Every search your agents run belongs to an officer, and a reason.

Agents are checking vehicles, searching records and preparing disclosure. TraceMem writes every one of those searches under the officer who asked and the purpose it served, holds the sensitive ones for an inspector, and keeps a record the defence can verify.

Or call us on +1 650 550 1418

Incident 0417

09:13:09Incident 0417

Asked by

DS Carter, 2210

Verified by Microsoft Entra ID

Agent and purpose

intel-agent

op_kestrel_arrest_planning

The model saw

Nothing yet: the search is waiting

Held for inspector

Held for Inspector Walsh, the duty inspector, in Microsoft Teams. Nothing is read until the inspector answers.

Illustrative incident. The force, officers, purposes and times are made up.


The same statement, three readers.

A statement names people who must never be exposed. The case officer reads it as taken. The model reads it with the witnesses and the child replaced for good, so no prompt or reply can reveal them. An officer with no reason to read it gets nothing at all.

PII Protection
Incident 0417Page 1 of 3

Witness statement

This statement is true to the best of my knowledge and belief, and I make it knowing that, if it is tendered in evidence, I shall be liable to prosecution if I have wilfully stated anything which I know to be false or do not believe to be true.

I, [REDACTED:witness_identity], was at the bus stop on the high street at about 21:40 with my daughter [REDACTED:juvenile_identity]. I saw a man I know as tok_9xq2 get out of a silver car, registration tok_c41m, and go into the shop. [REDACTED:witness_identity], who runs the café next door, saw him too.

Witness signature

Statement taken by

DC Osei, 3318

  • WitnessReplaced for good
  • ChildReplaced for good
  • SuspectToken, restored for the case officer
  • VehicleToken, restored for the case officer

Illustrative statement. Every name in it is made up.


The rules for AI in policing are being written now.

Some of these already apply and some are still coming. In the UK the law no longer asks you to log why a record was searched. Every other question these rules ask, who searched, for what and with which tool, can still only be answered from a record kept at the time.

  1. 6 May 2018 · EU

    Law Enforcement Directive logging

    Every consultation and disclosure of personal data is logged with its justification, date and time, and as far as possible who did it.

    Source (opens in a new tab)
  2. 29 May 2024 · UK

    Attorney General's Guidelines on Disclosure

    The revised guidelines ask for a clear strategy for large volumes of digital material, and for decisions about it that can be explained.

    Source (opens in a new tab)
  3. 2 Feb 2025 · EU

    AI Act prohibitions apply

    Banned: predicting a person's offending solely from profiling, scraping faces to build recognition databases, and live facial recognition in public outside narrow, authorised cases.

    Source (opens in a new tab)
  4. 3 Apr 2025 · US

    OMB M-25-21

    Federal agencies' AI for identifying suspects, risk assessments and biometric identification is high-impact, with minimum practices due within a year.

    Source (opens in a new tab)
  5. 7 May 2025 · US

    Utah SB 180

    A police report written wholly or partly with generative AI carries a disclaimer and the officer's certification that they checked it.

    Source (opens in a new tab)
  6. 19 Aug 2025 · UK

    The law stops asking why

    The Data (Use and Access) Act removed the duty to log the justification for consulting or disclosing law enforcement data. The date, time and person stay.

    Source (opens in a new tab)
  7. 1 Jan 2026 · US

    California SB 524

    AI-assisted police reports are disclosed and signed, the first AI draft is kept as long as the final report, and there is an audit trail.

    Source (opens in a new tab)
  8. 10 Jun 2026 · UK

    PoliceAI national centre

    £75 million over three years, and a public registry of the AI tools in use across policing, the first version due by the autumn.

    Source (opens in a new tab)
  9. 18 Aug 2026 · UK

    ICO audits of police facial recognition

    Five forces using facial recognition audited, with the key findings and shared themes published for every force to learn from.

    Source (opens in a new tab)
  10. 30 Sep 2027 · US

    CJIS new requirements become sanctionable

    The zero cycle for the Security Policy's newer requirements ends, audit controls among them. Multi-factor authentication is already required.

    Source (opens in a new tab)
  11. 2 Dec 2027 · EU

    High-risk AI in policing

    AI that assesses evidence, predicts offending or profiles people in an investigation takes on human oversight and logging duties.

    Source (opens in a new tab)

Dates checked against each regulator’s own publication, September 2026. Not legal advice.


Police systems already have a file with regulators and the courts.

Only one of these involved a general-purpose AI assistant, and nobody had authorised it. Each came down to who could use a system, for what, and whether anyone could say afterwards.

West Midlands Police

2025 · Home Affairs Committee, 2026

IOPC investigation open

Committee report (opens in a new tab)IOPC (opens in a new tab)

Intelligence behind a decision to ban away fans included a football match that never happened, generated by Microsoft Copilot.

What it came down to

An AI tool used without authorisation, and not initially disclosed to the chief constable.

For an agent, with TraceMem

Agents reach only the models your force approved, and every answer is on the record with the model, the data and the officer who asked.

Model Gateway

Police Service of Northern Ireland

2023 · ICO, 2024

£750,000

ICO fine (opens in a new tab)

A spreadsheet released under freedom of information carried a hidden worksheet with the surnames, ranks and roles of 9,483 officers and staff.

What it came down to

Simple checks before release that would have caught it were not in place.

For an agent, with TraceMem

Anything an agent sends outside the force can be held for one named authoriser before it goes.

Policy and Exceptions

Surrey Police and Sussex Police

2023 · ICO reprimands, 2023

200,000+ calls

ICO reprimands (opens in a new tab)Reprimand (opens in a new tab)

An app meant for a few officers was offered to all staff, and saved more than 200,000 calls, likely with victims, witnesses and suspects, without the people recorded knowing. The ICO found it unlawfully captured personal data.

What it came down to

A tool rolled out beyond its purpose, collecting data for a use nobody had declared.

For an agent, with TraceMem

Every read carries a declared purpose, and data a task was not built for is refused.

Governed Data Access

South Wales Police

2017 to 2019 · Court of Appeal, 2020

Ruled unlawful

Judgment (opens in a new tab)

Its use of live facial recognition was not in accordance with the law, its impact assessment was deficient, and it breached the equality duty.

What it came down to

Too much left to individual officers' discretion about who could be searched for, and where.

For an agent, with TraceMem

Who may use an agent, and for what, is set in policy and checked on every search, not left to discretion.

Verified Identity

Every month you wait, agents run searches nobody can account for.

Put in your own numbers. The searches your agents run before a governed path is in place can never be tied to an officer and a reason afterwards.

100
6 months

21 working days a month. Your numbers stay in your browser.

In 6 months of waiting

100,800

Agent searches with no record of which officer asked, for what purpose, or what came back.

Next 18 monthsNo recordOn file

Put the first incident on the record this month.

Pick whichever is quickest for you. However you get in touch, a person replies. With our forward-deployed engineers, TraceMem can be running inside your network in days.

What would you like?
Where are your agents working?

Pick any that apply.

When do your agents act on production systems?

Optional. A sentence is enough.

45days, free

Free for 45 days on our Docker-based trial image, inside your own network. When you are ready, it upgrades to the full enterprise product.

Forward-deployed engineers, ours or our partners', can set it up in days and help you define policies and integrations. This may be charged separately.