labs@atheron:~/industries/public-safety/compliance$ audit --controls --evidence

Public safety security

Security reviews and Protected B scope, worked through.

Every public safety system goes through a security review before it touches live data, and many handle Protected B information. We build to the controls your agency sets and support the review; certification and attestation reports are issued by independent auditors, and authorization is your agency's decision.

Start a project See the example projects

// what matters here

What is different in this industry.

Controls built in

Role-based access, multi-factor sign-in, encryption, audit logs and retention designed in from the start, mapped to the controls your security team uses.

Protected B scope worked through

Which data is Protected B, where it is stored and who can see it, set with your security team before the build starts.

Independent testing

An independent penetration test before go-live, with findings fixed and retested. The test's lead time is in the estimate.

Documentation for the review

Architecture, data flows, threat model and test evidence prepared for your review and your vendor onboarding questionnaire.

// example projects

Priced examples for this service.

Each one is hypothetical, labelled as such, and priced live from our rate card. Open any of them in the estimator and make it yours.

Example projectWeb appMobile app

Offline incident report app

Hypothetical. Not a client, not a result.

// The problem

A police service's members take notes in the car, return to the station to type reports, and re-enter call details the dispatch system already holds.

// What we would build

An iOS and Android app and a web workspace that start each report from the dispatched call, work offline in the car, capture photos and statements, route reports for supervisor review and keep a full audit trail. Built to pass the service's security review, with that review shown as a lead time.

// What is in it

Reports started from the CAD incident, with call details already filled in
Notes, photos, statements and signatures captured offline
Supervisor review and return for changes, with every version kept
Audit trail of every view and change, by user and time
English and French forms where your service needs both

// Stack

React Native
Next.js
PostgreSQL
CAD integration
Azure Canada

// estimate

Build: ≈ US$167,000 to US$255,000, delivered within 30 weeksCAD 237,300 to 363,000
Hosting: ≈ US$751 a monthCAD 1,070 a month
Support: ≈ US$5,010 a monthCAD 7,135 a month

Prices in your currency are estimates from today's Bank of Canada rate. All invoicing is in CAD or USD.

Timeline by milestone

Discovery: 2.9 to 3.4 weeks
Design approved: 5.4 to 9.4 weeks
Core features: 2.4 to 3.9 weeks
Full build: 1.4 to 2.4 weeks
First build on devices: 4.9 to 7.9 weeks
Testing and fixes: 0.4 to 0.9 weeks
Store submission: 0.9 to 1.4 weeks
Custody walkthrough with your evidence unit: 0.9 to 1.4 weeks
Launch: 0.9 to 1.4 weeks

Outside our hands, and added to the calendar

App store review: 1 week
CAD interface access from your vendor: 1 to 4 weeks
Agency security review and vendor onboarding: 4 to 8 weeks

How it is paid

Deposit 20%: CAD 47,460 to 72,600
Discovery 8.1%: CAD 19,221.30 to 29,403.00
Design approved 8.1%: CAD 19,221.30 to 29,403.00
Core features 6.6%: CAD 15,661.80 to 23,958.00
Full build 4.4%: CAD 10,441.20 to 15,972.00
First build on devices 17.6%: CAD 41,764.80 to 63,888.00
Testing and fixes 2.2%: CAD 5,220.60 to 7,986.00
Store submission 5.8%: CAD 13,763.40 to 21,054.00
Custody walkthrough with your evidence unit 8.7%: CAD 20,645.10 to 31,581.00
Launch 8.5%: CAD 20,170.50 to 30,855.00
Holdback, 30 days after launch (10%): CAD 23,730 to 36,300

Start from this example

Example projectWeb appBlockchain

Evidence chain of custody record

Hypothetical. Not a client, not a result.

// The problem

A police service tracks physical and digital evidence on paper logs between the property room, the forensic lab and court, and each transfer depends on a signature that can go missing.

// What we would build

Barcoded evidence labels printed at intake, every transfer scanned and signed, and digital files fingerprinted at intake with each fingerprint and transfer recorded on a private ledger the service and its partner forensic lab each run a node of, on servers the service controls. A well-audited database with signed logs often does this job alone, and we will say so.

// What is in it

Barcode labels printed at intake and scanned at every transfer
Digital files fingerprinted so any change after intake shows
Transfers, signatures and locations recorded on a private ledger
Disclosure packages exported with the full custody history
Servers on premises, with label printers and scanners listed by quantity

// Stack

Next.js
Hyperledger Besu (private, permissioned)
PostgreSQL
Barcode label printers and scanners
On-premise servers

// estimate

Build: ≈ US$151,000 to US$230,000, delivered within 33 weeksCAD 214,900 to 327,400
Support: ≈ US$2,500 a monthCAD 3,565 a month
Hardware: ≈ US$14,500 to US$24,800CAD 20,670 to 35,270

Prices in your currency are estimates from today's Bank of Canada rate. All invoicing is in CAD or USD.

