Combine intelligence disciplines within one case, configured for the operation’s sources, terrain and legal authority.
Primary disciplines
OSINT
Open source
Public records, media, commercial datasets.
SIGINT
Signals
Electronic signals and emissions. Lawful authority required.
GEOINT
Geospatial
Imagery, location, terrain and movement.
FININT
Financial
Trails, ownership, sanctions and virtual assets.
CYBINT
Cyber
Threat actors, infrastructure, breach and dark-web correlation.
SOCMINT
Social
Public profiles and open channels. A component of OSINT.
DOMEX
Documents
Digitisation, OCR, translation and media exploitation.
TECHINT
Technical
Device and system capability. Network metadata, never message content.
Combined analytical capabilities
Connected analysis within one case.
01ANPR / LPR correlation
02Authorised facial-match candidates
03Vehicle, person and object association
04Movement and route reconstruction
05Co-location and proximity
06Entity resolution across identities
07Network mapping
08Temporal and behavioural patterns
09Communications-metadata correlation
10Geospatial hot-spot analysis
11Financial and blockchain tracing
12Watchlist and indicator matching
13Cyber and dark-web correlation
14Anomaly and risk scoring
15Cross-case linkage
16Real-time alerting
17Evidential packaging
Eight intelligence disciplines connect into one case for human review. Process diagram.
OSINTSIGINTGEOINTFININTCYBINTSOCMINTDOMEXTECHINTOne case
Facial recognition, LPR and risk scoring are decision-support. They are not autonomous identification. A material finding requires authorised human review before action, escalation or dissemination.
How it is deployed
The technology is shaped around the operation.
01
South African cloud
Zadara and AWS, in South Africa. The default sovereign environment.
02
Agency on-premises
Where classification or policy requires the data to stay inside the agency.
03
Hybrid
Split by classification. Process what is relevant. Expose only what each user may see.
04
Edge and disconnected
Process data in the field and synchronise authorised records when a connection is available.
South African cloud runs on Zadara and AWS in South Africa. On-premises and hybrid models apply where classification requires them. Edge nodes synchronise only what the operation authorises.
Operational missions
Operational use cases.
Workflows, watchlists, FalconOne configurations and Obala processing pipelines are adapted to each mandate.
01Counterterrorism and national security
02Serious and organised-crime disruption
03Cybercrime and digital identity
04Financial crime, fraud, AML and illicit funds
05Trafficking, smuggling and cross-border crime
06Narcotics, weapons and contraband
07Public-order intelligence
08Kidnapping, missing persons and rescue
09Border, infrastructure and national key points
10Wildlife crime and protected areas
11Corruption, procurement fraud and insider threat
12Fugitive location and network mapping
13Vehicle, plate and movement analysis
14Dark-web, social and online threats
15Multi-agency fusion
Critical distinctions
Interpreting analytical results.
A facial-recognition candidate
is not a confirmed identity.
A number-plate match
does not confirm who was driving.
A device near an event
does not prove participation.
A relationship
does not prove criminal association.
An anomaly
does not prove unlawful conduct.
An automated summary
requires verification against its sources.
Restricted · verification required
Law-enforcement access.
Covert and overt support only where written authority, command approval and safeguards are in place. Arrests, searches and formal undercover work remain with authorised state personnel.
National, provincial and municipal law enforcement agencies
Intelligence and security services
Regulatory and compliance authorities
Judicial and prosecutorial offices
Verification
01Submit official agency credentials and authorisation
02Identity verification and background screening
03Legal agreements and compliance review
04Access provisioning and onboarding after approval