A July 19, 2026 report from the Dissent in Bloom Substack alleged that data collected by Flock Safety license plate reader cameras is stored in AWS GovCloud data centers located in Virginia and Ohio. These are federally restricted cloud facilities designed for sensitive government workloads. Flock Safety has publicly confirmed using AWS GovCloud infrastructure, citing its compliance with Criminal Justice Information Services (CJIS) standards, though the full scope of government access to that data remains a subject of serious civil liberties debate. Flock Camera Data Stored in AWS GovCloud: What You Need to Know [6]
What Is Flock Safety and How Does It Work?
Flock Safety is an Atlanta-based company that manufactures and operates automated license plate reader (ALPR) cameras deployed by law enforcement agencies and private communities. The cameras passively photograph every vehicle that passes, extracting the license plate number, vehicle make, color, and distinguishing features.
Each camera connects to Flock’s network via LTE cellular upload. That data moves in near real-time from the roadside device to cloud storage, where it becomes searchable by law enforcement through a web portal. Officers can run a plate, set up “hot list” alerts for specific vehicles, or review footage tied to a particular location and time window. [1]
The company markets its product as a force multiplier for understaffed police departments. It has expanded rapidly, with deployments in homeowners associations, school districts, and municipal police forces alike. [4]
Where Is Flock Camera Data Actually Stored?
Flock camera data is stored in Amazon Web Services’ GovCloud infrastructure, according to both the company’s own security documentation and the July 2026 Dissent in Bloom investigation. The specific regions identified are AWS GovCloud US-East, located in Virginia, and AWS GovCloud US-West, with Ohio cited as a key node. [6]
This is not a standard commercial cloud. AWS GovCloud is a physically and logically separate environment within Amazon’s infrastructure, designed to meet federal compliance requirements including ITAR (International Traffic in Arms Regulations) and FedRAMP High authorization.
Flock’s end-to-end security documentation confirms that all CJIS-regulated data is stored within GovCloud, with encryption in transit and at rest. [5] Municipal presentations obtained from public records corroborate this, with Flock representatives explicitly citing GovCloud hosting as a selling point during city council briefings. [7]
This article explores Flock Camera Data Stored in AWS GovCloud: What You Need to Know in detail, providing insights into its implications for privacy and law enforcement practices.
What Is AWS GovCloud and Why Does It Matter for Flock Camera Data Allegedly Stored in AWS GovCloud Data Centers?
AWS GovCloud is Amazon’s restricted cloud platform built specifically for U.S. government workloads. Access is limited to U.S. persons and entities, and the infrastructure is designed to support data subject to federal regulations like CJIS, ITAR, and FedRAMP High.
Choosing GovCloud is not a neutral technical decision. It places Flock’s data within an ecosystem that is architecturally integrated with federal law enforcement and intelligence workflows. That’s the core of what makes the Dissent in Bloom allegations significant: it’s not just that data is stored in the cloud, it’s that it’s stored in a cloud built for the federal government. [6]
What GovCloud compliance means in practice:
- Data is accessible only through credentialed U.S. government accounts or authorized contractors
- The infrastructure meets CJIS Security Policy requirements for criminal justice data
- FedRAMP High authorization means the system has been vetted for some of the most sensitive non-classified federal data
- Amazon employees with access must be U.S. citizens who have passed background checks
Is Flock Camera Data Storage Legal and Regulated?
Flock camera deployments are legal in most U.S. states, though the regulatory framework is uneven and often weak. There is no single federal law governing ALPR data collection, retention, or sharing.
Some states, like Illinois and New Hampshire, have enacted ALPR-specific statutes requiring data minimization and limiting retention periods. Most states, including New York, have no comprehensive ALPR law. That means the rules governing how Flock stores and shares data in Oneida County or anywhere else in upstate New York are largely determined by the contract between the local agency and Flock Safety, not by statute.
Flock’s legal policies do establish some baseline standards. The company’s evidence policy states that data is retained for approximately 30 days by default, with law enforcement able to place legal holds on specific records. [8] But those contractual protections are only as strong as the agency’s willingness to enforce them.
Flock Camera Privacy Concerns and Data Breaches
The central privacy concern isn’t a single dramatic breach. It’s the quiet, continuous accumulation of location data on millions of ordinary people who have never been suspected of any crime.
