarDetector Mobile Hit Hunter
o Unlimited access to Vigilant's Mobile Companion LPR application for Smartphones
• Priced per camera per year for over 60 total camera units
o Requires Basic Service Package
Subtotal Price(Excluding sales tax) $48,309.00
Quote Notes:
1. All prices are quoted in USD and will remain firm and in effect for 60 days.
2. Orders requiring immediate shipment may be subject to a 15% QuickShip fee.
3. No permits, start-up, installation, and or service included in this proposal unless explicitly stated above.
4. All hardware components to have standard One (1)year hardware warranty.
5. This Quote does not include anything outside the above stated bill of materials.
6. Extended hardware warranty not included. Additional 1-4 years available.
7. One year of hosting services associate with the cameras included.
8. Willi require new ESA contract between Palm Desert and Vigilant.
9. Hosting fees on equipment are due on an annual basis(explained in ESA).
10.Installation location to be determined.
Quoted by: Greg Mills - 858-287-0067 - greg.mills@vigilantsolutions.com
Total Price (Excluding sales tax) $48,309.00
Contract No. C37840
VVIGILANT
Enterprise Service Agreement (ESA)
This Vigilant Solutions Enterprise Service Agreement (the "Agreement") is made and entered into as of
this Day of , 201_by and between Vigilant Solutions, LLC, a Delaware corporation, having its
principal place of business at 1152 Stealth Street, Livermore, CA 94551 ("Vigilant") and
, a law enforcement agency (LEA) or other governmental agency, having
its principal place of business at ("Affilliate").
WHEREAS,Vigilant designs, develops, licenses and services advanced video analysis software technologies for
the law enforcement and security markets;
WHEREAS,Vigilant provides access to license plate data as a value-added component of the Vigilant law
enforcement package of license plate recognition equipment and software;
WHEREAS, Affiliate will separately purchase License Plate Recognition (LPR) hardware components from
Vigilant and/or its authorized reseller for use with the Software Products (as defined below);
WHEREAS,Affiliate desires to license from and receive service for the Software Products provided by Vigilant;
THEREFORE, In consideration of the mutual covenants contained herein this Agreement,Affiliate and Vigilant
hereby agree as follows:
I. Definitions:
"Booking Images"refers to both LEA Booking Images and Commercial Booking Images.
"CJIS Security Policy"means the FBI CJIS Security Policy document as published by the FBI CJIS Information Security
Officer.
"CLK" or"Camera License Key" means an electronic key that will permit each license of Vigilant's CarDetector brand
LPR software or Lineup brand facial recognition software(one CLK per camera)to be used with other Vigilant approved
and licensed LPR hardware components (i.e., cameras and other hardware components provided by Vigilant or
provided by a Vigilant certified reselling partner that has authority from Vigilant to deliver such Vigilant-authorized
components)and Software Products. CLKs shall be not issuable and if issued in error shall be removed and immediately
rendered null and void for cameras and other hardware components that are not Vigilant-authorized cameras and
other hardware components or are delivered to Affiliate by another vendor that is not a Vigilant certified reselling
partner.
"Commercial Booking Images" refers to images collected by commercial sources and available on LEARN with a paid
subscription.
"Commercial LPR Data"refers to LPR data collected by private sources and available on LEARN with a paid subscription.
"Criminal Justice Information Services Division" or "CJIS" means the FBI division responsible for the collection,
warehousing, and timely dissemination of relevant CJI to the FBI and to qualified law enforcement,criminal justice,
VVIGILANT
civilian, academic, employment,and licensing agencies.
"Effective Date" means sixty(60) days subsequent to the date set forth in the first paragraph of this Agreement.
"Enterprise License"means a non-exclusive, non-transferable license to install and operate the Software Products, on
applicable media provided by Vigilant or Vigilant's certified reselling partners.This Enterprise Service Agreement allows
Affiliate to install the Software Products on such devices, in accordance with the selected Service Package(s),and allow
benefits of all rights granted hereunder this Agreement.
"LEA Booking Images" refers to images collected by LEAs and available on the Software Service for use by other LEAs.
LEA Booking Images are freely available to LEAs at no cost and are governed by the contributing LEA's policies.
"LEA LPR Data" refers to LPR data collected by LEAs and available on LEARN for use by other LEAs. LEA LPR Data is
freely available to LEAs at no cost and is governed by the contributing LEA's retention policy.
"Service Fee" means the amount due from Affiliate prior to the renewal of this Agreement as consideration for the
continued use of the Software Products and Service Package benefits according to Section VIII of this Agreement.
"Service Package" means the Affiliate designated service option(s) which defines the extent of use of the Software
Products, in conjunction with any service and/or benefits therein granted as rights hereunder this Agreement.
"Service Period" has the meaning set forth in Section III (A) of this Agreement.
"Software Products" means Vigilant's Law Enforcement & Security suite of Software Products including CarDetector,
Law Enforcement Archival & Reporting Network (LEARN), PlateSearch, Mobile Companion for Smartphones, Target
Alert Service (TAS) server/client alerting package, FaceSearch, LineUp, and other software applications considered by
Vigilant to be applicable for the benefit of law enforcement and security practices. Software Products shall only be
permitted to function on approved Vigilant cameras and other hardware components provided by Vigilant or through
Vigilant certified reselling partners. Software Products shall not be permitted to operate on third-party provided or
not Vigilant-authorized hardware components, and if found to be operating on third-party provided hardware
components Software Products shall be promptly removed by Affiliate.
"Technical Support Agents" means Affiliate's staff person specified in the Contact Information Worksheet of this
Agreement responsible for administering the Software Products and acting as Affiliate's Software Products support
contact.
"User License" means a non-exclusive, non-transferable license to install and operate the Software Products, on
applicable media, limited to a single licensee.
"Users" refers to individuals who are agents and/or sworn officers of the Affiliate and who are authorized by the
Affiliate to access LEARN on behalf of Affiliate through login credentials provided by Affiliate.
