Trust and data sovereignty

Built in India. Answerable to Indian law.

Spear is made in India, hosted in India and run under Indian law. The force that uses it owns its data and decides how it is used.

Why we build this here

India’s public safety should run on software India controls.

Sensitive data, Indian hands.

Investigation records are among the most sensitive data a country holds. They should run on software built, hosted and supported by people answerable to Indian law.

Built for how India polices.

Indian FIRs, Indian operators, Indian bank statements, and the way a police force really works, from the SP to the beat. Not a foreign tool translated for India.

Our people, on the ground.

Requirements come from officers in live Indian deployments. Support comes from an Indian team, on call around the clock.

The people who keep India safe deserve the best software in the world. We intend to build it here.

Your perimeter

You choose where Spear runs.

Start on our India cloud and move to your own servers later if you need to. The software is the same in every option.

Bitsmith India cloud

Fully managed by us, hosted in India. Live in a day.

Your cloud

Spear installed in the cloud account your force or state already runs.

Your building

Servers inside your own premises, for units that require it.

What we commit to

Six promises, kept in the product.

Hosted in India

Case and location records are stored in India.

Every action logged

Every open, upload and export is recorded against the officer who did it.

No standing access

Bitsmith staff have no standing access to case data. Any support access is logged.

Each rank, its own view

SP, SDPO, station and officer each see only their own jurisdiction.

Clear data roles

Your force decides how its data is used. Bitsmith processes it on your instructions, under a signed agreement.

Deleted on time

Records are deleted on their retention date.

Indian law

Built on Indian law, not around it.

Spear is designed for the laws Indian police already work under.

Digital Personal Data Protection Act, 2023
Your force is the data fiduciary. Bitsmith is the processor, with safeguards and a signed agreement for every unit.
Bharatiya Sakshya Adhiniyam, 2023
Every record keeps its source and an audit trail, so it can be traced back when it matters in court.
CERT-In Directions, 2022
A documented incident process, including reporting to CERT-In and breach notice under the DPDP Act.

AI, plainly

Leads, not verdicts.

  • Spear AI surfaces leads. Officers decide.
  • Every answer links to the record it came from.
  • It asks for approval before it takes any action.
  • It reads only what that officer is allowed to see.
  • It runs only where a deployment turns it on. The models it uses are listed in our subprocessor register.

Talk to us

Security and privacy contacts.

Report a vulnerability

Write to hello@bitsmith.tech with the subject “Security” and steps to reproduce. Please do not access data that is not yours.

Data protection and grievances

Write to hello@bitsmith.tech.

Bring your legal officer to the briefing.

We walk through data roles, hosting and access with the people who sign off on it.

Book a briefing