Security
Where the data lives and who can touch it
How interview material is stored, who can see it, and what leaves the system. Written plainly for the pilot; a fuller whitepaper follows before general availability.
The short version
Interview material is evidence, and the system is built around that fact. Records live in a managed PostgreSQL database encrypted at rest. Recordings live in private storage buckets with no public access. Everything moves over TLS. The only person who can see a case is the officer who owns it.
No public registration
Officer accounts are provisioned by the administrator. The only open door is the clearly labelled demo workspace with fictional data.
Officer-scoped access
Every case query is scoped to the signed-in officer. Officers cannot see each other's cases.
Tokenised witness links
Witnesses need no account. Each link carries an unguessable single-case token, verified server-side on every request, dead once the interview ends.
Hashed credentials
Passwords are stored as bcrypt hashes. Sessions are signed JWTs.
Private storage
Recordings and documents live in private buckets. Playback uses time-limited signed URLs issued only to the case officer.
Direct-to-storage uploads
Recordings travel from the witness's browser to storage over TLS. They do not pass through application servers.
AI processing
Themis uses a language-model inference provider to generate and screen interview questions and to run post-interview analysis. Three rules bound that relationship:
Text only
Only transcript text is sent for AI inference. Video and audio never leave storage.
No training
Interview material is never used to train models, by us or by providers.
Context stays private
Uploaded case documents inform the interviewer privately and are never shown or read to the witness.
The demo workspace
The public demo signs visitors into a shared workspace containing fictional sample data. Anything entered there is visible to other demo visitors and is cleared periodically. Do not put real case information in the demo.
Retention
Interview material is retained for the duration of the investigation and any resulting proceedings, in line with the investigating agency's evidence-retention rules, after which it is deleted. During the pilot, agencies may request deletion of specific material at any time.
Reporting a concern
If you believe you have found a security issue, contact us at saadnizami@icloud.com with steps to reproduce. We read every report.