Authorized before it opens. Sealed when it closes.
Vantage is designed around the Fourth Amendment. No session opens without a recorded lawful basis, a named operator and a named supervisor, and every session ends in a sealed record that cannot be edited.
“The right of the people to be secure in their persons, houses, papers, and effects, against unreasonable searches and seizures, shall not be violated, and no Warrants shall issue, but upon probable cause…”
The home is the most protected place in American law. Vantage treats that as a design requirement, not a policy note.
Section 1 · Legal framework
Two Supreme Court decisions define how Vantage works.
Vantage is not built around what the technology can do. It is built around what the Constitution allows. Two decisions of the Supreme Court of the United States set those limits, and the software enforces them.
Case 1
Kyllo v. United States
533 U.S. 27 (2001)
The holding
Using a device that is not in general public use to learn details inside a home, which could not otherwise be learned without physically entering, is a search under the Fourth Amendment and is presumptively unreasonable without a warrant.
What it requires of Vantage
No session can open without a recorded lawful basis
A warrant session is bound to the court, case number, address and time window on the warrant
The session closes automatically when the window ends
The basis is written into every reading and into the sealed record
Case 2
Brigham City v. Stuart
547 U.S. 398 (2006)
The holding
Officers may enter a home without a warrant when they have an objectively reasonable basis to believe that an occupant is seriously injured or imminently threatened with such injury.
What it requires of Vantage
An emergency basis exists only for an imminent threat to life or safety
The incident commander is named and the reason is recorded
The supervisor is notified immediately, every time
Every emergency session is reviewed afterward, and stays flagged until it is
Where the line sits
Vantage does not decide whether a basis is lawful in a particular case. That decision belongs to your agency, its counsel and the courts. Vantage guarantees that a basis is recorded, confirmed and reviewable before anything is read. This page describes product design and is not legal advice.
Section 2 · Mandatory controls
Nine controls. None can be skipped.
Each control must be satisfied before the next one unlocks. The order is enforced in the software itself. There is no override, no administrator exception and no setting that turns a control off.
01
Operator identity
The operator signs in with an individual account and multi-factor authentication. Shared accounts do not exist.
Enforced
02
Operator certification
The operator’s training must be current. An expired certification cannot open a session.
Enforced
03
Enrolled device
Sessions run only on devices enrolled by your agency. An unknown device cannot open one.
Enforced
04
Lawful basis
Warrant, consent, emergency or training. One must be chosen. There is no fifth option and no blank.
Enforced
05
Basis details
A warrant requires the court, case number, address and time window. Consent requires the signed form. An emergency requires the incident commander and the reason.
Enforced
06
Second-person confirmation
A named supervisor confirms the basis. The operator can never confirm their own session. In an emergency the supervisor is notified immediately instead.
Enforced
07
Scope lock
The address and time window are locked once confirmed. They cannot be widened while the session runs.
Enforced
08
Continuous record
Every reading is written the moment it is made, time-stamped and chained to the one before it. Nothing can be removed or rewritten.
Enforced
09
Seal and review
The record is sealed when the session closes or its window ends. Every later view and export is logged.
Enforced
Section 3 · The life of a session
Five stages, always in this order.
Step 1 · Basis
A session starts with a reason on file.
The operator chooses a basis and records its details: a warrant and its window, written consent, an emergency, or training. Until then the session stays locked.
Step 2 · Confirm
A second person confirms it.
A supervisor confirms the basis before a single room is read. In an emergency, the incident commander is named, the supervisor is notified immediately, and the session is reviewed afterward. Two named people stand behind every session.
Step 3 · Read
Every reading is written as it happens.
Each reading lands in the record the moment it is made, in order and time-stamped. Nothing can be removed or rewritten while the session runs.
Step 4 · Seal
Closing the window seals the record.
When the session closes, or its window ends, the record is sealed with an integrity check. From then on it can be read and exported, never edited.
Step 5 · Review
Oversight sees everything. Changes nothing.
Supervisors, internal affairs, prosecutors and defense counsel can review the sealed record through your agency’s process. Every view is logged, and an edit is simply refused.
Session 5208-A · Lifecycle01 · Basis
Basis
Warrant
Case
5208
Window
30:00
Session
Locked
Operator
k.reyes
Supervisor
d.moss
Confirmed
Yes
Session
Open
Readings
212
Rooms
6
No read
1
Edits
0
Sealed
06:21:30Z
Readings
1,490
Edits
0
Integrity
Verified
Views
3
Exports
1
Edits
Refused
Record
Intact
Section 4 · Emergency basis
Every emergency use reaches a supervisor. Immediately.
When a session opens on an emergency basis, the supervisor on duty is notified at that moment, not at the end of the shift. The notification cannot be turned off, delayed or skipped, by the operator or by anyone else.
Sent the moment the emergency basis is recorded
Names the incident commander, the address, the time and the reason
Delivery is written into the session record
The session stays flagged until a supervisor completes the review
Every emergency session appears in the oversight report
Vantagenow
Emergency session opened
Incident commander Capt. R. Alvarez opened session 14-A at 88 Mill Rd on an emergency basis. Reason: reported occupant, structure fire.
02:14:07Review required
02:14:07Emergency basis recorded
02:14:07Supervisor notified delivered
02:14:09Session opened
02:41:30Sealed · review pending
Section 5 · Authorization
Four bases. One is always required.
Every session names its basis before it opens. The basis travels with every reading, into the sealed record.
Basis 1
Warrant
The court, case number, address and time window are recorded before the session opens. The session closes by the end of the window.
Basis 2
Consent
Written consent from a person with authority over the premises, attached to the session record.
Basis 3
Emergency
For an imminent threat to life. The incident commander is named, the supervisor is notified immediately, and the session is reviewed afterward.
Basis 4
Training
On your own facilities, with people who have agreed to take part. Always kept apart from operational records.
Section 6 · Sealed records
A record no one can quietly change.
Every reading is written the moment it is made, in order, with a time stamp. When the session closes the record is sealed. From then on it can be read and exported but not edited, and its integrity check shows whether anything has changed.
Append-only while the session is open
Sealed on close, with an integrity check
Exportable for review and discovery
Every view and every export is logged
Section 7 · Security safeguards
Protected at every layer.
Access
Individual accounts
Every user signs in personally with multi-factor authentication. Nothing is shared.
Devices
Enrolled devices only
Only devices your agency enrolls can run a session, and a lost device can be revoked at once.
Data
Encrypted throughout
Session data is encrypted in transit and at rest.
Integrity
Chained records
Each entry is chained to the one before it, so a single change anywhere breaks the integrity check.
Duties
Separation of roles
No one can confirm their own session, review their own session, or grant themselves a role.
Retention
No quiet deletion
Records are kept under your agency’s retention policy. Nothing is deleted outside it, and every disposal is logged.
Alerts
Tamper alerts
A failed integrity check alerts the auditor automatically.
Session
Automatic lock
An idle device locks, and a session closes itself when its window ends.
Section 8 · Roles and oversight
No one runs a session alone.
Operator
Runs the session.
Cannot open a session without a basis, or leave one without a seal.
Supervisor
Confirms the basis.
Confirms each warrant, consent or training basis before a session opens. Is notified immediately of every emergency session, and reviews each one.
Auditor
Sees everything.
Read-only access to every sealed record, and to the log of who viewed it and when.
Retention follows your agency’s records policy and the law that applies to you.
Section 9 · Responsible use
What Vantage will not be used for.
These limits are part of every agreement, and access ends when they are broken. Misuse can be reported to legal@vantagesensing.com, anonymously if you prefer.
