A Deep Dive on the CRPD Surveillance Stack

A few weeks ago, CR released their FY27 budget sheet. In our quest to find Flock hidden within the budget for 2027, we noticed a couple accounts in the PD that looked interesting (CRPD Accounts: 522101, 521108 and 522102). We made a public records request for a line item from those accounts which was quickly answered by the CR Finance department.

Every police department buys some version of the same back-end stack to some extent: computer-aided dispatch, an NCIC interface, 911 call-triage software, building security, cellular service, managed IT. After we strip out the systems any modern police department are needed for a functioning department, what's left in Cedar Rapids' FY2026 vendor mix is the surveillance and investigative capabilities of the CRPD. The Cedar Rapids Police Department's FY2026 paid-claims data across three general-ledger accounts, is roughly $245,000 in spending on surveillance and investigative software. Every vendor in that stack does some version of one or two things: capture information about people, vehicles, and property, or search and connect what's already been captured.

The Collection Layers: Flock

The most discretionary single piece of the stack also has the highest public visibility. Flock Group won a city contract in June 2024 for a two-year subscription not to exceed $499,250, running July 1, 2024 through June 30, 2026, with two two-year renewal options. The FY2026 paid-claims data shows one Flock invoice during the year: $149,178 on November 12, 2025. This is consistent with Flock's annual-billing model.

By the City's count, the deployed system reached a stationary ALPR count of 75...making Cedar Rapids one of the most surveilled cities in Iowa. See the interactive ALPR camera map to find every Flock camera location in Cedar Rapids. The hardware is small, solar-powered, and LTE-connected. The black Flock Falcon cameras photograph the rear of every passing vehicle, extract the plate plus a "vehicle fingerprint" (body color, body type, bumper stickers, damage), and push the record to a 3rd party cloud database searchable by plate or any of the other characteristics listed above.

The city emphasizes that data auto-purges after 30 days and that the system captures vehicle information rather than people. Both are true and both are narrower than they sound. Thirty-day retention is a configuration setting that doesn't address meta data and a whole host of other issues. The "Vehicle, not people" aspect doesn't change the fact that vehicles are normally driven by people whose movements are now indexed and shared nationally. Flock's 30-day retention claim was further complicated by the December 2025 security breach that left Cedar Rapids cameras exposed to the open internet.

Vigilant Solutions

Vigilant Solutions LLC - owned by Motorola, is used in squad cars and other mobile MDCs. This system has been in place for almost a decade now. Five invoices, totaling $27,185: three "License plate reader svc" lines in July 2025, a $333 "Investigative Data Platform" charge in March 2026, and a $24,016 "Investigative Data Platform" invoice on April 30, 2026.

That last invoice is the important one...it looks like an annual renewal of an active subscription. Vigilant's "Investigative Data Platform" is a national vehicle-location intelligence service, drawing from agency, repossession, and commercial LPR cameras to let investigators search where a given plate has been seen across that network, going back years.

CRPD's own 2019 LPR directive (written when Vigilant was the named vendor) set retention at 180 days for routine reads and "at least five years" for evidentiary hits. This is the transaction that complicates the city's "30-day retention" message most. Vigilant's product is designed around the opposite of short retention...the search value is in historical depth. See our sources page for the original CRPD 2019 LPR directive and related public records.

The Database Layer: CLEAR and LeadsOnline

The search-and-connect half of the stack runs about $25,000 in FY2026, across two vendors:

Thomson Reuters CLEAR — $8,767, billed as nine equal monthly charges of $974 for "CLEAR Proflex Software Agreement." CLEAR is one of the two major commercial people-finder platforms sold to law enforcement. It aggregates property records, vehicle registrations, court filings, business affiliations, utility connections, commercial LPR sightings, and a long list of other public and proprietary sources. With CLEAR, an officer can build a dossier on a person (addresses, associates, vehicles, employment), without a warrant, and without probable cause being attached to the query.

LeadsOnline LLC — $16,165, a single annual subscription. LeadsOnline is the dominant national database of pawn-shop, scrap-metal, and secondhand transactions. When someone in Cedar Rapids pawns an item, the transaction (name, ID, item, serial number, photograph) flows into a national database searchable by police anywhere. Marketed as a property-crime tool, it can function as a person-tracking database.

Combine these with Vigilant and Flock and you have the beginnings of a person-vehicle-property triangulation capability that's qualitatively different from the existing NCIC world. NCIC tells you whether someone is wanted. This stack tells you who they are.

