You can’t hand residents’ data to a company that won’t let you hold it.

Oregon’s CISO testified in writing (Feb 14 2026) that law-enforcement subscribers "do not retain encryption keys to their own data."

Axon’s own CJIS guide: "Axon securely maintains PKI encryption keys for Axon Cloud Services" — there is no customer-managed-key option in the standard offering.

Contract Exhibit B designates Axon (not the agency) as Data Controller for operational metadata.

Axon may amend the data-processing agreement and sub-processor list unilaterally, on notice; the sub-processor list includes Azure, AWS, and — notably — Flock Safety.

Axon will notify the customer of a government data request only "if permitted" — a carve-out a gag order removes.

As a US key-holder, Axon is reachable by US legal process (subpoena, Stored Communications Act order, National Security Letter, CLOUD Act) regardless of where the data physically sits.

This is not theoretical for Axon: on its own UK Fusus listing Axon answers "User control over data storage and processing locations: No," and a Police Scotland public-records response confirmed Axon — not the police — still held the encryption keys after rollout.

Axon owns Fusus, a "real-time crime center" that pools ALPR with public and private camera feeds; one scraped dataset showed roughly 200,000 connected cameras across 100+ agencies.

The fixed cameras proposed for Bend are Axon’s Outpost/Lightpost ALPR, which Axon says are "fully integrated into Axon Fusus" — a deployment would feed that aggregation layer, not run a standalone camera.

Recognition doesn’t wait for an "ALPR" line item. Axon’s own Redaction Assistant already runs AI on uploaded Evidence video that "checks the video for vehicle license plates" and "checks the video for heads," and Smart Detection "runs automatically on all Axon Body 3 and Axon Body 4 videos as they are uploaded." Once footage is in Axon’s cloud, the recognition stack runs on it — ALPR is one license toggle, not a separate system.

That recognition can be applied after the fact: Axon’s Fusus "AI Search" lets operators "search recorded video" and "detect people, vehicles, and objects in historical footage," and licensed ALPR reads stay queryable in Axon Evidence "up to one year." Legal scholars call applying recognition to a stored archive a "step change in surveillance capability" — it makes an existing archive searchable without a new camera.

Which algorithms run on that footage is Axon’s call, not the agency’s: Axon’s program terms let it "use Customer Content … to accelerate Axon’s development of technology," and that processing has been automatic — not opt-in — for US law-enforcement customers since April 2021.

And turning ALPR on is a switch, not a purchase: Axon’s own FAQ says ALPR is "a subscription service activated by an Axon Evidence administrator" with "no additional equipment required." Approving ALPR-capable Fleet 3 cameras leaves the County minutes from plate-reading — on footage Axon’s cloud is already processing.

Axon’s hardware-plus-recurring-cloud-subscription model has twice drawn antitrust scrutiny over vendor lock-in: the FTC’s 5–0 complaint (Jan 2020) alleged Axon’s VieVu acquisition let it impose large price increases, and a cities’ class action (Howell Twp., Baltimore, Augusta) alleges the same lock-in roughly tripled body-camera prices — a federal judge let the monopoly claims proceed (Jan 2025). Both are allegations, not findings (the FTC matter was later dismissed on jurisdictional grounds); the point is that deepening a single-vendor Axon dependence is the documented pattern at issue.

The federal vulnerability database lists effectively one — disputed — CVE for Axon’s law-enforcement software; the security question for Axon is less "what’s on the public record" than "how little of it has been independently tested." (See fact boundary: this is an asymmetry of scrutiny, not a claim of shared flaws.)

279 federal-immigration-related queries hit Bend’s Flock data in ~3 weeks (June 2025) via a default-on sharing setting the department didn’t know was open.

Rural Organizing Project v. Oregon State Police (filed May 5 2026): ~1.4M federal immigration queries of OSP/LEDS/NLETS data in a year; ICE alone ran 176,576 — despite a no-immigration-sharing clause OSP re-signed.

Axon’s AI Ethics Board resigned en masse in June 2022 after the company overrode the board’s 8–4 vote on a Taser-equipped drone.

That same board warned Axon in 2019 that license-plate readers are "severely under-regulated" and should never be deployed without strict retention limits and a published policy first.

Decommissioned Axon body cameras were resold on eBay (2020) still holding unencrypted footage.

Dallas PD lost thousands of videos to Axon retention/auto-deletion settings (2022–23).

Axon’s "Draft One" AI report-writer deletes its own original draft "by design," defeating the audit trail.

Federal spending records show ~$147M in obligated DHS prime-contract dollars to Axon since FY2008 — ~$40M from ICE, ~$85M from CBP — with ICE obligations reaching $13.1M in FY2025.

Axon’s certifications are real: AES-256 at rest, FedRAMP High for its federal boundary, annual SOC 2 Type 2. The track record is where citizen data has actually leaked.