Security
Your department’s data,
Your department’s data,
in a database of its own.
Watchroom is single-tenant by design — not a row with your identifier on it in a table shared with hundreds of other departments.
Architecture
How it is kept.
One database each
Every department gets its own database and its own application instance. There is no shared schema and no pooled table, so a query written for one department cannot reach another’s records — by architecture, not by filter.
Encrypted throughout
Traffic is TLS-encrypted end to end. Stored data is encrypted at rest, and the most sensitive fields — identifiers of the kind found in a personnel file — carry their own field-level encryption on top.
HIPAA safeguards
Patient care records are protected health information. The platform is built around the Security Rule’s administrative, physical and technical safeguards: least-privilege access, unique user identification, automatic logoff and audit controls.
Nothing changes silently
Records that matter are versioned and audited. Amending a filed report creates a new version rather than overwriting the old one, so what the report said when it was filed stays recoverable.
Access you control
Role-based permissions down to the module, multi-factor authentication, and lockout on repeated failures. Officers see what officers should see; a probationary member does not.
Your data is yours
Export your records whenever you want, in formats usable elsewhere. Backups are taken continuously and stored so deletion in the application cannot quietly destroy the copy.
Straight answers
What we do not claim.
Security pages tend to imply certifications nobody has audited. Ours will not.
Ask us directly
Not “HIPAA certified”
Watchroom is designed around HIPAA’s safeguards. We do not call ourselves HIPAA certified, because no such certification exists.
Not SOC 2 attested
Not today. When an audit is complete this page will say so, with a date and a report you can request.
CJIS
CJIS applies to criminal justice information. Where a deployment requires it, we will tell you plainly what is and is not in place rather than implying coverage.
See it with your own run data.
A walkthrough is a working session, not a slide deck. Bring a recent incident and we’ll take it from tone-out to filed report.