Your plate does not stop at the camera.

1. The five handoffs

The industry is usually discussed as though it were one product: a camera that reads plates for the local police. It is closer to a supply chain. Each stage is a different company with a different business model, and a plate read gains value at every handoff because it gets merged with something new.

2. Who the companies are

Ownership matters here because it explains behaviour. A venture-backed company at a $7.5 billion valuation has to grow into that number, which means selling more cameras to more towns every year. A public company answers to quarterly guidance. Neither structure rewards saying no to a customer.

Note on the Thiel overlap: Founders Fund is an investor in Flock Safety, and Peter Thiel co-founded Palantir. That is a documented common investor across stage 1 and stage 4. It is not evidence of a contractual data relationship between the two companies, and we are not presenting it as one.

3. How a local read becomes a federal query

This is the part Apex has already lived, and it is why the supply chain is not an abstraction here.

Apex Police told Council on January 29, 2026 that the town does not share with federal entities, naming FBI, DHS and ICE, and adding “hard stop.” The town’s own records then showed two federal sharing relationships in March, federal accounts running 9,700 searches that reached Apex cameras between January and April, and Apex operators themselves running searches for Homeland Security Investigations and for another county’s double homicide case.

None of that required a policy change or a signed federal agreement. It required the network to exist. Two separate routes bypass any local promise:

• The commercial route. An agency buys access to an aggregator or broker rather than to your town. Nothing in a municipal contract governs that purchase, and it does not appear in a sharing snapshot because no share was created.
• The courtesy route. A local officer runs the plate on the requesting agency’s behalf. In the audit logs that looks like an ordinary local lookup. Apex’s own log contains searches reading “wanted by HSI for trafficking fentanyl” and “FLOCK ASSIST FOR MCSO.”

4. It identifies the wrong car, at scale

5. What the courts have said

Two rulings out of Norfolk, Virginia, going in opposite directions, now sit with the Fourth Circuit. Because North Carolina is in the Fourth Circuit, this is the appellate court whose ruling would bind Apex.

• DeCastro v. City of Norfolk (2024). A Virginia state court held that a citywide grid of Flock cameras operated as an unconstitutional dragnet search under the Fourth Amendment.
• Schmidt v. City of Norfolk (January 2026). A federal judge reached the opposite result, holding that Norfolk’s 175 Flock cameras did not violate Carpenter v. United States, reasoning that a 21-day retention limit kept the system short of the sustained tracking Carpenter addressed. The Institute for Justice appealed to the Fourth Circuit, arguing that a dense camera grid is dragnet surveillance regardless of how long the records are kept.

6. How these contracts get past councils

Most municipalities require council approval and a public hearing above a spending threshold, commonly $10,000. The industry has a documented answer to that.

• Sub-threshold pricing. Contracts structured at $9,900, just under a $10,000 approval trigger.
• Free trials. Sixty-day no-cost pilots, which involve no procurement at all, and which end with cameras already installed and a department accustomed to them.

Apex did not come in under a threshold. The town bought ten cameras, FlockOS and the paid Advanced Search add-on for $35,000 a year, which is well above any approval trigger. The pattern is worth stating anyway, for two reasons: it is what an expansion or a vendor swap can be structured to avoid, and a “free pilot” of a successor system is the most likely shape of the next proposal.

7. When the vendor’s own ethicists quit

8. The data is not held securely

• Cleartext feeds. Independent audits have found legacy ALPR endpoints broadcasting scans over unencrypted HTTP and RTSP.
• Exposed cloud storage. Misconfigured AWS S3 buckets have repeatedly left large volumes of location records reachable on the open internet.
• Access control failures at the department level. This one Apex can see locally: two audits found former employees still listed as active users in Raleigh Police’s Flock system, per WRAL Investigates.

The retention debate assumes the data is deleted when the clock runs out and secure until then. A record broadcast in cleartext or sitting in an open bucket has already left the retention regime.

9. Who else is querying, and what it means for Apex

Two categories of query illustrate why a local promise about local use does not describe the system.

• Across state lines, around state law. Agencies in one state query federated commercial networks to obtain travel records from states whose own laws prohibit that cooperation, including sanctuary jurisdictions and states with reproductive privacy protections.
• Private commercial use. Repossession, insurance underwriting and debt collection query the same infrastructure with no law enforcement involvement and no public accountability at all.

The through-line of this page is one sentence: the camera is the cheapest and least consequential part of the system. What makes a plate read powerful is the four handoffs after it, and none of those are in a municipal contract, a written department policy, or a retention setting.

10. Sources and provenance

Two different standards of sourcing appear on this page and readers should know which is which.

• Apex figures, fully sourced. The January 29 statement, the March and April sharing snapshots, the 9,700 federal searches, the Apex operator searches for HSI and MCSO, the 30-day retention and the $35,000 annual contract all come from records the Town of Apex produced to us. Primary documents and the full audit breakdown are posted at /audit and in the source documents section of the main site.
• Raleigh former-employee access: WRAL Investigates reporting on two audits of Raleigh Police’s Flock system.
• Axon AI Ethics Board resignation: the joint public resignation statement of June 6, 2022, signed by nine of the twelve board members including Barry Friedman, Ryan Calo, Danielle Citron and Jennifer Lynch. Covered in detail with further citation on the Axon page.
• Court rulings: DeCastro v. City of Norfolk (Virginia state court, 2024) and Schmidt v. City of Norfolk (federal, January 2026), with the Institute for Justice appeal to the United States Court of Appeals for the Fourth Circuit.
• LAPD audit: Los Angeles Police Department Inspector General audit, July 2026, and the subsequent expiry of the LAPD Flock Safety contract.
• Industry structure, ownership, scan volumes and procurement patterns: compiled from a research dossier assembled for this project in August 2026, drawing on corporate filings, contract records and reporting. The compilation did not carry per-claim citations, and the scan and camera counts in particular are figures reported by the vendors or derived from vendor statements rather than independently audited. Treat them as order-of-magnitude.