II. Enterprise License Grant; Duplication and Distribution Rights:
Subject to the terms and conditions of this Agreement,Vigilant hereby grants Affiliate an Enterprise License to the
\/VIGILANT
Software Products for the Term provided in Section III below. Except as expressly permitted by this Agreement,Affiliate
or any third party acting on behalf of Affiliate shall not copy, modify, distribute, loan, lease, resell, sublicense or
otherwise transfer any right in the Software Products. Except as expressly permitted by this Agreement,no other rights
are granted by implication,estoppels or otherwise.Affiliate shall not eliminate,bypass,or in any way alter the copyright
screen(also known as the"splash"screen)that may appear when Software Products are first started on any computer.
Any use or redistribution of Software Products in a manner not explicitly stated in this Agreement, or not agreed to in
writing by Vigilant,is strictly prohibited.
III. Term;Termination.
A. Term. The initial term of this Agreement is for one(1)year beginning on the Effective Date(the"Initial
Term"),unless earlier terminated as provided herein. Sixty(60)days prior to the expiration of the Initial Term and each
subsequent Service Period, Vigilant will provide Affiliate with an invoice for the Service Fee due for the subsequent
twelve (12) month period (each such period, a "Service Period"). This Agreement and the Enterprise License granted
under this Agreement will be extended for a Service Period upon Affiliate's payment of that Service Period's Service
Fee, which is due 30 days prior to the expiration of the Initial Term or the existing Service Period, as the case may be.
Pursuant to Section XIII below,Affiliate may also pay in advance for more than one Service Period.
B. Affiliate Termination. Affiliate may terminate this Agreement at any time by notifying Vigilant of the
termination in writing thirty(30)days prior to the termination date and deleting all copies of the Software Products. If
Affiliate terminates this Agreement prior to the end of the Initial Term,Vigilant will not refund or prorate any license
fees, nor will it reduce or waive any license fees still owed to Vigilant by Affiliate. Upon termination of the Enterprise
License, Affiliate shall immediately cease any further use of Software Products. Affiliate may also terminate this
agreement by not paying an invoice for a subsequent year's Service Fee within sixty(60) days of invoice issue date.
C. Vigilant Termination. Vigilant has the right to terminate this Agreement by providing thirty (30) days
written notice to Affiliate. If Vigilant's termination notice is based on an alleged breach by Affiliate, then Affiliate shall
have thirty (30) days from the date of its receipt of Vigilant's notice of termination, which shall set forth in detail
Affiliate's purported breach of this Agreement,to cure the alleged breach. If within thirty(30)days of written notice of
violation from Vigilant Affiliate has not reasonably cured the described breach of this Agreement, Affiliate shall
immediately discontinue all use of Software Products and certify to Vigilant that it has returned or destroyed all copies
of Software Products in its possession or control. If Vigilant terminates this Agreement prior to the end of a Service
Period for breach, no refund for any unused Service Fees will be provided. If Vigilant terminates this Agreement prior
to the end of a Service Period for no reason, and not based on Affiliate's failure to cure the breach of a material term
or condition of this Agreement,Vigilant shall refund to Affiliate an amount calculated by multiplying the total amount
of Service Fees paid by Affiliate for the then-current Service Period by the percentage resulting from dividing the
number of days remaining in the then-current Service Period, by 365.
IV. Warranty and Disclaimer; Infringement Protection; Use of Software Products Interface.
A. Warranty and Disclaimer. Vigilant warrants that the Software Products will be free from all Significant
Defects (as defined below) during the term of this Agreement (the "Warranty Period"). "Significant Defect" means a
defect in a Software Product that impedes the primary function of the Software Product.This warranty does not include
products not manufactured by Vigilant. Vigilant will repair or replace any Software Product with a Significant Defect
during the Warranty Period; provided, however, if Vigilant cannot substantially correct a Significant Defect in a
VVIGILANT
commercially reasonable manner, Affiliate may terminate this Agreement and Vigilant shall refund to Affiliate an
amount calculated by multiplying the total amount of Service Fees paid by Affiliate for the then-current Service Period
by the percentage resulting from dividing the number of days remaining in the then-current Service Period, by 365.The
foregoing remedies are Affiliate's exclusive remedy for defects in the Software Product. Vigilant shall not be
responsible for labor charges for removal or reinstallation of defective software, charges for transportation, shipping
or handling loss,unless such charges are due to Vigilant's gross negligence or intentional misconduct. Vigilant disclaims
all warranties, expressed or implied, including but not limited to implied warranties of merchantability and fitness for
a particular purpose. In no event shall Vigilant be liable for any damages whatsoever arising out of the use of, or
inability to use,the Software Products.
B. Infringement Protection. If an infringement claim is made against Affiliate by a third-party in a court
of competent jurisdiction regarding Affiliate's use of any of the Software Products, Vigilant shall indemnify Affiliate,
and assume all legal responsibility and costs to contest any such claim. If Affiliate's use of any portion of the Software
Products or documentation provided to Affiliate by Vigilant in connection with the Software Products is enjoined by a
court of competent jurisdiction, Vigilant shall do one of the following at its option and expense within sixty (60) days
of such enjoinment: (1) Procure for Affiliate the right to use such infringing portion; (2) replace such infringing portion
with a non-infringing portion providing equivalent functionality; or (3) modify the infringing portion so as to eliminate
the infringement while providing equivalent functionality.
C. Use of Software Products Interface. Under certain circumstances, it may be dangerous to operate a
moving vehicle while attempting to operate a touch screen or laptop screen and any of their applications. It is agreed
by Affiliate that Affiliate's users will be instructed to only utilize the interface to the Software Products at times when
it is safe to do so. Vigilant is not liable for any accident caused by a result of distraction such as from viewing the screen
while operating a moving vehicle.
V. Software Support,Warranty and Maintenance.
Affiliate will receive technical support by submitting a support ticket to Vigilant's company support website or by
sending an email to Vigilant's support team. Updates, patches and bug fixes of the Software Products will be made
available to Affiliate at no additional charge, although charges may be assessed if the Software Product is requested to
be delivered on physical media. Vigilant will provide Software Products support to Affiliate's Technical Support Agents
through e-mail,fax and telephone.
