Data & security
The questions a city reviewer asks before signing, answered here so you don't have to ask them.
If something below isn't specific enough for your review, email info@cobblestone-digital.com and you'll get a direct answer from the person who built the system, not a form response.
Who owns the data?
The court does. Records entered by your staff, and hours logged by your participants, belong to your court. We operate the system; we don't own or resell what's in it.
Is our data mixed in with other courts'?
No. Every court gets its own separate database, not a shared table with a filter on it. Your court's records are not in the same database as any other customer's, which means a query written for another tenant cannot reach your data.
Who at Cobblestone Digital can see it?
Access is limited to the operator responsible for running the platform, and only for support, maintenance, and fixing faults. We do not browse case records, and we do not use court data to train anything or sell it to anyone.
What happens if we end the contract?
You get your data. A canceled court keeps read-only access for ninety days so staff can pull records and closed cases before anything is archived. Export is included at every tier — there is no charge to leave, and no charge to take your records with you.
Is it encrypted in transit?
Yes. Every connection to the web portal and the mobile app runs over HTTPS with current TLS, on certificates that renew automatically. There is no unencrypted path into the system.
Is there an audit trail?
Yes, and it can't be quietly edited. Administrative actions are written to an append-only log that the application itself is not able to alter after the fact. If a record was changed, the log shows who changed it and when.
Does it meet accessibility requirements?
Yes. Under the Department of Justice's 2024 rule for Title II public entities, the web content a court provides to the public has to meet WCAG 2.1 Level AA — including content provided on the court's behalf by a vendor. Service Connect has been audited against WCAG 2.1 AA and tests clean. Most vendors in this space have not done this work, and it becomes the city's problem, not the vendor's, when it's missing.
What does the mobile app collect?
Location is used at check-in and check-out to confirm the participant is at the approved service site, and for that. The app is not a tracker: it does not follow anyone between shifts, and it does not run location in the background. Participants see exactly what was recorded about them.
Do participants pay anything?
No. Not a fee, not a subscription, not a charge to use the app. The city pays a flat annual price and that is the only money in the system. There is no advertising in the participant app.
Who are we, exactly?
Cobblestone Digital LLC, an Alabama limited liability company in Talladega. Service Connect is built, hosted, and supported by us directly — it is not white-labeled from another vendor, and support does not route to a call center. See cobblestone-digital.com.
Still reviewing?
Procurement and IT questions that need a written answer for a file — security questionnaires, insurance, contract terms, data-processing language — go to info@cobblestone-digital.com and get answered in writing.