Three streams. One system of record.
Every intake form is purpose-built for what it collects — and every record shares the same encryption, classification, and approval pipeline underneath.
Personal Records
Identity and case information for the people your agency serves — collected once, protected always. Every sensitive field is masked by default and only revealed by permission, with the reveal itself logged.
Default classification: ConfidentialOperational Records
The day-to-day record of what your agency does — inspections, incidents, service requests, and field activity — tied to the department and officer responsible, from open to resolved.
Default classification: InternalStatistical Records
Aggregate indicators and periodic returns, ready to compare period over period and roll straight into dashboards — without exposing a single underlying personal record.
Default classification: PublicEverything authorized staff need — nothing they don't.
Speed and clarity for the people using this every day, without cutting corners on control.
Dashboards built for the data you actually collect
Live KPIs and charts matched to the shape of the data — trend lines for time series, comparisons by department, composition by classification. Filter once, see it everywhere.
Maker-checker approval on every record
No record reaches Published without a second, independent reviewer — and never the person who submitted it.
Export in a few clicks
Filter, preview, export as CSV or a print-ready PDF — the exact view you built, nothing more.
Every action, logged
An append-only audit trail, filterable by user, record, and result.
Granular role-based access
Four roles, one permission matrix, zero guesswork about who can do what.
Find anything in seconds
A global command palette (⌘K) searches records, pages, and actions from anywhere in the app.
Security isn't a feature.
It's the foundation.
Every record Chancery collects is encrypted, every action is attributed, and every permission is enforced at the role level — not just documented in a policy binder.
Read the full security overviewEncryption at rest & in transit
AES-256 for stored data, TLS 1.3 for everything in transit.
Role-based access control
Four distinct roles enforced on every page and every action — not just the ones with a lock icon.
Maker-checker workflow
No record reaches the public record without a second, independent reviewer.
Full audit logging
Every view, edit, export, and permission change is attributed, timestamped, and retained.
Session auto-lock
Idle sessions are signed out automatically, no exceptions.
WCAG 2.1 AA
Designed to conform, so no authorized staff member is left out.
Built for every role — not just admins.
Four roles with genuinely different capabilities, enforced everywhere — not just documented in a spreadsheet.
Owns the system, not the content.
Manages users, permissions, and settings.
Cannot create, approve, or reveal a single record.
Collects the record.
Creates and submits personal, operational, and statistical records for review.
Sees only what their own department has submitted.
Verifies and publishes.
Approves or rejects submissions, builds reports, exports data.
Can never review their own submission.
Sees everything, changes nothing.
Full read access to every record and the complete audit trail.
Strictly read-only, system-wide.