VI. Camera License Keys(CLKs).
Affiliate is entitled to use of the Software Products during the term of this Agreement to setup and install the Software
Products on an unlimited number of media centers within Affiliate's agency in accordance with selected Service
Options. As Affiliate installs additional units of the Software Products and connects them to LPR cameras, Affiliate is
required to obtain a Camera License Key(CLK)for each camera installed and considered in active service. A CLK can be
obtained by Affiliate by going to Vigilant's company support website and completing the online request form to Vigilant
technical support staff. Within two (2) business days of Affiliate's application for a CLK, Affiliate's Technical Support
Agent will receive the requested CLK that is set to expire on the last day of the Initial Term or the then-current Service
Period,as the case may be.
Nof VIGILANT
VII. Ownership of Software.
A. Ownership of Software Products. The Software Products are copyrighted by Vigilant and remain the
property of Vigilant. The license granted under this Agreement is not a sale of the Software Products or any copy.
Affiliate owns the physical media on which the Software Products are installed, but Vigilant retains title and ownership
of the Software Products and all other materials included as part of the Software Products.
B. Rights in Software Products. Vigilant represents and warrants that: (1) it has title to the Software and
the authority to grant license to use the Software Products; (2) it has the corporate power and authority and the legal
right to grant the licenses contemplated by this Agreement; and (3) it has not and will not enter into agreements and
will not take or fail to take action that causes its legal right or ability to grant such licenses to be restricted.
VIII. Data Sharing,Access and Security.
If Affiliate is a generator as well as a consumer of LPR Data and or LEA Booking Images,Affiliate at its option may share
its LEA LPR Data and or LEA Booking Images with similarly situated LEAs who contract with Vigilant to access LEARN
(for example, LEAs who share LEA LPR Data with other LEAs). Vigilant will not share any LEA LPR Data or LEA Booking
Images generated by the Affiliate without the permission of the Affiliate.
Vigilant has implemented procedures to allow for adherence to the FBI CJIS Security Policy. The hosting facility utilizes
access control technologies that meet or exceed CJIS requirements. In addition,Vigilant has installed and configured
network intrusion prevention appliances, as well as ensured that the configuration of the Microsoft environment
adhere to the Windows Server Security Guide.
IX. Ownership and use of Data.
Vigilant retains all title and rights to Commercial LPR Data and all Commercial Booking Images. Users shall not utilize
Commercial LPR Data or Commercial Booking Images on the behalf of other local,state or Federal LEAs. Affiliate retains
all rights to LEA LPR Data and LEA Booking Images generated by the Affiliate. Should Affiliate terminate agreement
with Vigilant,a copy of all LEA LPR Data and LEA Booking Images generated by the Affiliate will be created and provided
to the Affiliate. After the copy is created, all LEA LPR Data and LEA Booking Images generated by the Affiliate will be
deleted from LEARN at the written request of an authorized representative of the Affiliate or per the Affiliate's
designated retention policy, whichever occurs first. Commercial LPR Data, Commercial Booking Images, LEA LPR Data
and LEA Booking Images should be used by the Affiliate for law enforcement purposes only.
X. Loss of Data,Irregularities and Recovery.
Vigilant places imperative priority on supporting and maintaining data center integrity. Using redundant disk arrays,
there is a virtual guarantee that any hard disk failure will not result in the corruption or loss of the valuable LPR data
that is essential to the LEARN system and clients.
Xl. Data Retention and Redundancy.
LEA LPR Data and LEA Booking Images are governed by the contributing LEA's retention policy. LEA LPR Data that
reaches its expiration date will be deleted from LEARN. Vigilant's use of redundant power sources, fiber connectivity
and disk arrays ensure no less than 99% uptime of the LEARN LPR database server system.
/VIGI IANT
XII. Account Access.
A. Eligibility. Affiliate shall only authorize individuals who satisfy the eligibility requirements of"Users"
to access LEARN. Vigilant in its sole discretion may deny access to LEARN to any individual based on such person's
failure to satisfy such eligibility requirements. User logins are restricted to agents and sworn officers of the Affiliate.
No User logins may be provided to agents or officers of other local,state, or Federal LEAs without the express written
consent of Vigilant.
B. Security. Affiliate shall be responsible for assigning an Agency Manager who in turn will be responsible
for assigning to each of Affiliate's Users a username and password (one per user account). A limited number of User
accounts is provided. Affiliate will cause the Users to maintain username and password credentials confidential and
will prevent use of such username and password credentials by any unauthorized person(s). Affiliate shall notify
Vigilant immediately if Affiliate believes the password of any of its Users has, or may have, been obtained or used by
any unauthorized person(s). In addition, Affiliate must notify Vigilant immediately if Affiliate becomes aware of any
other breach or attempted breach of the security of any of its Users'accounts.
C. CJIS Requirements. Affiliate certifies that its LEARN users shall comply with the CJIS requirements
outlined in Exhibit B.
XIII. Service Package, Fees and Payment Provisions.
A. Service Package. This Enterprise License Agreement is based on one (1) of the three (3) following Service
Package Options. Please select one (1) Service Package below:
❑ Service Package- Basic LPR Service Package:
• Vigilant Managed/Hosted LPR server LEARN Account
• Access to all Vigilant Software including all upgrades and updates
• Unlimited user licensing for the following applications:
o LEARN, CarDetector and TAS
❑ Service Package-Option# 1—Standard LPR Service Package:
• All Basic Service Package benefits
• Unlimited use of CarDetector—Mobile Hit Hunter(CDMS-MHH)
• Unlimited use of Vigilant's LPR Mobile Companion smartphone application
❑ Service Package-Option#2—'Intelligence-Led Policing(ILP)'Service Package:
• All Service Package Option# 1 benefits
• Mobile LPR hardware up to level of Tier(see Exhibit A)
• Use of Vigilant Facial Recognition technologies up to level of Tier
• FaceSearch Account
• FaceSearch Mobile Companion
• Templates up to limit for FaceSearch Account(details in Exhibit A)
'..VIGILANT
• Tiered based on size of department(Tier 1A up to 50 sworn officers Tier 1 up to 100 sworn officers,
Tier 2 up to 200 sworn officers, Tier 3 up to 500 sworn officers, Tier 4 up to 1,000 sworn officers,
Tier 5 up to 1,500 sworn officers,Tier 6 up to 2,000 sworn officers)
• States, Federal Agencies, and Departments with greater than 2,000 sworn fall under a, "Custom"
Tier which will be defined in the Annual Service Fee Schedule if applicable.
