> ## Documentation Index
> Fetch the complete documentation index at: https://docs.docketstream.org/llms.txt
> Use this file to discover all available pages before exploring further.
# DocketStream Legal Compliance and Data Usage Policy
> How DocketStream complies with FCRA, GDPR, and state regulations. Includes data usage rules, audit logging, identity verification, and permitted use cases.
DocketStream is built on public records — but operating a public records platform responsibly means more than just pulling data from government sources. DocketStream operates under a strict compliance framework designed to protect both users of the platform and the individuals whose records appear in it. Understanding the rules that govern how you may use this data is your responsibility as a subscriber.
***
## Fair Credit Reporting Act (FCRA)
DocketStream is **FCRA-compliant** in the way it handles, stores, and presents public records data. However, compliance on DocketStream's end does not automatically authorize every use case on yours.
**Do not use DocketStream search results directly in employment screening, housing decisions, or credit determinations.** Using public records data as a consumer report in these contexts without following FCRA procedures — including required disclosures, adverse action notices, and candidate rights — is a violation of federal law.
Key points to understand:
* **DocketStream is not a consumer reporting agency (CRA).** It does not produce consumer reports as defined under 15 U.S.C. § 1681.
* If your use case requires a **FCRA-governed consumer report** — such as a formal background check for employment or tenancy — you must use a certified CRA that provides those reports under FCRA compliance.
* Public records data on DocketStream is suitable for situational awareness, investigative research, and operational intelligence — not as a direct substitute for a regulated background screening product.
***
## General Data Protection Regulation (GDPR)
DocketStream is a US-based platform serving US-based customers and US public records. Nevertheless, DocketStream applies **GDPR principles** to its own data handling practices.
* DocketStream does **not** process personal data belonging to EU citizens without appropriate consent or legal basis.
* Data collected during account creation and usage is handled in accordance with DocketStream's Privacy Policy.
* **Data subject requests** — including access, rectification, and erasure requests — can be submitted by emailing [support@docketstream.org](mailto:support@docketstream.org). DocketStream will respond within the timeframes required by applicable law.
GDPR rights apply to data DocketStream holds about *you as a user*. Public records data published by government agencies is outside the scope of individual erasure requests directed at DocketStream — such requests must be directed to the originating agency.
***
## State Public Records Laws
DocketStream operates in full compliance with applicable public records laws in the states where it aggregates data.
* **Georgia:** All data collected from Georgia county jails, GDC, state courts, and sex offender registries is obtained through lawful access to publicly available government systems, consistent with the Georgia Open Records Act.
* **North Carolina:** Roster data is gathered from publicly accessible North Carolina county jail systems in compliance with North Carolina public records statutes.
No data on DocketStream is obtained through unauthorized system access, data scraping of protected systems, or any method that violates state or federal computer access laws.
***
## Identity Verification
When you create a DocketStream account, you are required to complete an identity verification step. This is not optional.
Identity verification ensures that access to sensitive public records is limited to legitimate, accountable users. It deters misuse and supports DocketStream's compliance obligations with respect to data access controls.
Once verified, your identity is associated with all searches and activity on your account. This association is maintained in DocketStream's audit logs.
***
## Audit Logs
Every search performed on DocketStream is logged. Audit log entries capture:
* **Timestamp** of the search
* **User account** that performed it
* **Query parameters** submitted
These logs are maintained to support compliance reporting, to detect unauthorized or abusive usage, and to provide accountability for how sensitive public records data is accessed.
**Enterprise customers** can request exports of their organization's audit logs for internal compliance reporting. Contact [support@docketstream.org](mailto:support@docketstream.org) to request a log export.
***
## Permitted Use Cases
The following use cases represent appropriate applications of DocketStream's public records data:
Locating individuals, identifying booking patterns, and cross-referencing records across counties for active investigations.
Monitoring defendants for booking events, release events, and bond changes to manage bond exposure in real time.
Non-employment situational research, due diligence, and public-safety risk assessments that do not constitute FCRA consumer reports.
Investigating matters of public interest using lawfully obtained government records, consistent with press freedom protections.
Internal compliance checks and agency coordination using public records as supplementary intelligence.
***
## A Note on Legal Counsel
This page provides general guidance about how DocketStream approaches compliance. It is **not legal advice**. Before using public records data in any regulated context — including but not limited to employment screening, tenant screening, or law enforcement actions — consult your own qualified legal counsel.
***
If you have questions about permitted use cases, data subject requests, or DocketStream's compliance posture, reach out to the team directly at **[support@docketstream.org](mailto:support@docketstream.org)**. We're committed to helping you use the platform responsibly.