Privacy Policy

Ultra Far Consulting, LLC, doing business as Jurat (“Jurat,” “we,” “us,” or “our”), provides law enforcement digital field intake, electronic sworn statement, and document workflow software. This Privacy Policy describes how we handle Personally Identifiable Information (PII) and Criminal Justice Information (CJI) collected through our platform (https://demo.myjurat.com) and related services on behalf of subscribing law enforcement agencies.

We process information strictly on behalf of and under the direction of law enforcement agencies (“Agencies”):

• Affiant & Citizen Information: Name, date of birth, contact details (mobile phone number, email address), physical address, driver's license/ID information, and statement narratives provided during official field interactions.
• Officer & Agency Information: Name, badge number, official agency email address, and authentication credentials through Microsoft Entra ID.
• Audit & Metadata: Timestamps, IP addresses, digital signatures, identity verification methods, and system interaction logs required for evidentiary chain of custody.

Information collected is processed solely for official criminal justice and public safety administrative purposes, including:

• Delivering secure, time-limited one-time access links via SMS and email to affiants, victims, and witnesses.
• Generating tamper-evident, cryptographically signed sworn statements and evidentiary records.
• Facilitating case exports, discovery compliance, and official records retention.

Jurat maintains technical, physical, and administrative safeguards designed to meet the requirements of the FBI CJIS Security Policy, state privacy statutes, and NIST SP 800-53 standards:

• Encryption for data in transit (TLS 1.3) and at rest (AES-256).
• Cryptographic sealing and timestamping of finalized documents via Azure Key Vault-backed digital certificates.
• Single-tenant, per-agency deployment isolation and immutable audit logging.

The Jurat mobile app is a secure shell around the same platform described above. It adds no separate account, no separate database, and no analytics or advertising software of any kind. What it does add is a small number of on-device protections and the device permissions those require:

• Camera: used to photograph or scan a driver's license barcode and to capture ID or selfie images for victim packets. Barcode decoding happens on the device; the image is not uploaded for decoding. A resulting photo is transmitted only when the user submits it as part of a statement or packet.
• Photo library: used only to attach an image the user explicitly chooses, and to save an image back when the user asks for it. The app does not read, index or scan the library.
• Face ID, Touch ID or device passcode: used to re-confirm the person holding the device before screens containing criminal justice information are shown, on launch and after the app has been in the background. Biometric data never leaves the device and is never available to Jurat — the operating system answers only yes or no.
• Device integrity: the app checks whether the device has been rooted or jailbroken and refuses to run if so. This check is local and reports nothing.

The app also blocks screenshots and screen recording of screens that can contain criminal justice information, covers its own contents in the app switcher, and stores only one preference locally: the agency URL it was configured to connect to.

For questions regarding this Privacy Policy or our data security practices, contact:

• Ultra Far Consulting, LLC (d/b/a Jurat) — Jurat Legal & Privacy Office
• Email: jz@goultrafar.com
• Platform: https://demo.myjurat.com