Capability Statement

The categorical, IP-safe description of what Archangel does and does not do. This is the only place a public-facing WCE document commits to observable Platform behaviour. It is Exhibit B to the MSA.

1. What Archangel does

Archangel is a safety-mesh Platform that, when installed and provisioned by WCE within a Coverage Area, produces a categorical Notification indicating the presence or absence of an object drawn from the Notifiable Object classes enumerated below. Notifications are delivered to authorised operators of the deploying Authority and, where the Authority so elects and consumer end-users have opted in, to the Archangel App as a coarse advisory that a public-safety event is in progress at the venue.

2. Notifiable Object classes

The Platform is designed to produce Notifications for the following categorical classes:

1. Firearms.
2. Edged weapons at or above a size threshold enumerated in the Order Form.
3. Explosive precursor mass at or above a threshold enumerated in the Order Form.
4. Class-3 threat objects as defined by the deploying Authority's sector Addendum (where applicable).

The above list is categorical. The Platform is not warranted to detect every instance of every object of a listed class, nor to distinguish between subclasses within a class. The Trade-Secret Schedule governs how those categorical outputs are produced.

3. What Archangel does not do

Archangel does not:

1. Identify individuals. It does not perform facial recognition and does not generate biometric identifiers. Facial-image data, if incidentally present in a scene, is not the subject of any Notification.
2. Determine intent, motive, criminality, or guilt.
3. Predict future behaviour of a specific individual.
4. Take autonomous action against a person.
5. Substitute for a warrant or judicial process where one is required.
6. Detect objects outside the Coverage Area.
7. Guarantee prevention of any harm.

4. Coverage Area characteristics

A Coverage Area is a bounded physical envelope defined in the Field Acceptance Report. The envelope includes, at a minimum, spatial extent (metres in each axis), maximum occupancy at which the Platform is warranted to perform to Section 2, and environmental constraints (ambient noise, EM environment, temperature range). Operating the Platform outside the envelope voids the warranty for the affected Notifications and does not create a warranty for detection outside the envelope.

5. Compliance posture

WCE distinguishes between "Certified" — a framework for which WCE holds a current third-party attestation on file — and "Compliance-Ready" — a framework to which the Platform's design and controls conform, and for which the Platform is scheduled for audit but attestation has not yet been issued. WCE does not use "Certified" to describe conformance without paper.

5.1 Certified

1. WCAG 2.2 AAA (accessibility conformance, per the Accessibility Conformance Attestation on file).
2. ADA and Section 508 (accessibility, per the same Attestation).

5.2 Compliance-Ready

1. SOC 2 Type II (Trust Services Criteria: Security, Availability, Confidentiality, Processing Integrity, Privacy) — audit scheduled Q1 2027.
2. ISO/IEC 27001 (Information Security Management System) — audit scheduled Q1 2027.
3. ISO/IEC 27017 (Cloud Security) — audit scheduled Q2 2027.
4. ISO/IEC 27701 (Privacy Information Management System) — audit scheduled Q2 2027.
5. NIST SP 800-53 Moderate — controls implemented; assessment ongoing.
6. FedRAMP Moderate — package targeting Q3 2027 authorisation.
7. CJIS Security Policy — controls implemented; state-level attestations proceeding by jurisdiction.
8. StateRAMP — package targeting Q3 2027.
9. HIPAA (Business Associate posture) — controls implemented; BAA available.
10. FERPA — controls implemented; posture reviewed under the Schools Addendum.
11. GDPR / UK-GDPR — controls implemented; representatives appointed; DPA published.
12. CCPA / CPRA — controls implemented; disclosures published.
13. PIPEDA (Canada), LGPD (Brazil), POPIA (South Africa), PDPA (Singapore), APPI (Japan) — controls implemented; disclosures published.

6. Independent evaluation

WCE welcomes independent evaluation of Platform outcomes by qualified third parties under a mutual NDA that (a) does not require disclosure of the Trade-Secret Schedule and (b) publishes results at a categorical level. Design Partners may participate in structured evaluation programs; details are available under NDA.

7. Changes to this Statement

A change to this Statement that narrows a listed capability, changes a Certified/Compliance-Ready designation, or removes a listed class shall be effective on ninety (90) days' notice to Customers. Changes that expand a capability may take effect on publication.

← Legal Library · Archangel