Security
Secured for the agencies that depend on it.
Forge is built for procurement scrutiny, not around it. Below is a plain account of the controls that are live today, the architecture behind the platform, and where it is headed — no acronyms we have not earned.
Live today
Controls live today.
These run today in the Forge Fleet pilot.
Access & identity
Every agency is run differently. Forge's access model adapts to your workflows — not the other way around.
- Granular, highly configurable role-based access — administrators define roles and permissions that fit how their agency is organized
- Per-application roles: a user can hold different permissions in each Forge module matched to their actual duties
- Optional two-factor authentication
- OIDC SSO and SCIM 2.0 user provisioning
Accountability
In public safety, who did what and when isn't a nicety — it's the record. Every change in Forge is attributable.
- Audit trail across the application
- Actor, time, and IP captured on changes
- Change-level detail retained for review
- Exportable history for audits and records requests
- Faster, more efficient responses to public records requests
Data protection
- TLS encryption in transit
- Managed secrets — no secrets in code
- Sensitive configuration encrypted at rest
- Short-lived signed URLs for file access
Architecture & hosting
- Runs in AWS Commercial or GovCloud (US)
- In an active pilot with a major U.S. metropolitan police department
- On-premise option via signed license certificates
Platform capabilities
As the suite grows.
These are platform- and architecture-level capabilities — framed honestly as where Forge is headed as the suite expands, not live Forge Fleet features today.
- Database-per-tenant isolation
- Scoped API keys
- Two-person approval for sensitive actions
- Tamper-evident audit chain
- Designed for multi-tenant operation
For procurement
Need our security details for procurement?
Request the security overview and we will walk your team through the controls, the architecture, and the hosting model.