Every time a vehicle passes a Flock camera, its movement is logged and stored. Over 30 days, that creates a detailed picture of where someone works, worships, seeks medical care, or attends political meetings. That data, held in AWS GovCloud, is accessible to law enforcement without the driver’s knowledge. [6]
Civil liberties organizations have raised specific concerns about:
- Scope creep: Data collected for local policing being shared with federal agencies including ICE and DHS
- Lack of warrant requirements: Many jurisdictions allow officers to query Flock data without a court order
- Aggregate profiling: Combining plate reader data with other datasets to build behavioral profiles
- Vendor access: Questions about what Flock Safety employees can access within GovCloud
The Dissent in Bloom report specifically links GovCloud’s federal architecture to the possibility of broader national security infrastructure access, though it characterizes that analysis as interpretive rather than confirmed. [6]
Who Uses Flock Cameras and Why?
More than 4,000 cities, counties, and law enforcement agencies across the United States have deployed Flock cameras as of 2026. [2] That includes large urban police departments, small-town sheriff’s offices, private homeowners associations, and school districts.
Law enforcement agencies cite several reasons for adoption:
- Solving property crimes: Flock markets heavily on auto theft recovery and burglary clearance rates
- Staffing shortages: Automated surveillance reduces the need for patrol officers in certain areas
- Cost structure: Flock offers subscription-based pricing that can be more accessible than traditional camera systems
- Network effects: Agencies can share data with neighboring jurisdictions through Flock’s Fusus integration
The rapid adoption has outpaced public debate in many communities. City council presentations often emphasize GovCloud security certifications and 30-day deletion policies, while spending less time on the civil liberties implications of building a permanent surveillance grid. [7]
Flock Camera Data Retention Policies
Flock Safety’s default retention period is approximately 30 days, after which data is supposed to be automatically and permanently deleted. This policy is confirmed in both the company’s FAQ and its evidence policy documentation. [1][8]
However, the 30-day default is not absolute:
- Law enforcement can place a legal hold on specific records, extending retention indefinitely for active investigations
- Agencies may negotiate different retention periods in their contracts
- Data shared with third parties or other agencies may be subject to those parties’ own retention rules
A key question that remains underexplored is whether AWS GovCloud’s own backup and redundancy systems create copies of data that persist beyond Flock’s stated deletion timelines. That question has not been definitively answered in publicly available documentation.
Can Police Access Flock Camera Data Without a Warrant?
In most jurisdictions, yes. Under the third-party doctrine established in U.S. Supreme Court precedent, data voluntarily shared with a third party (like Flock Safety) generally does not carry Fourth Amendment warrant protections.
The 2018 Carpenter v. United States decision created some limits on long-term location tracking, but courts have not uniformly applied it to ALPR data. That leaves a significant legal gray zone.
What this means practically:
- Local officers can typically query Flock’s portal with no judicial oversight
- Federal agencies may be able to request data through administrative subpoenas rather than warrants
- The threshold varies by state law, with some states requiring a court order and others having no requirement at all
Cleveland’s city council review of Flock raised this exact concern, questioning what legal standards govern data requests and how those requests are logged. [9]
Flock Camera Accuracy and False Matches
Flock Safety claims high accuracy rates for its optical character recognition (OCR) technology, but independent verification is limited. False reads do occur, particularly with older vehicles, damaged plates, or plates from states with unusual formatting.
A false match can send law enforcement to stop an innocent driver. These “misread” stops carry real risks, particularly for Black and Latino drivers in communities already experiencing over-policing. This is a criminal justice reform concern that deserves more scrutiny as deployments expand across communities like those in the Erie Canal corridor and broader upstate New York.
How to Opt Out of Flock Camera Surveillance
There is effectively no opt-out for public road surveillance. If a Flock camera is mounted on a street you drive, your plate will be captured. That’s the nature of passive ALPR technology.
What residents can do:
- Attend public meetings where Flock contracts are being considered and demand transparency
- Request public records on your agency’s Flock contract, data-sharing agreements, and query logs
- Contact your elected representatives to push for state ALPR legislation with meaningful limits
- Support organizations like the ACLU that are litigating ALPR privacy cases
- Ask your city council whether your jurisdiction has a data-sharing agreement with federal agencies
Community engagement and grassroots activism are the most practical tools available right now. Local elections and town hall meetings are where these contracts get approved or rejected.
What Are the Risks of Flock Camera Data in Government Hands?
The risks extend well beyond any single data breach. The deeper concern is structural: a private company has built a nationwide surveillance network, stored it in federal cloud infrastructure, and made it accessible to thousands of law enforcement agencies with minimal public oversight.
The Dissent in Bloom analysis argues that storing this data in AWS GovCloud, rather than a standard commercial cloud, represents a deliberate architectural choice that integrates civilian surveillance data into federal government infrastructure. [6] Whether that integration is a feature or a bug depends entirely on how much you trust the government to use that access responsibly.
For communities in upstate New York and across the Rust Belt where Flock deployments are growing, this is not an abstract debate. It’s a question of who gets to know where you go, and who gets to decide when that information becomes evidence.