B. Service Fee. Payment of each Service Fee entitles Affiliate to all rights granted under this Agreement,
including without limitation, use of the Software Products for the relevant Service Period, replacement of CLKs, and
access to the updates and releases of the Software Products and associated equipment driver software to allow the
Software Products to remain current and enable the best possible performance. The annual Service Fee due for a
particular Service Period is based on the number of current Vigilant issued CLK's at the time of Service Fee invoicing,
and which will be used by Affiliate in the upcoming Service Period. A schedule of annual Service Fees is shown below:
Annual Service Fee Schedule(multiplied by number of CLK's Issued)
Total#of CLK's under this ESA 0-14 CLK's 15-30 CLK's 31-60 CLK's Over 60
Basic Service $525.00 $450.00 $400.00 $275.00
Standard (Option# 1) $750.00 $640.00 $565.00 $390.00
ILP Subscriber CLK Renewal Fees $525.00 $450.00 $400.00 $275.00
Intelligence-Led Policing Service Package Annual Fee Schedule
Tier ILP Annual Fee
ILP Tier 1 (Option#2) $14,995.00
ILP Tier 2 (Option#2) $34,495.00
ILP Tier 3 (Option#2) $59,995.00
ILP Tier 4 (Option#2) $89,995.00
ILP Tier 5 (Options#2) $119,995.00 U
ILP Tier 6 (Option#2) $154,995.00
Annual Service Fee Schedule for Image Enrollment(applicable to FaceSearch/LineUp)
5,000 Images $750.00
Payment of the Service Fee is due thirty (30) days prior to the renewal of the then-current Service Period. All Service
Fees are exclusive of any sales, use, value-added or other federal, state or local taxes (excluding taxes based on
Vigilant's net income) and Affiliate agrees to pay any such tax. Service Fees may increase by no higher than 4% per
year for years after the first year of this agreement. For ILP (Option # 2) Tier packages, the Tier amount is due for
subsequent periods and Basic Service CLK fees are due for all cameras from previous periods (this is in addition to the
Annual Subscription Fee).
\/VIciILANT
Affiliate and Vigilant agree that the number of CLKs issued as of the Effective Date of this Agreement is [Insert
Quantity]. All future additions of CLKs shall only be those as provided for in the definitions provided above.
C. Advanced Service Fee Payments. Vigilant will accept advanced Service Fee payments on a case by
case basis for Affiliates who wish to lock in the Service Fee rates for subsequent periods at the rates currently in effect,
as listed in the table above. If Affiliate makes advanced Service Fee payments to Vigilant, advanced payments to
Vigilant will be applied in full to each subsequent Service Period's Service Fees until the balance of the credits is reduced
to a zero balance. System based advanced credits shall be applied to subsequent Service Fees in the amount that
entitles Affiliate continued operation of the designated camera unit systems for the following Service Period until the
credits are reduced to a zero balance.
D. Price Adjustment.Vigilant has the right to increase or decrease the annual Service Fee from one Service
Period to another; provided, however, that in no event will a Service Fee be increased by more than 4% of the prior
Service Period's Service Fees. If Vigilant intends to adjust the Service Fee for a subsequent Service Period, it must give
Affiliate notice of the proposed increase on or before the date that Vigilant invoices Affiliate for the upcoming Service
Period.
XIV. Miscellaneous.
A. Limitation of Liability. IN NO EVENT SHALL VIGILANT BE LIABLE FOR ANY INDIRECT, INCIDENTAL,
SPECIAL, CONSEQUENTIAL DAMAGES INCLUDING DAMAGES FOR LOSS OF USE, DATA OR PROFIT, ARISING OUT OF OR
CONNECTED WITH THE USE OF THE SOFTWARE PRODUCTS, WHETHER BASED ON CONTRACT, TORT, NEGLIGENCE,
STRICT LIABILITY OR OTHERWISE,EVEN IF VIGILANT HAS BEEN ADVISED OF THE POSSIBILITY OF DAMAGES.IN NO EVENT
WILL VIGILANT'S LIABILITY ARISING OUT OF OR RELATED TO THIS AGREEMENT EXCEED THE FEES PAID BY AFFILIATE TO
VIGILANT FOR THE SOFTWARE PRODUCTS LICENSED UNDER THIS AGREEMENT.
B. Confidentiality. Affiliate acknowledges that Software Products contain valuable and proprietary
information of Vigilant and Affiliate will not disassemble, decompile or reverse engineer any Software Products to gain
access to confidential information of Vigilant.
C. Assignment. Neither Vigilant nor Affiliate is permitted to assign this Agreement without the prior
written consent of the other party.Any attempted assignment without written consent is void.
D. Amendment; Choice of Law. No amendment or modification of this Agreement shall be effective
unless in writing and signed by authorized representatives of the parties.This Agreement shall be governed by the laws
of the state of California without regard to its conflicts of law.
E. Complete Agreement. This Agreement constitutes the final and complete agreement between the
parties with respect to the subject matter hereof, and supersedes any prior or contemporaneous agreements,written
or oral,with respect to such subject matter.
F. Relationship. The relationship created hereby is that of contractor and customer and of licensor and
Affiliate. Nothing herein shall be construed to create a partnership,joint venture,or agency relationship between the
parties hereto. Neither party shall have any authority to enter into agreements of any kind on behalf of the other and
\ VIGILANT
shall have no power or authority to bind or obligate the other in any manner to any third party. The employees or
agents of one party shall not be deemed or construed to be the employees or agents of the other party for any purpose
whatsoever. Each party hereto represents that it is acting on its own behalf and is not acting as an agent for or on
behalf of any third party.
