Data & Privacy Transparency Report
The ZeroEyes Data and Privacy Standard
ZeroEyes exists to shorten the time between a firearm or bladed object appearing and a first responder knowing about it. That mission does not require ZeroEyes to know who anyone is, where they have been, or what they do.
Object detection without identity surveillance.
Privacy by Design
What ZeroEyes needs to know
Visible threat objects, and the information necessary to verify and communicate a detection.
What ZeroEyes does not need to know
A person's identity, history, behavior, biometrics, or movements.
Why this standard is published
The public has legitimate reason to scrutinize and question artificial intelligence-based technologies. ZeroEyes believes the burden is on the company to clearly demonstrate what its technology does and does not do.
Scope
This Standard applies to the ZeroEyes AI threat detection platform and the ZeroEyes Operations Center across deployments in:
It governs imagery and metadata processed by ZeroEyes software or reviewed by ZeroEyes analysts.
Customer camera systems remain under customer control.
ZeroEyes does not govern the customer's own video management system, camera network, or video retention policies.
What ZeroEyes detects — and what it does not
What the system detects
ZeroEyes analyzes frames from cameras customers already own and operate to identify:
Visible, brandished firearms or bladed objects
Detection is focused on the object — not on identifying the person carrying it.
What the system does not do
ZeroEyes does not perform, and is not built to perform:
A detection creates a bounded data record.
Key-frame image containing the detected weapon
Corresponding camera image frame
Camera geographic coordinates
Camera identifier
Unique alert identifier
“Privacy is an important part of this rollout. ZeroEyes is designed to identify only visibly brandished weapons – not individuals. Operations Center screens remain blank unless a potential weapon is detected, and team members do not watch a continuous live camera feed. The platform does not perform facial recognition and does not store personal or biometric data.”
Thornton Township High School District 205
No personally identifiable information is collected.
ZeroEyes does not collect student, patient, employee, or visitor records, rosters, schedules, identifiers, or information naming a person. If a detection image incidentally contains a recognizable face, that face is not matched, indexed, enrolled, or made searchable.
Data Retention
| Data type | Retention | Deletion |
|---|---|---|
| Verified true-positive detection imagery | Retained indefinitely | Manual |
| Analyst-dismissed / false-positive imagery | Discarded within 30 days | Automatic |
| Detection metadata and audit logs | Retained indefinitely | Manual |
| Imagery under active legal hold | Retained for the duration of the hold; deleted upon release | Manual |
Customers may request a shorter retention period, and may request certified deletion of imagery associated with their account.
Customer Controlled
Customer Ownership, Access and Data Sharing
Your cameras.Your imagery.Your data.
All imagery originating from a customer's cameras remains the customer's property. ZeroEyes claims no ownership interest in customer imagery.
The ZeroEyes license is limited to what is necessary to provide the service
Transmitting a detection frame
Presenting it to a verifying analyst
Dispatching an alert
Upon contract termination, that license ends and associated imagery is deleted, with deletion certification.
No Cross-Customer Surveillance Network
No cross-customer network
One customer's detections cannot be viewed, searched, or queried by another customer, agency, or jurisdiction.
No third-party query interface
Outside agencies, including federal agencies, cannot search ZeroEyes data.
No commercial data sales
ZeroEyes does not sell, rent, license, broker, or share customer imagery or detection data with data brokers, advertisers, insurers, analytics companies, or commercial third parties.
Customer-controlled alert distribution
Alerts are sent only to recipients selected by the customer — generally security personnel and the responding agency identified in the customer's response protocol. The customer controls and may change that distribution list.
Infrastructure and Subprocessors
Customer camera
Cloud passthrough
ZeroEyes analyst
Customer-chosen recipients
- Subprocessors are disclosed publicly and maintained as current.
- Google Cloud data infrastructure may access alert imagery as generic data passthroughs to ZeroEyes-owned image processors.
- No external subprocesses are utilized.
Human Verified
Human Verification at the Center
AI detects.A trained human verifies.
No alert reaches a first responder without review and confirmation by a trained ZeroEyes analyst.
Verification standard
The ZOC is designed to verify clear, actionable detections with speed, while allowing additional time for review when a situation is ambiguous.
The system does not independently
ZeroEyes Operations Center
How analysts are trained and supported.
Initial training and evaluation
New Analysts complete structured onboarding and a probationary evaluation period prior to assuming independent duties.
Supervised monitoring
New Analysts monitor under direct oversight of experienced personnel and are assigned independent responsibilities only when they demonstrate readiness.
Team-based operations
The ZOC operates on a 24/7 basis, with peer, senior, and management support available at all times for escalation or supervisory review.
Contextual Decision-Making
Analysts evaluate each detection against available situational context and escalate promptly whenever a determination is not clear-cut.
Ongoing training and evaluation
Analysts are assessed on a recurring cycle and receive continuing training and coaching throughout their tenure.
Professional development
Analysts pursue relevant external certifications in emergency communications and security in support of their continued development.
Accountability and Restricted Access
Logging
All Analyst actions are logged and attributable.
Access Restriction
Analysts are restricted to viewing the specific detection under review and do not have access to live feeds or unrelated footage.
Statement of Understanding
All Analysts formally acknowledge confidentiality, SOP compliance, and accountability standards as a condition of employment.
Clear Limits
Transparency, Customer Control and Clear Limits
ZeroEyes states its limits plainly.
Customer auditability
Customers may request:
- Audit logs for detections, analyst dispositions, and alert dispatches for their own sites
- Annual account-level summaries covering detection volume, verification outcomes, and alert dispatches
- Advance notice of material changes to the Data and Privacy Standard
- Termination without penalty for breach of the Standard, along with certified data deletion
Legal process
ZeroEyes responds only to valid legal process and construes information requests narrowly.
- A warrant, subpoena, court order, or other valid legal request is required for information and verification
- ZeroEyes notifies the affected customer before disclosure unless legally prohibited
- ZeroEyes will abide by the customer's wishes based on the applicable legal basis
- ZeroEyes objects to overbroad requests
What This Technology Cannot Do
Visible weapons only
ZeroEyes cannot detect firearms concealed in clothing, bags, or vehicles. It is not a replacement for screening or entry control.
Camera coverage matters
A weapon outside a camera's field of view, obscured from view, or captured under poor conditions may not be detected. Performance depends on existing camera placement, resolution, and lighting as well as the AI model.
False positives can occur
Human verification exists to mitigate a false detection from automatically becoming a dispatch. Analysts attempt to de-escalate responses where appropriate, but will err on the side of caution when uncertainty remains.
ZeroEyes does not claim to prevent shootings
The company claims to reduce the time between a firearm becoming visible and a responder receiving actionable information.
No published research establishes that camera-based AI detection prevents attacks, and we will not imply otherwise.
ZeroEyes is one layer of security
Detection technology must be integrated into a broader, rehearsed response protocol. ZeroEyes provides white-glove onboarding to help customers integrate detections into their active assailant response procedures.
Threat detection does not require identity surveillance.
ZeroEyes is designed to recognize visible threat objects, add trained human verification, and deliver actionable information — while maintaining clear boundaries around privacy, access, and customer control.