One deployment per authority
Separate application, database, evidence store and configuration for each council. No shared casework data between organisations.
Trust & security
Sensitive work deserves serious protection.
ASB casework involves vulnerable people, children, victims and evidence that may end up in court. SecureCase is designed so information-governance, legal and ICT teams can see exactly how it is handled.
Controls
Security built into the way the platform works.
Role-based, least privilege
Administrator, manager, officer, police, CCTV and youth justice roles see only what their function needs. Gated modules require explicit case membership.
Two-factor authentication
Email-based second factor on sign-in, session protection and CSRF defences on every form that changes data.
Protected evidence delivery
Uploaded evidence is never served directly. Every download passes through authentication, record lookup and role checks. Respect Order documents carry SHA-256 integrity hashes that are verified on every download.
Audit trail
Significant actions are recorded with who, when and what — supporting management review, complaints and legal scrutiny.
Retention and subject access
Retention review, lawful-basis records and subject access exports are built in, not bolted on.
AI processing
Optional, governed, and always reviewed by an officer.
SecureCase can use AI to draft statements, summarise footage, transcribe audio and check court files. It is enabled only when an authority chooses to configure it and the data-processing arrangements have been agreed.
- Provider is configurable per authority, including a UK-processed option.
- Every output is a draft; nothing is filed, served or sent automatically.
- Prompts and outputs are task-scoped — drafting, summary, review, vision and transcription are governed separately.
- Documented in the DPIA support pack and sub-processor register supplied with the platform.
What AI does
- Suggests a first draft from recorded facts.
- Points out gaps before legal review.
- Saves hours of transcription and summarising.
What AI never does
- Decide whether to escalate.
- Submit anything to a court or partner.
- Run without the authority's explicit configuration.
Governance pack
Documentation ready for your information-governance review.
Supplied with every pilot so your DPO, legal team and ICT security can assess SecureCase properly before any real data is processed.
DPIA support pack
Processing activities, risks, controls and residual-risk assessment to complete your Data Protection Impact Assessment.
Data Processing Agreement
Controller and processor roles, instructions, security measures, sub-processors and breach notification.
Lawful basis and retention
Lawful-basis analysis for ASB casework and a retention and deletion schedule aligned to UK GDPR.
Security summary
Architecture, hosting, access control, backup and recovery, and the independent testing we expect before live use.
Sub-processor register
Every third party involved in hosting or processing, where they are located and what they do.
Implementation and support
Pilot plan, go-live checklist, support arrangements and service levels.
“Live use is conditional on assurance. We would rather pass your security review honestly than win a pilot quickly.”SecureCase commitment to design partners