G. No Rights in Third Parties. This agreement is entered into for the sole benefit of Vigilant and
Affiliate and their permitted successors, executors, representatives, administrators and assigns. Nothing in this
Agreement shall be construed as giving any benefits, rights, remedies or claims to any other person, firm, corporation
or other entity, including, without limitation, the general public or any member thereof, or to authorize anyone not a
party to this Agreement to maintain a suit for personal injuries, property damage, or any other relief in law or equity
in connection with this Agreement.
H. Construction. The headings used in this Agreement are for convenience and ease of reference only,
and do not define, limit, augment, or describe the scope, content or intent of this Agreement. Any term referencing
time,days or period for performance shall be deemed calendar days and not business days, unless otherwise expressly
provided herein.
Severability. If any provision of this Agreement shall for any reason be held to be invalid, illegal,
unenforceable, or in conflict with any law of a federal, state, or local government having jurisdiction over this
Agreement, such provision shall be construed so as to make it enforceable to the greatest extent permitted, such
provision shall remain in effect to the greatest extent permitted and the remaining provisions of this Agreement shall
remain in full force and effect.
J. Federal Government. Any use, copy or disclosure of Software Products by the U.S. Government is
subject to restrictions as set forth in this Agreement and as provided by DFARS 227.7202-1(a)and 227.7202-3(a)(1995),
DFARS 252.227-7013(c)(1)(ii) (Oct 1988), FAR 12.212(a)(1995), FAR 52.227-19,or FAR 52.227 (ALT III),as applicable.
K. Right to Audit. Affiliate, upon thirty(30)days advanced written request to Vigilant,shall have the right
to investigate,examine,and audit any and all necessary non-financial books,papers,documents,records and personnel
that pertain to this Agreement and any other Sub Agreements.
L. Notices; Authorized Representatives; Technical Support Agents. All notices, requests, demands, or
other communications required or permitted to be given hereunder must be in writing and must be addressed to the
parties at their respective addresses set forth below and shall be deemed to have been duly given when (a) delivered
in person; (b)sent by facsimile transmission indicating receipt at the facsimile number where sent;(c)one (1) business
day after being deposited with a reputable overnight air courier service; or (d) three (3) business days after being
deposited with the United States Postal Service,for delivery by certified or registered mail,postage pre-paid and return
receipt requested. All notices and communications regarding default or termination of this Agreement shall be
delivered by hand or sent by certified mail, postage pre-paid and return receipt requested. Either party may from time
to time change the notice address set forth below by delivering 30 days advance notice to the other party in accordance
with this section setting forth the new address and the date on which it will become effective.
\fVIGI LANT
Vigilant Solutions, LLC Affiliate:
Attn:Sales Administration Attn:
1152 Stealth Street Address:
Livermore, CA 94551
M. Authorized Representatives; Technical Support Agents. Affiliate's Authorized Representatives and its
Technical Support Agents are set forth below in the Contact Information Worksheet. Affiliate's Authorized
Representative is responsible for administering this Agreement and Affiliate's Technical Support Agents are responsible
for administering the Software Products and acting as Affiliate's Software Products support contact. Either party may
from time to time change its Authorized Representative, and Affiliate may from time to time change its Technical
Support Agents, in each case, by delivering 30 days advance notice to the other party in accordance with the notice
provisions of this Agreement.
N. Facial Recognition Image Integration. Affiliate may elect,at its sole discretion,to have Vigilant enable
the ability for the Affiliate's existing facial recognition images to be imported into its FaceSearch gallery. This process
requires some reformatting of the data for compatibility. The data remains property of the Affiliate, is maintained
according to the retention policy set by the Affiliate and is shared to other agencies under the rules defined by the
Affiliate. This service is at an additional cost. Vigilant uses a third-party service from The Center for Law Enforcement
Technology, Training, & Research, Inc. (LETTR) to deliver this service. If the Affiliate elects to use this service, it
acknowledges that The Center for Law Enforcement Technology, Training, & Research, Inc. a non-profit, 501(c)(3)
corporation, working under contract with Vigilant and acting on behalf of the Affiliate, will perform the described
services for law enforcement information sharing purposes.
VIGILANT
IN WITNESS WHEREOF,the parties have executed the Agreement as of the Effective Date.
Manufacturer: Vigilant Solutions, LLC
Authorized Agent: Bill Quinlan
Title: Vice President Sales Operations
Date:
Signature:
Affiliate Organization:
Authorized Agent:
Title:
Date:
Signature:
vVIGILANT
Enterprise Service Agreement
Contact Information Worksheet
Please complete the following contact information for your Vigilant Solutions Enterprise License program.
