This is not a finding of wrongdoing. It is a set of questions your own supervisors can answer, produced by arithmetic you can check on your own exported data. Your logs are hashed on intake and destroyed once your reports are delivered.
Flock cannot audit Flock, and no vendor can credibly audit its own system. CivicAttest is a structurally independent review: we take the search log your ALPR system already exports, run it through a deterministic engine, and hand back a report that points a reviewer at the handful of patterns worth a second look, each one printed beside a plain-language innocent explanation. The tool asks the questions, and your command staff makes every decision.
The full 40-test methodology, covering every phase, every fix, every miss, and the one asterisk we refuse to drop until a fresh frozen batch earns it, is published in full. We lead with our limitations because an audit that hides its own is not an audit. Ask and we'll send the complete record.