Magnet Forensics: Phones

Magnet Forensics LLC billed CRPD $33,393 directly in FY2026 across three invoices for "Magnet AXIOM Premier," "GrayKey Cell Phone Access," and "GrayKey License." A fourth AXIOM invoice ($7,931.84) appears routed through reseller Carahsoft, bringing the FY2026 total to about $41,326.

AXIOM processes evidence from mobile devices, cloud accounts, computers, and vehicles into a single case file. GrayKey is the more controversial product. It is a brute-force phone-extraction tool that defeats lock screens on iPhones and Android devices. Possession of GrayKey isn't unusual for a mid-size department in 2026, but the line items confirm CRPD has the platform and active license seats. These tools produce extraordinarily detailed records of someone's digital life from a phone seized incident to arrest.

The Body-Camera Wrinkle

MacQueen Equipment LLC — a Motorola distributor in Iowa, billed CRPD $63,375 across 24 invoices in FY2026, including one explicit October 2025 line of $30,000 for "Licensing BWC (per year)." The remaining invoices are "Public Safety Equipment Maintenance" charges that, by cadence, appear to support the same body-camera fleet.

Body cameras don't fit cleanly with either bucket. They're sold as accountability tools and used as evidence-gathering tools, which is to say surveillance of the public. One could debate both sides but generally they are seen as a necessary department tool. Either way, they are outside the scope of this article.

The Sensys Gatso Side Note

For completeness: the largest single dollar amount in any of the three accounts is $1,076,494 to Sensys Gatso Inc., the vendor that runs Cedar Rapids' red-light and speed-camera program as a turnkey managed service. The city is explicit that automated traffic enforcement is a separate system from the mass surveillance camera network. The revenue logic is different (it's intended to be net-positive), the policy debate is different (about fines and state law, not ambient surveillance), and the cameras don't feed into Flock or Hexagon (yet). It belongs in its own bucket for now.

The Budget Picture: Where New Money Is Going

The two largest discretionary increases in the entire FY2027 police budget are the +$120,579 to Computer Software (account 522101, where Flock, Magnet, Hexagon, LeadsOnline, and Shield all live) and the +$369,473 to Other Professional Services (account 521108, where Sensys Gatso lives). Together they account for roughly two-thirds of the new discretionary money in the entire FY27 police budget.

Meanwhile, Uniforms are flat at $60,926...about $9,000 below FY25 actuals. Personal Protective Gear (ballistic vests, helmets) is flat at $22,465...about $33,700 below FY25 actuals, a 60 percent cut. Conferences, Training, and Travel is flat at $116,882...about $49,800 below FY25 actuals, a 30 percent cut. General-fund capital outlay for police vehicles, equipment, and software is zero, as it was the year before.

What We Think This Says About the Future of CRPD Policing

In our opinion, the shape of the spending describes a direction: CRPD is making growing investments in persistent observation (Flock, Vigilant), retrospective searchability (CLEAR, Vigilant, LeadsOnline, GrayKey), and cross-network reach (national LPR, commercial aggregators, interagency sharing). This growth continues to normalize and erode our civil rights and privacy. On paper The City seems to not be growing investment in anything that resembles increased visible presence or officer welfare. The FY27 budget keeps officer-facing operational lines...uniforms, body armor, training, equipment...flat against a year that already cut them well below FY25 actuals. Somewhere in the FY27 budget process, somebody chose to spend $120,000 of new discretionary money on software from massive software companies rather than on the gear, training, and equipment officers themselves wear and use.

That framing is not, by itself, an indictment...It is how mid-size American police departments have been told to modernize for a decade. But the consequence of mass surveillance is worth naming. Mass surveillance becomes normal not through one dramatic vote, but through renewals, subscriptions, data-sharing agreements, and budget lines that look technical until they are stitched together. Each tool can be defended on its own but used together, they change the relationship between residents and the state. Ordinary movement becomes searchable. Old records become investigative leads. Commercial databases become police infrastructure. Because this spending is fragmented across vendors, accounts, operating lines, and capital funds, it grows with far less public debate than officer's headcount, uniforms, training, or body armor. Privacy does not disappear all at once...it erodes as constant collection becomes the default and the public is left arguing after the system is already built.

What You Can Do

The next step is straightforward: email the Cedar Rapids City Council and tell them not to renew the Flock contract when it comes up in the coming months. Ask them to stop treating automated license-plate tracking as a routine software renewal and require a public debate before any extension, replacement, or expansion. Cedar Rapids residents deserve to know why the city needs a permanent network of ALPR cameras in a low crime era and why less invasive alternatives are not enough.

To understand the full picture of Cedar Rapids' surveillance network, read our Cedar Rapids ALPR overview, review the council meeting schedule, or check the blog index for all our coverage.