Enterprise License Agreement Holder
Company/Agency Name:
Company/Agency Type:
Address:
Primary Contact
Name:
Title: Phone:
Email:
Supervisor Information
Name:
Title: Phone:
Email:
Financial Contact(Accounts Payable)
Name:
Title: Phone:
•
Email:
Technical Support Contact#1
Name:
Title: Phone:
Email:
Technical Support Contact#2
Name:
Title: Phone:
Email:
For questions or concerns, please contact Vigilant Solutions'sales team:
sales@vigilantsolutions.com
1-925-398-2079
Nor VIGILANT
Exhibit A:Option#2 ILP Tier Package Components
Item Description
ILP Bundle for Agencies of Up to 100 Sworn
Includes:
-Agency license for LEARN SaaS
- Unlimited access to Commercial LPR data
-One (1) 3-Camera Mobile LPR System
- First year of Basic and Standard Service Packages
-LEARN-Mobile Companion
-Mobile Hit Hunter
-Agency license for FaceSearch
-Image gallery up to 5,000 images
ILP Bundle for Agencies of 101 to 200 Sworn
Includes:
-Agency license for LEARN SaaS
- Unlimited access to Commercial LPR data
-Two (2) 3-Camera Mobile LPR Systems
-First year of Basic and Standard Service Packages
- LEARN-Mobile Companion
- Mobile Hit Hunter
-Agency license for FaceSearch
-Image gallery up to 20,000 images
ILP Bundle for Agencies of 201 to 500 Sworn
Includes:
-Agency license for LEARN SaaS
- Unlimited access to Commercial LPR data
-Three (3) 3-Camera Mobile LPR Systems
- First year of Basic and Standard Service Packages
- LEARN-Mobile Companion
- Mobile Hit Hunter
-Agency license for FaceSearch
-Image gallery up to 50,000 images
ILP Bundle for Agencies of 501 to 1,000 Sworn
Includes:
-Agency license for LEARN SaaS
-Unlimited access to Commercial LPR data
-Four (4) 3-Camera Mobile LPR Systems
-First year of Basic and Standard Service Packages
-LEARN-Mobile Companion
-Mobile Hit Hunter
-Agency license for FaceSearch
-Image gallery up to 75,000 images
VVIGILANT
ILP Bundle for Agencies of 1,001 to 1,500 Sworn
Includes:
-Agency license for LEARN SaaS
-Unlimited access to Commercial LPR data
-Four (4) 3-Camera Mobile LPR Systems
-First year of Basic and Standard Service Packages
-LEARN-Mobile Companion
-Mobile Hit Hunter
-Agency license for FaceSearch
- Image gallery up to 100,000 images
ILP Bundle for Agencies of 1,501 to 2,000 Sworn
Includes:
-Agency license for LEARN SaaS
-Unlimited access to Commercial LPR data
-Five (5) 3-Camera Mobile LPR Systems
-First year of Basic and Standard Service Packages
-LEARN-Mobile Companion
- Mobile Hit Hunter
-Agency license for FaceSearch
-Image gallery up to 200,000 images
VIGILANT
Exhibit B:CJIS Requirements
Vigilant and the Affiliate agree on the importance of data security, integrity and system availability and that these
security objectives will only be achieved through shared responsibility. Vigilant and the Affiliate agree they will more
likely be successful with information security by use of the Vigilant supplied technical controls and client Affiliate use of
those controls; in conjunction with agency and personnel policies to protect the systems,data and privacy.
Vigilant and the Affiliate agree that Affiliate owned and FBI-CJIS supplied data in Vigilant systems does not meet the
definition of FBI-CJIS provided Criminal Justice Information (CJI). Regardless, Vigilant agrees to treat the Affiliate-
supplied information in Vigilant systems as CJI. Vigilant will strive to meet those technical and administrative controls;
ensuring the tools are in place for the proper protection of systems, information and privacy of individuals to the
greatest degree possible.
Vigilant and the Affiliate agree that information obtained or incorporated into Vigilant systems may be associated with
records that are sensitive in nature having, tactical, investigative and Personally Identifiable Information. As such, that
information will be treated in accordance with applicable laws,policies and regulations governing protection and privacy
of this type of data.
Vigilant and the Affiliate agree that products and services offered by Vigilant are merely an investigative tool to aid the
client in the course of their duties and that Vigilant make no claims that direct actions be initiated based solely upon the
information responses or analytical results. Further, Vigilant and the Affiliate agree that the Affiliate is ultimately
responsible for taking the appropriate actions from results,hits,etc.generated by Vigilant products and require ongoing
training, human evaluation, verifying the accuracy and currency of the information, and appropriate analysis prior to
taking any action.
As such,the parties agree to do the following:
Vigilant:
1. Vigilant has established the use of FBI-CJIS Security Policy as guidance for implementing technical security
controls in an effort to meet or exceed those Policy requirements.
2. Vigilant agrees to appoint a CJIS Information Security Officer to act as a conduit to the client Contracting
Government Agency, Agency Coordinator, to receive any security policy information and disseminate to the
appropriate staff.
3. Vigilant agrees to adhere to FBI-CJIS Security Policy Awareness Training and Personnel Screening standards as
required by the Affiliate.
4. Vigilant agrees, by default, to classify all client supplied data and information related to client owned
infrastructure,information systems or communications systems as"Criminal Justice Data".All client information
will be treated at the highest level of confidentiality by all Vigilant staff and authorized partners. Vigilant has
supporting guidance/policies for staff handling the full life cycle of information in physical or electronic form
and has accompanying disciplinary procedures for unauthorized access, misuse or mishandling of that
information.
5. Vigilant will not engage in data mining, commercial sale, unauthorized access and/or use of any of Affiliate
owned data.
6. Vigilant and partners agree to use their formal cyber Incident Response Plan if such event occurs.
\/VIGILANT
7. Vigilant agrees to immediately inform Affiliate of any cyber incident or data breach,to include DDoS, Malware,
Virus, etc.that may impact or harm client data,systems or operations so proper analysis can be performed and
client Incident Response Procedures can be initiated.
8. Vigilant will only allow authorized support staff to access the Affiliate's account or Affiliate data in support of
Affiliate as permitted by the terms of contracts.
9. Vigilant agrees to use training, policy and procedures to ensure support staff use proper handling, processing,
storing, and communication protocols for Affiliate data.
10. Vigilant agrees to protect client systems and data by monitoring and auditing staff user activity to ensure that it
is only within the purview of system application development, system maintenance or the support roles
assigned.
11. Vigilant agrees to inform the Affiliate of any unauthorized, inappropriate use of data or systems.
12. Vigilant will design software applications to facilitate FBI-CJIS compliant information handling, processing,
storing, and communication of Affiliate.
13. Vigilant will advise Affiliate when any software application or equipment technical controls are not consistent
with meeting FBI-CJIS Policy criteria for analysis and due consideration.
14. Vigilant agrees to use the existing Change Management process to sufficiently plan for system or software
changes and updates with Rollback Plans.
15. Vigilant agrees to provide technical security controls that only permit authorized user access to Affiliate owned
data and Vigilant systems as intended by the Affiliate and data owners.
