Salient Characteristics - Facial Recognition.pdf
PDF 63 KB Posted
- Attached to
- Clearview AI - Facial Recognition Licenses
- Solicitation number
- PAN009515
About this file
This is a salient characteristics document specifying requirements for 5 licenses of Clearview AI's facial recognition technology system. The system is a URL-based intelligence service running on a cloud database with 12-month access periods. The platform must maintain 98% accuracy and access a database of 50 billion images, drawing from both public domain and agency sources.
The technical requirements specify SOC 2 Type II certification, TX-Ramp certification, and TLS 1.2 or higher encryption for data transmission. Security measures include point-to-point data transfer, annual penetration testing of the cloud database and source code, continuous static analysis code testing (SAST), periodic network vulnerability scanning, and external attack surface management (EASM). The opportunity is being pursued by the Department of the Army Materiel Command Mission and Installation Contracting Command as a pre-solicitation under solicitation number PAN009515.
View the file
Other files
| File | Type | Posted |
|---|---|---|
| Sources Sought PAN 9515 - Cleariew AI Facial Recognition.pdf |
On GovTribe
Work with this file
- Download the original file
- Contacts named in this file
- Similar government files
- Ask GovTribe AI about this file
Text version
Salient Characteristics – Facial Recognition
QTY (5) Clearview AI is a URL based intelligence service that runs on a Tool Cloud Database and permits a user access to system for a period of 12 months. Resource: Uniform Resource Locator
a. Service Type: Online Based
b. Purpose: Information Collection Retrieval
c. Delivery: Public Domaine sources and Agency sources
d. Verification Method: National Institute of Standard and Testing
e. Success Denominator Control: Facial Recognition Vendor Test
f. Frequency Threshold: 98% accuracy
g. Security: Law Enforcement Sensitive Information Protections Compliant
h. Scope of Collection: 50 billion images
i. Attestation Certification: SOC 2 Type II
j. Risk Management: TX-Ramp Certified
k. Regulatory Entity: State Mandated (TEXAS)
l. Data Transmitted: TLS 1.2 or higher
m. Data Method Transfer: Point to Point
n. Encryption: Transport Layer Security (TLS)
o. Testing Audit Method: Penetration Testing
p. Testing Frequency: Annually
q. Testing Scope: Cloud Database and Source Code
r. Test result available: Yes, with Non-disclosure Agreement
s. Vulnerability: Software Development Lifecycle (SDLC)
t. Analysis Type: Static analysis code testing (SAST) ongoing
u. Network Vulnerability Scan: Period Base
v. Methodology of Scan: Software Composition Analysis (SCA)
w. Additional Security: External attack surface management (EASM) (Continuous)
File details come from the government source that posted it. Updated .