Law Enforcement Use Policy

This Law Enforcement Use Policy applies to all law enforcement agencies and their personnel accessing the Narrative AI platform ("Platform"). It establishes requirements specific to the law enforcement context, including data security, CJIS considerations, and authorized user standards.

1. Authorized Agency Users

Access to the Platform is restricted to: (a) sworn law enforcement officers employed by a subscribing agency; (b) authorized civilian personnel employed by a subscribing agency in an administrative or records management capacity; (c) agency IT and system administrators responsible for account management; and (d) supervisors and command staff authorized to review and approve reports. Agencies are responsible for ensuring that only authorized personnel are granted access and that access is promptly revoked upon separation or change in role.

2. CJIS Security Policy Compliance

Narrative AI is designed with the FBI's Criminal Justice Information Services (CJIS) Security Policy in mind. However, compliance with CJIS is the ultimate responsibility of the subscribing agency. Agencies subject to CJIS requirements should:

• Review whether Narrative AI qualifies as a "cloud service" under their CJIS compliance framework;
• Execute a CJIS Security Addendum with FirstLine Intelligence Systems, LLC prior to inputting CJIS-covered data, where required by their State CJIS Systems Agency;
• Ensure that access to the Platform is limited to personnel who have completed CJIS-required security awareness training;
• Apply multi-factor authentication, which the Platform supports.

Contact us at info@narrative-ai.org to initiate CJIS Security Addendum execution.

3. Data Classification

Officers should exercise judgment about what data is appropriate to input into a cloud-based platform. The following data types should NOT be entered into the Platform without express agency authorization: (a) NCIC or NLETS data; (b) classified or sensitive law enforcement information (SLEI); (c) grand jury material; (d) federal investigative information subject to sharing restrictions; (e) confidential informant identifying information.

Report narratives containing factual descriptions of incidents, subject behaviors, officer actions, and evidence are generally appropriate for AI-assisted drafting, consistent with your agency's cloud use policy.

4. Access Controls

Agencies are responsible for: (a) assigning and maintaining individual user accounts (no shared logins); (b) promptly deactivating accounts for separated or transferred personnel; (c) reviewing user access quarterly or upon significant organizational change; (d) reporting any suspected unauthorized access to info@narrative-ai.org immediately.

5. Device and Network Security

Platform access should occur on agency-approved devices and, where possible, on secured networks. Access from personal devices or unsecured public networks is discouraged and may violate agency policy. Officers should lock devices when unattended and use screen privacy filters in public environments.

6. Record Retention and Legal Holds

Agencies are responsible for complying with their jurisdiction's public records retention laws. AI-generated report drafts and final reports may be subject to public records requests. Agencies should coordinate with their records management unit to ensure Platform-generated reports are properly preserved in their Records Management System (RMS).

7. Incident Reporting

Agencies must notify FirstLine Intelligence Systems, LLC within 72 hours of discovering any breach, unauthorized access, or security incident involving Platform data. Notification should be made to info@narrative-ai.org with the subject line "SECURITY INCIDENT NOTICE." We will cooperate fully with agency investigation and notification obligations.

8. Training

Agencies should provide officers with baseline training on: (a) the purpose and limitations of AI-assisted report writing; (b) officer review and certification responsibilities; (c) appropriate data inputs; and (d) IARE analysis interpretation. Training materials are available upon request.

9. Supervisory Review

We encourage agencies to establish supervisory review workflows for AI-assisted reports, particularly for use-of-force incidents, major crimes, and critical incidents. The Platform's IARE feature is designed to support — not replace — supervisory review processes.

10. Contact

For law enforcement-specific questions, CJIS addendum requests, or security incident reporting, contact info@narrative-ai.org.