ANPR you can stand behind.
It has to be trusted by more people than the ones who use it. So we build Spyglass to keep customers in control of their data, and to earn the trust of the public it passes.
Privacy
Your organisation stays in charge of its data.
And Spyglass makes it easy. Each rule is set once, in one place, so you fit the system to local law, and to the privacy and safety of the public you serve, without touching a single device.
Our promise
Your data belongs to you. Spyglass does not sell, rent or voluntarily disclose customer data to third parties, or take part in data‑sharing programmes. It is used only for the service agreed with you.
Support has been consistently excellent and they keep adding to the product. It's good to have a partner we can trust to keep our ANPR running.
Liam DaviesIT Director, High Court Enforcement Group
We help you comply with privacy law.
Spyglass builds privacy controls into the system itself, from the moment a vehicle is read to the day its data is deleted.
Vehicles, not faces
The system reads plates and vehicles, never faces, on the phone or the vehicle kit itself, and no image is sent to the cloud to be read.
Kept as long as you choose
A read that matches no list can be deleted automatically, even straight away. Everything else follows the retention you set.
Need to know
Each person sees what their role allows, and every search is logged against the person who made it.
Your rules after a match
A match sets off what you choose: an alert in the field, a record for the back office only, or a step in your own enforcement process.
Export and deletion
Export your data at any time, and delete it in the cloud and on every device.
Security
Security built for devices that leave the building.
Phones and vehicle kits work out in the field, where a device can go missing. So the data on every device is protected as carefully as the data in the cloud.
CJIS-aligned encryption
Everything your teams capture is encrypted with AES‑256 on the device and in the cloud, and over TLS in between.
Authentication
The apps are invite-only and open with a PIN and the user's biometric.
Access control
Roles decide who can see and change what, and Trellis logs user activity and admin changes.
Device security
Data stays sealed inside the app, and a missing device can be locked out and its app data wiped from the office.
Network protection
Cloudflare's firewall and DDoS protection stand in front of the service, with AWS network controls behind it.
Monitoring and response
Automated alerts flag unusual activity, backed by a documented response process.
Hosting
Hosted on AWS, in London.
Trellis runs on Amazon Web Services in London, inside a private network with least-privilege access, encryption keys held in AWS's key management service and administrative actions logged. Other regions are available on request, and as an AWS Partner we build on AWS's certified infrastructure and add our own controls on top.
Compliance
We hold ourselves to the standards you are held to.
Wherever our customers and partners work, the laws that govern their data shape how we build.
GDPR and UK GDPR
We comply with both, so your data protection team reviews us against the law it already works to. We are registered with the UK Information Commissioner's Office.
CCPA
We comply with California's privacy law, and your organisation can export or delete its data at any time.
NDAA
Compliant in both hardware and software, with no prohibited components or suppliers: the rule US federal buyers apply to video surveillance equipment.
TAA
Compliant, so Spyglass can be bought through US federal contracts that require products from approved countries.
CSA STAR (CAIQ)
Our controls align with the Cloud Security Alliance's CAIQ, so your security team can map them to a framework it already knows.
NCSC Cloud Security
We follow the UK National Cyber Security Centre's principles for cloud services, the guidance UK public bodies use to judge a cloud supplier.
Spyglass runs with our field teams in 10 countries, day in and day out. They've been straight with us from the first conversation.
Chief Revenue Officer, multinational services company
Whatever your due diligence needs, the answers come straight from the team that builds the system.