Security and data protection, stated plainly.

Last updated: 2 August 2026. This public summary supports, but does not replace, contractual security schedules, data-processing terms or a customer’s own legal and data-protection assessment.

Security built into everyday access.

• Role-based access is enforced by the server, including restricted member access for licensed schemes.
• Passwords are hashed. New users receive a single-use set-password link rather than a password being stored or emailed in plain text.
• Login throttling, session regeneration and cross-site request forgery protection reduce common account and request risks.
• Module licensing is enforced server-side for sensitive areas, rather than relying only on hidden navigation.
• Relevant access and administrative activity is recorded in an audit log.

Files, backups and service resilience.

• Sensitive client files are stored outside the public web root and served through authenticated, permission-checked endpoints.
• Uploaded file types are checked using their content, not only the filename extension.
• Encrypted nightly backups are held outside the web root with a defined retention period and a restore procedure.
• Public services use HTTPS and security-related response headers.

Detailed recovery objectives, support arrangements and service commitments are confirmed during procurement. We do not publish an unsupported uptime percentage.

Data protection and customer responsibilities.

Data protection is a shared operational responsibility. The customer determines why and how its organisation uses personal information; Urban Spark configures and operates SIVO under the agreed contract and data-processing terms. Exact controller and processor responsibilities, retention periods, authorised users, information-sharing arrangements and incident contacts must be confirmed for each implementation.

For any crime or community-safety deployment, we expect the customer to complete an appropriate lawful-basis assessment, data-protection impact assessment, information-sharing arrangements and access policy with qualified advice. SIVO provides technical controls, but software alone cannot make an organisation compliant.

Crime Intelligence: current product status.

Crime Intelligence is a complete, licensed SIVO module. It supports controlled offender, incident, vehicle and organised-crime-group records; outcomes; bans and community behaviour orders; case management; manager-confirmed automatic exclusions; evidence-pack PDF generation; member reporting; bulletins and weekly digests; secure real-time chat; opt-in cross-scheme sharing; retention workflows; audit history and role-restricted member access.

Each customer’s licensed scope, contractual roles, retention settings, scheme rules and information-sharing arrangements are confirmed during implementation. We do not build or advertise facial recognition, and we do not claim a national offender index or direct police-data integration.

Current product boundaries

Targeted bulletins by content group, voice-to-text incident forms and the fuller member-portal Events, Documents and Information Requests areas remain planned enhancements. Current migration support and source-data requirements are confirmed during discovery.

What we can provide during procurement.

Subject to the product and deployment scope, we can discuss architecture, roles and permissions, data locations, backup and restoration, retention, audit logging, sub-processors, incident handling, migration and deletion. Contact sivo@urbansparkgroup.com or book a tailored demonstration.