Timeline by milestone

Discovery: 2.9 to 3.4 weeks
Architecture: 0.4 weeks
Design approved: 3.4 to 5.9 weeks
Core features: 1.9 to 2.9 weeks
Full build: 1.4 to 1.9 weeks
Devnet: 3.4 to 5.9 weeks
Testing and fixes: 0.4 weeks
Testnet: 2.9 to 3.4 weeks
Penetration test findings closed: 2.9 to 3.4 weeks
Custody walkthrough with your evidence unit: 2.9 to 3.4 weeks
Launch: 0.9 to 1.4 weeks
Mainnet: 0.9 to 1.4 weeks

Outside our hands, and added to the calendar

Hardware delivery, after it is ordered: 2 to 6 weeks
CAD interface access from your vendor: 1 to 4 weeks
Independent penetration test and retest: 2 to 4 weeks

How it is paid

Deposit 20%: CAD 42,980 to 65,480
Discovery 1.9%: CAD 4,083.10 to 6,220.60
Architecture 5.2%: CAD 11,174.80 to 17,024.80
Design approved 1.9%: CAD 4,083.10 to 6,220.60
Core features 5.9%: CAD 12,679.10 to 19,316.60
Full build 3.9%: CAD 8,381.10 to 12,768.60
Devnet 15.7%: CAD 33,739.30 to 51,401.80
Testing and fixes 1.9%: CAD 4,083.10 to 6,220.60
Testnet 10.4%: CAD 22,349.60 to 34,049.60
Penetration test findings closed 7.7%: CAD 16,547.30 to 25,209.80
Custody walkthrough with your evidence unit 7.7%: CAD 16,547.30 to 25,209.80
Launch 1.9%: CAD 4,083.10 to 6,220.60
Mainnet 5.9%: CAD 12,679.10 to 19,316.60
Holdback, 30 days after launch (10%): CAD 21,490 to 32,740
Rack server x 1: CAD 14,200 to 28,800. Billed up front, at cost, outside the milestones
Desktop label printer x 4: CAD 3,490. Billed up front, at cost, outside the milestones
Corded barcode scanner x 4: CAD 1,180. Billed up front, at cost, outside the milestones
Labels and ribbons, starter stock x 6: CAD 1,800. Billed up front, at cost, outside the milestones

Start from this example

Example projectWeb appAIOpen-source model

On-premise report checker

Hypothetical. Not a client, not a result.

// The problem

Supervisors return a large share of reports for missing elements, and officers wait days to find out a report needs a change.

// What we would build

An assistant that checks a report against the service's own report standards before it is submitted, pointing out missing elements and inconsistencies for the officer to fix. It never writes the narrative. It runs on an open-source model on a GPU server inside the service, so no report leaves the building.

// What is in it

Your report standards and policies indexed as the reference
Missing elements and inconsistencies pointed out before submission
The officer writes and changes the report; the assistant only comments
An open-source model on a GPU server on premises, with no outside calls
An evaluation set from past returned reports, run before every change

// Stack

Llama or Mistral (open-source)
vLLM
PostgreSQL with pgvector
Next.js
Lenovo GPU server on premises

// estimate

Build: ≈ US$112,000 to US$171,000, delivered within 22 weeksCAD 159,800 to 242,800
Hosting: ≈ US$176 a monthCAD 250 a month
Support: ≈ US$2,500 a monthCAD 3,565 a month
Hardware: ≈ US$47,800 to US$197,000CAD 68,000 to 280,800

Prices in your currency are estimates from today's Bank of Canada rate. All invoicing is in CAD or USD.

AI route: Open-source model
Model running cost: ≈ US$176 a monthCAD 250 a month

Timeline by milestone

Discovery: 2.9 to 3.4 weeks
Specification and evaluation plan: 0.4 weeks
Design approved: 2.4 to 3.9 weeks
Core features: 1.4 to 1.9 weeks
Full build: 0.9 to 1.4 weeks
Working pilot: 3.4 to 5.9 weeks
Testing and fixes: 0.4 to 0.9 weeks
Penetration test findings closed: 0.9 to 1.4 weeks
Launch: 0.9 to 1.4 weeks
Production: 0.9 to 1.4 weeks

Outside our hands, and added to the calendar

Hardware delivery, after it is ordered: 2 to 6 weeks
Independent penetration test and retest: 2 to 4 weeks

How it is paid

Deposit 20%: CAD 31,900 to 48,500
Discovery 1.7%: CAD 2,711.50 to 4,122.50
Specification and evaluation plan 9%: CAD 14,355 to 21,825
Design approved 1.7%: CAD 2,711.50 to 4,122.50
Core features 5.2%: CAD 8,294 to 12,610
Full build 3.5%: CAD 5,582.50 to 8,487.50
Working pilot 27.2%: CAD 43,384 to 65,960
Testing and fixes 1.7%: CAD 2,711.50 to 4,122.50
Penetration test findings closed 8.7%: CAD 13,876.50 to 21,097.50
Launch 1.7%: CAD 2,711.50 to 4,122.50
Production 9.6%: CAD 15,312 to 23,280
Holdback, 30 days after launch (10%): CAD 15,950 to 24,250
GPU time for training and testing, at cost: CAD 300. Billed up front, at cost, outside the milestones
GPU server for AI, for the model: CAD 68,000 to 280,800. Billed up front, at cost, outside the milestones

Start from this example

// questions

Questions we get about this.

Does your team hold security clearances?

We do not claim any. Where your agency requires cleared personnel, we discuss it during scoping, before any work on live data.

Can you certify our system as secure?

No. We build to the controls and support your review and testing. Assessments are carried out by your security team or an independent assessor, and authorization is yours.

How much time does the review add?

It depends on your agency. The estimate adds it as a lead time, separate from our build, so the calendar is honest from the start.

Back to the industry: Public safety and emergency services About the service: Compliance and security engineering

// next

Not quite your project?

Tell us what you have in mind. We will come back to you with a range and the questions that would narrow it. Or book a call and talk it through.

Start a project Book a call