16. Vigilant agrees to meet or exceed the FBI-CJIS Security Policy complex password construction and change rules.
17. Vigilant will only provide access to Vigilant systems and Affiliate owned information through Affiliate managed
role-based access and applied sharing rules configured by the Affiliate.
18. Vigilant agrees to provide technical controls with additional levels of user Advanced Authentication in Physically
Non-Secure Locations.
19. Vigilant agrees to provide compliant FIPS 140-2 Certified 128-bit encryption to Affiliate owned data during
transport and storage("data at rest")while in the custody and control of Vigilant.
20. Vigilant agrees to provide firewalls and virus protection to protect networks, storage devices and data.
21. Vigilant agrees to execute archival,purges and/or deletion of data as configured by the data owner.
22. Vigilant agrees to provide auditing and alerting tools within the software applications so Affiliate can monitor
access and activity of Vigilant support staff and Affiliate users for unauthorized access, disclosure,alteration or
misuse of Affiliate owned data. (Vigilant support staff will only have access when granted by the Affiliate.)
23. Vigilant will only perform direct support remote access to Affiliate systems/infrastructure when requested,
authorized and physically granted access to the applications/systems by the Affiliate. This activity will be
documented by both parties.
24. Vigilant creates and retains activity transaction logs to enable auditing by the Affiliate data owners and Vigilant
staff.
25. Vigilant agrees to provide physical protection for the equipment-storing Affiliate data along with additional
technical controls to protect physical and logical access to systems and data.
26. Vigilant agrees to participate in any Information or Technical Security Compliance Audit performed by the
Affiliate, state CJIS System Agency or FBI-CJIS Division.
27. Vigilant agrees to perform independent employment background screening for its' staff and participate in
additional fingerprint background screening as required by Affiliate.
28. Vigilant agrees that the Affiliate owns all Affiliate contributed data to include"hot-lists",scans,user information
etc., is only shared as designated by the client and remains the responsibility and property of the Affiliate.
\/VIGILANT
Affiliate:
1. Affiliate agrees to appoint an Agency Coordinator as a central Point of Contact for all FBI-CJIS Security Policy
related matters and to assign staff that are familiar with the contents of the FBI-CJIS Security Policy.
2. Affiliate agrees to have the Agency Coordinator provide timely updates with specific information regarding any
new FBI-CJIS, state or local information security policy requirements that may impact Vigilant compliance or
system/application development and, to facilitate obtaining certifications, training, and fingerprint-based
background checks as required.
3. Affiliate agrees to inform Vigilant when any FBI-CJIS Security Awareness Training, personnel background
screening or execution of FBI-CJIS Security Addendum Certifications are required.
4. Affiliate agrees to immediately inform Vigilant of any relevant data breach or cyber incident, to include DDoS,
Malware, Virus, etc. that may impact or harm Vigilant systems, operations, business partners and/or other
Affiliates, so proper analysis can be performed,and Incident Response Procedures can be initiated.
5. Affiliate agrees that they are responsible for the legality and compliance of information recorded,submitted or
placed in Vigilant systems and use of that data.
6. Affiliate agrees that they are responsible for proper equipment operation and placement of equipment.
7. Affiliate agrees that they are responsible for vetting authorized user access to Vigilant systems with due
consideration of providing potential access to non-Affiliate information.
8. Affiliate agrees that responsibility and control of persons granted access to purchased Vigilant systems, along
with data stored and transmitted via Vigilant systems,is that of the Affiliate.
9. Affiliate agrees that they have responsibility for all data security, handling and data protection strategies from
point of acquisition,during transport and until submission ("Hotlist upload") into Vigilant systems.
10. Affiliate agrees to reinforce client staff policies and procedures for secure storage and protection of Vigilant
system passwords.
11. Affiliate agrees to reinforce client staff policies for creating user accounts with only government domain email
addresses. Exceptions will be granted in writing.
12. Affiliate agrees to reinforce client staff policies for not sharing user accounts.
13. Affiliate agrees to use Vigilant role-based access as designed to foster system security and integrity.
14. Affiliate agrees that they control, and are responsible for, appropriate use and data storage policies as well as
procedures for the data maintained outside the Vigilant systems. This includes when any information is
disseminated,extracted or exported out of Vigilant systems.
15. Affiliate agrees that they control and are responsible for developing policies, procedures and enforcement for
applying deletion/purging and dissemination rules to information within and outside the Vigilant systems.
16. Affiliate agrees that it is their responsibility to ensure data and system protection strategies are accomplished
through the tools provided by Vigilant for account and user management features along with audit and alert
threshold features.
17. Affiliate agrees to use the "virtual escorting" security tools provided for managing client system remote access
and monitor Vigilant support staff when authorized to assist the client.
18. Affiliate agrees that the Vigilant designed technical controls and tools will only be effective in conjunction with
Affiliate created policies and procedures that guide user access and appropriate use of the system.
19. Affiliate agrees that information and services provided through Vigilant products do not provide any actionable
information,Affiliate users are responsible for the validity and accuracy of their data and developing procedures
to verify information with the record owner and other systems(NCIC) based upon the potential lead generated.
RIVERSIDE COUNTY SHERIFF'S DEPARTMENT
STAN SNIFF, SHERIFF
TO: All Personnel DATE: June 28,2016
FROM: Stan Sniff, Sheriff pepartment Directive#16-074
Supersedes DD#15-059 and DD#10-019
RE: Automated License Plate Reader (ALPR) Technology Usage and Privacy
Protection
The use of Automated License Plate Reader (ALPR) technology is a valuable law enforcement
tool that can be beneficial in several ways, including assisting with identifying stolen or wanted
vehicles, vehicles associated with missing or wanted people, and stolen license plates. ALPR
systems and information are also useful to capture license plates and vehicle images in or near
crime scenes, identify locations and patterns where wanted vehicles were located or frequent. and
are an effective investigative resource. However, ALPR systems also inadvertently gather data
related to vehicles that are not directly related to a law enforcement purpose. so adequate
safeguards need to be followed to prevent data from being misused and ensure privacy is properly
protected. Therefore, appropriate protocols must be followed in the gathering, storage and use of
ALPR data to ensure its integrity, maintain community confidence, and comply with applicable
laws.
