Trust
Trust and compliance
How Tellwright protects the data mission partners entrust to it, and the standards it is held to.
Data ownership
Each mission partner owns the data it brings to Tellwright products and the data its Kerbside cameras collect. We process it to provide the service, as our agreements set out. We do not sell it, and we do not use one mission partner’s data for another.
Our agreements permit Tellwright to use aggregated and de-identified data derived from the service to operate, maintain and improve our products. De-identified data is not customer data.
Authorizations and audits
| Item | Scope | Status |
|---|---|---|
| Federal cloud authorization, High impact level | Concord Government Cloud, Kinship, Murmur | Authorized June 2022; continuous monitoring |
| Criminal justice information security requirements | Concord Government Cloud, Kerbside, Handset Review | Assessed by state agencies annually |
| SOC 2 Type II | All cloud services | Annual; latest report period to June 30, 2026 |
| ISO/IEC 27001 | Tellwright Systems, Inc. and Tellwright International | Certified since 2019 |
| Facility clearance | Arlington headquarters | Active |
Legal demands for customer data
When a government agency, court or private party asks Tellwright for a mission partner’s data, we refer the request to the mission partner, which owns the data and is best placed to respond, unless the law prohibits us from doing so. We publish the number of demands we receive each year. In 2025 we received 63 and referred 61.
Export controls
Certain Tellwright products and features are controlled under U.S. export control law. Sales outside the United States are reviewed by our trade compliance team and our customer review committee, and are made only under the required licenses.
Subprocessors
Tellwright uses a small number of subprocessors, chiefly for cloud infrastructure in the United States and the United Kingdom, cellular connectivity for Kerbside, and customer support tools. Mission partners can see the current list in the Mission Partner Portal and receive thirty days’ notice of any change.
Contacts
Privacy: privacy@tellwrightsystems.com. Responsible use: responsibleuse@tellwrightsystems.com. Security: security@tellwrightsystems.com.