Publisher: Oregon State Chief Information Security Officer (Ben Gherezgiher)
Date Published: February 14, 2026
Relevant To: ALPR presentation (August) — the primary source for the SB 1516 encryption-gap issue raised in Bend PD Policy 428 coverage
Verification Status: Verified
Notes: Confirms Axon does not employ true end-to-end encryption (E2EE) architecture: law enforcement agencies using Axon Evidence do not retain their own encryption keys to their own data. The platform runs on FedRAMP-authorized Microsoft Azure Government Cloud and meets CJIS standards via access controls and personnel screening rather than technical E2EE. This is the state-official primary source behind the “what good is a bill if the key requirement is left undefined” quote from Jonathan in the Source Weekly’s Bend PD Policy 428 article, and behind the DPA transparency issue documented in the DCSO procedural record cataloged separately. One of the highest-value documents in this entire library for the encryption-compliance angle of the ALPR presentation. Migrated from the existing Bend Surveillance Oversight source library.