The use of ALPR systems and information is restricted to official and legitimate law enforcement
purposes only. Department members shall not use. or allow others to use, the ALPR equipment or
related database for any unauthorized purpose.
1. ALPR systems and information databases shall only be utilized by personnel employed by the
Department in conjunction with their assigned duties.
2. Department members shall verify ALPR alerts with CLETS or Dispatch before taking any
enforcement action.
3. No Department member may operate ALPR systems or access ALPR information without first
completing a Department-approved, four-hour training course. The Ben Clark Training Center
is responsible for establishing and maintaining this training course, which will be administered
at the station-level. At a minimum, this training will cover general ALPR use. legal
requirements, privacy issues, and ALPR data retention and destruction guidelines. At the
conclusion of the training course, each participant's unique ALPR system username and
password will be activated.
4. Department members shall only use their own assigned username and password when
accessing any ALPR system. Username and passwords are specific to each authorized
Department member and shall not be shared. When searchingALPR information, Department
Department Directive #16-074
June 28, 2016
Page#2
members must document a justification for the inquiry (preferably a file number or other clear
identifier linking the access to a legitimate use).
5. ALPR information may be released to other authorized and verified law enforcement officials
and agencies for legitimate law enforcement purposes only. ALPR information gathered and
retained may be used and shared with prosecutors or others as required for criminal filings.
discovery, court proceeding, or other legal purpose. Under no circumstance may the
Department, or any Department member, sell, share or transfer ALPR data to anyone except
another public safety agency, or provide it for a commercial purpose.
6. Any printed ALPR information must be destroyed using a secure method (station and facility
specific). ALPR information shall not be disposed of in a regular trash or recycling bin.
7. Public record requests for ALPR related information shall be routed to Sheriff's
Administration for disposition in accordance with the California Public Records Act.
8. All electronic ALPR information will be securely stored on the ALPR database controlled by
the Sheriff's Technical Services Bureau(TSB). TSB shall maintain responsibility for protocols
involving information security, retention and destruction procedures, and compliance with
applicable privacy laws.
9. Sheriff's TSB will conduct system audits to ensure privacy and security. These audits will be
annually and follow a standard method query as determined by TSB. If the audit determines a
compromise in the ALPR system, the findings will immediately be reported to the Chief
Deputy of Support Services.
10. Department members using ALPR systems shall report errors they encounter by sending an
electronic mail to TSB. The email should include, at a minimum, the vehicle license plate
number. file number or case information used to access the ALPR information, a description
of the incorrect data, and how the information can be corrected. TSB will work to ensure
reasonable measures are taken to correct reported errors.
11. Authorized Department vendors with access to systems containing ALPR data shall maintain
reasonable security procedures and practices, including operational, administrative, technical.
and physical safeguards, to protect ALPR information from unauthorized access, destruction.
use, modification, or disclosure.
12. Sheriff's TSB will ensure a copy of this policy is appropriately placed on the Department's
website where it can be viewed by the general public. This requirement remains in effect as
long as the Department uses any ALPR system.
13. Sheriff's TSB will require that ALPR login and query records are retained for a period of two
years unless the information has been requested for investigative or other legal reasons. At a
minimum, these records must contain the following information:
Department Directive #16-074
June 28. 2016
Page#3
a. The date and time ALPR information was accessed;
b. The usemame of the person who accessed the information;
c. The license plate number or other data elements used to query the ALPR system;
d. The stated purpose for accessing the information
EDP Code for ALPR Incidents:
To assist in identifying incidents where ALPR systems directly lead to the recovery of vehicles or
the arrest of suspects. an EDP code has been created. Effective immediately, the following EDP
code is to be utilized when reporting ALPR-related incidents: 25T1-N
The ALPR EDP code shall be used as a secondary EDP, and is required on any written report
where this technology was effectively utilized during an investigation. For example, if an
abandoned stolen vehicle is located via a notification from the ALPR system, the recoveryshould
be documented as a Stolen Vehicle Recovery and the corresponding EDP for the recovery should
be first on the Form A. On the second line of the Form A,"ALPR"should be entered in the offense
section and 25T1-N should be entered in the EDP code section. This practice will ensure proper
identification of ALPR-related incidents and crime trends.
Example:
II ()III\SFS—CODE Si-C 110IN (RIME (1)IINT, II F:1)I'C'CI;)F
10851(a)CVC Stolen Vehicle Recovery(Local) 01 15B1-N
12()FFI:\SI:S-C)):H Si-.)TIIIN CRIME C();INIS I)LOP c'OIN-
ALPR 25T1•N
Retention of ALPR Information:
ALPR records retained by the Department will be maintained, safeguarded, and purged according
to all applicable laws and policies. Consistent with Government Code § 26202 and Riverside
County Records Management and Archive Policy A-43, raw ALPR information will be retained
for a period of two years, then deleted. ALPR data that may be needed for active or probable
litigation, is the subject of an active public records request, or is needed for auditing purposes shall
be maintained until the underlying matters are fully resolved before being deleted. ALPR
information documented in criminal and/or administrative reports will follow the same retention
period as the report. ALPR information placed in evidence will remain secured as evidence until
destroyed per Department policy. Deletion of ALPR data will follow the steps specified pursuant
to Board of Supervisors policy and in accordance with the Sheriff Department's records retention
schedule.
Official Custodian/Owner of ALPR System and Information:
The Commander of TSB, acting on behalf of the Riverside County Sheriff's Department, is
responsible for implementing the provisions of this usage and privacy policy as the official
custodian/owner of the ALPR system, and ALPR information covered herein.
Department Directive #16-074
June 28, 2016
Page#4
Public Hearing:
Before implementing an ALPR program within Riverside County or any local jurisdiction, an
opportunity for public comment will be set at a regularly scheduled public meeting of the
appropriate local governing body. Once held, the dates and locations of these public comment
opportunities will be posted on the Sheriffs website for historical reference.
SS: zh