Monday night the council will vote itself a bigger surveillance machine without ever using the word. Item 9 spends $2,338,763.29, all of it traffic-camera revenue, on a five-year Axon renewal: 89 new Axon Body 4 cameras, dashcams for 49 patrol vehicles each wired with an Ericsson cellular router so every vehicle becomes a streaming node, sensor triggers in 84 cars, and five years of cloud storage on top. Item 7 lays the pipe for what comes next: a $15 technology surcharge on every criminal and quasi-criminal fine, routed through a local bill in Atlanta instead of a straight vote, dedicated to keeping this technology funded forever. Neither item asks residents anything, because neither item is supposed to require asking, which is the real subject here. Stockbridge already carries the third-largest state ALPR footprint’s local share: volunteers have documented around 55 Flock-style plate readers in this town, on streets no one voted to put cameras on, feeding a private national network where any participating police department can search your plate’s history in any other participating city. Georgia lets that data sit for thirty months, not the thirty days Flock advertises, and no state law stops sharing it with ICE. This is a Fourth Amendment violation in plain operation. What Carpenter v. United States held unconstitutional was not surveillance but the dossier: the comprehensive, retrospectively searchable record of where you have been. A grid of readers on our few arterial roads, cross-referenced across municipal and state lines, gives the state exactly that mosaic on a driver who has done nothing at all, assembled without a warrant, without a suspicion, without an opt-out. That some courts have so far declined to say the quiet part (most recently Schmidt v. Norfolk and State v. Simonson, both crediting Flock’s “discrete point-in-time observations” story, while the Fourth Circuit now hears the appeal and one Virginia judge in Commonwealth v. Bell actually called a Flock drag a search) is the litigation calendar, not a constitutional finding.
The reason this is finally a national argument instead of a local one is that independent researchers stopped taking the vendors’ word for it. Atlanta-based Benn Jordan has spent two years doing the audits the police departments promised they were already doing: he found Flock administrative interfaces sitting open on the public internet with no credentials (watch any day’s footage, delete it, drop files on the box), and he and cybersecurity researcher Jon Gaines took a Flock camera apart until it rooted, showing the “secure appliance” was an ordinary Android device whose firmware an attacker could compromise undetectably, outside Flock’s audit logs entirely. Gaines’s firmware dumps later yielded the camera’s Wi-Fi signature set, which communities now use to detect the readers that Flock’s own map doesn’t always admit to, and Flock’s Condor cameras were documented streaming live public surveillance with no authentication at all. Flock spent months answering with “we’ve never been hacked” until Jordan downloaded the footage on camera. The pattern those findings expose is a private company operating a national surveillance network with no customer, no court and no city able to see inside it. That is why cities are now terminating Flock contracts at record pace, why Senator Hawley has an open probe, why Reuters reported Flock cutting eighteen percent of its workforce in October, and why Sheboygan, Wisconsin fired Flock in September when it emerged the company had quietly tried to sell the city’s own traffic data to another buyer: not a hack, just the business model surfacing. The ACLU’s “Get the Flock Out” campaign and EFF’s 2025 investigations say the same thing with subpoenas and public records where Jordan and Gaines used rootkits and a Wi-Fi antenna.
The same questions apply to the company in item 9, so read Axon’s backend before praising the hardware. Every frame those 89 body cameras and 49 dashcams capture leaves Stockbridge for Axon’s cloud, Evidence.com, hosted on Microsoft Azure, where Axon is Azure’s largest customer and the company boasts of holding some forty times the Netflix video library. Axon’s public line is that it doesn’t sell agency data and the agency “owns” it, but the contract actually before council goes further than the slogan. Axon’s own Road Footage Notice says it uses road video “to evaluate and train its license plate recognition system”: your plates become Axon’s product training data, “not sold” but not deleted on request either, because Axon says it can’t find your segment without collecting more information about you. The Fusus terms in the packet make Axon a “Data Processor” of the city’s live video and let it automatically collect the traffic data, location data and access logs of everyone using the platform. And the Dedrone clause, drone detection data sitting in the terms of a contract Stockbridge has been asked to sign without a word of discussion, grants Axon the right to use that data “for any purpose,” including compiling it “with or without compensation” with other customers’ data and other governments’, the same Dedrone that Axon bought outright in 2024 and wired into Fusus. That is the actual architecture: cameras feed a private cloud, the cloud feeds Axon’s AI products, the contracts license the aggregation, and the only check on any of it is the audit log the vendor keeps about itself. Benn Jordan’s point about this space is the point the packet proves: the network is only as secure and only as honest as the weakest agency plugged into it and the vendor that refuses to be audited, and Stockbridge is about to buy five more years of both, funded by the cameras nobody debated.