County-held keys
Customer-managed KEKs, 90-day rotation, and field-level PII protection for sensitive metadata.
Security Architecture
Built for county custody and exportability.
RecorderOS separates public search from protected workflows and keeps portability central to the platform design.
FIPS path
AES-256-GCM at rest, TLS 1.3 in transit, AWS KMS in production, and FedRAMP Moderate readiness work.
No lock-in
Export recordings as standard PDF/TIFF plus JSON metadata so counties keep operational control.
Accessible by default
WCAG 2.1 AA contrast, keyboard-friendly forms, readable tables, and mobile-first layouts.