Solutions · Lawful Intercept

Lawful intercept, operated end to end.

Lawful intercept is one obligation with a different answer on every network. Safe Harbor Intercept is the service that answers it: target and destination defined from the order, call data and content collected from your network, converted to the standard the agency's systems expect, and delivered under a monitored chain of custody.

What It Does

Six functions, every one of them ours.

A provider's obligation does not end when traffic is copied. It ends when the right evidence reaches the right agency in the right format, with a record of how it got there. These are the six things that has to include. The seventh — supporting any network at all — is the section below.

Defines

Target assignments and the destination parameters of the requesting law-enforcement agency, taken from what the order authorizes and nothing more.

From the order

Collects

Intercepted data taken from the network without disturbing the service your subscribers are paying for.

Call data · Content

Converts

Messages translated into the standard format the agency's collection systems can actually ingest.

LAES standards

Delivers

Intercepted communications handed to the appropriate agency, over a path built for the purpose.

Secure delivery

Controls

System security enforced and system activity monitored, so who did what is never in question.

Chain of custody

Maintains

Operations monitored and maintained continuously, not stood up per order and hoped over.

24/7/365
Any Network, Any Technology

Built for the network you actually run.

Most providers inherit more than one network type, usually through acquisition. One relationship covers the whole estate rather than one per technology.

Where it applies

Circuit-switched, packet data, broadband, wireless, satellite and VoIP — each engineered to the lawfully authorized electronic surveillance standard that applies to it, rather than to a single standard bent to fit.

A single point of administration covers the lot, and can connect to more than one switch or router at a time while delivering to more than one destination at once. That matters in practice: a provider under two concurrent orders should not need two deployments.

The same capability is available to small and medium providers as to national carriers. Scale changes the volume, not the obligation.

Circuit-switched (TDM, class-5 switching environments)
Packet data and broadband — cable, DSL, fiber
Wireless and LTE, including resellers and MVNOs
Satellite, fixed and mobile
VoIP — session border controllers, soft switches, SIP proxies
Multiple simultaneous connections and delivery destinations
Why A Trusted Third Party

The capability is the easy half.

Standing up an intercept capability is an engineering problem with a known answer. Operating it correctly, under time pressure, in front of an agency and eventually a court, is a different job — and it is the half that is usually underestimated.

The order is reviewed first

Validity is checked before anything is provisioned. An invalid order goes back for correction rather than being executed.

Only what is authorized

Provisioning follows the four corners of the order. Over-collection is a liability, not a courtesy.

Deactivated on the end date

An intercept that outlives its order is a problem. The end date is tracked and enforced.

A record that survives

Every step recorded, so the evidence trail stands up long after the intercept is over.

Bring us your network.

Tell us what you run and what you have been served with. We will conduct a free technical analysis and recommend the least-cost, minimally invasive path to compliance.