Frequently Asked Questions
What is AWS GovCloud?
AWS GovCloud is a restricted cloud computing environment operated by Amazon Web Services, designed for U.S. government agencies and contractors handling sensitive federal data. It meets compliance standards including CJIS, FedRAMP High, and ITAR.
Did Flock Safety confirm storing data in AWS GovCloud?
Yes. Flock Safety’s own security documentation and municipal presentations confirm that CJIS-regulated data is stored in AWS GovCloud. The company presents this as a security feature. [5][7]
What did the Dissent in Bloom article allege?
Published July 19, 2026, the Dissent in Bloom Substack alleged that Flock camera data is housed in AWS GovCloud data centers in Virginia and Ohio, and argued this integration with federal cloud infrastructure raises concerns about potential government access beyond local law enforcement. [6]
How long does Flock keep license plate data?
The default retention period is approximately 30 days, after which data is supposed to be permanently deleted. Law enforcement can place legal holds on specific records to extend retention. [8]
Can federal agencies like ICE access Flock data?
This is not definitively confirmed in public documentation, but civil liberties advocates have raised concerns about data-sharing agreements that could allow federal access. The GovCloud architecture makes such access technically feasible. [6]
Is Flock camera data covered by the Fourth Amendment?
Generally not under current case law, due to the third-party doctrine. The 2018 Carpenter decision created some limits, but courts have not uniformly applied it to ALPR data.
How many jurisdictions use Flock cameras?
More than 4,000 cities, counties, and agencies across the United States as of 2026. [2]
Can I find out if my city has a Flock camera contract?
Yes. Submit a public records request to your local police department or city government asking for any contracts, data-sharing agreements, and usage logs related to Flock Safety.
What is CJIS compliance?
CJIS stands for Criminal Justice Information Services. It’s an FBI security policy that governs how criminal justice data must be stored, transmitted, and accessed. Flock cites CJIS compliance as justification for using AWS GovCloud. [3]
Are there laws limiting ALPR use in New York State?
As of 2026, New York does not have a comprehensive ALPR statute. Protections depend on individual agency contracts and policies.
Conclusion
The allegations that Flock camera data is allegedly stored in AWS GovCloud data centers represent more than a technical footnote. They point to a fundamental question about who controls the surveillance infrastructure being built in our communities, and who benefits from it.
Flock Safety has been transparent about using GovCloud, framing it as a compliance and security win. But the same architecture that protects data from hackers also places it within a federal cloud ecosystem that is, by design, accessible to government agencies. That’s a trade-off communities deserve to debate openly, not discover after the cameras are already installed.
For residents of Utica, Rome, and communities across the Mohawk Valley and upstate New York, the path forward requires civic participation. Here’s what you can do right now:
- Request public records on any Flock Safety contracts in your municipality
- Attend city council and county legislature meetings where surveillance technology is discussed
- Contact your state legislators and push for comprehensive ALPR privacy legislation in New York
- Support local journalism and organizations doing the investigative work on government accountability
- Register to vote and support candidates who prioritize government transparency and criminal justice reform
Government transparency isn’t a partisan issue. It’s the foundation of a democracy that works for everyone.
References
[1] Flock Safety FAQ – https://www.flocksafety.com/faq
[2] Flock Cameras Data Behind 4000 City – https://www.newscow.co/2026/06/flock-cameras-data-behind-4000-city.html?m=1
[3] Privacy And Access – https://www.flocksafety.com/blog/privacy-and-access
[4] How Flock Safety Protects Resident Privacy – https://www.flocksafety.com/blog/how-flock-safety-protects-resident-privacy
[5] Flock Safety End To End Data Security Overview PDF – https://www.fostercity.org/DocumentCenter/View/2717/Flock-Safety-End-to-End-Data-Security-Overview-PDF
[6] Flock Camera Data Lives In Top Secret – https://dissentinbloom.substack.com/p/flock-camera-data-lives-in-top-secret
[7] CC WS October 8 2025 ALPR Presentation – https://ompnetwork.s3-us-west-2.amazonaws.com/sites/134/documents/cc_ws_october_8_2025_-_alpr_presentation_.pdf?ny_0cYXKjUsWQH9wTvjhcUmbUZ12DqN0
[8] Flock Evidence Policy – https://www.flocksafety.com/legal/flock-evidence-policy
[9] Flock Council Questions – https://signalcleveland.org/wp-content/uploads/2026/03/Flock_Council_Questions.pdf
[10] Who Is Flock Safety – https://www.maryvilleprivacy.org/maryville-residents-for-privacy/who-is-flock-safety/
