DATA GOVERNANCE

SECURITY, PRIVACY & DATA GOVERNANCE

Most training vendors bury this page. Sovereign Command serves public-safety agencies — so the data posture is stated plainly, up front.

DATA WE COLLECT
Name, work email and agency affiliation
Training assignment, progress and completion records
Assessment results against the mastery standard
Certificate records with unique certificate IDs
Account and access security events
DATA WE DO NOT COLLECT
NCIC or criminal-history information
Case files, investigative reports or dispatch data
Victim, suspect or evidence records
Operational intelligence of any kind
Clinical or diagnostic mental-health records
TRAINING DATA, NOT CJIS DATA

This platform holds training records. Nothing else.

Sovereign Command is deliberately kept outside the scope of Criminal Justice Information systems. It does not request, ingest or store CJI, and it is not connected to operational police information systems. Training data stays separate from criminal-justice operational data — by design requirement, not by policy afterthought.

AGENCY VISIBILITY MODEL
Agencies see
Assignment, start, progress, completion dates, certificate status and cohort completion rates.
Agencies never see
Personal reflections, private responses, individual assessments, journaling or question-level introspective data.
Participants see
Their own training, progress, certificates and account — nothing about other personnel.
ACCOUNT SECURITY
Invitation-only provisioning — no open registration
Multi-factor authentication for administrators
Role-based access with least privilege
Immediate deactivation when an agency removes a participant
Audit trails for administrative changes
PLATFORM & PROCESSORS

Course delivery runs on Thinkific, whose information-security program meets SOC 2 security standards with learner data hosted in the United States; a DPA and privacy controls are available for agency vendor and security review.

Identity and authentication are designed against the NIST SP 800-63 digital-identity guidelines. Privacy requests and incident response: security@sovereigncommand.com