# LeadsOnline Executed Contract `CON-001_LeadsOnline_Executed_Contract_2026-07-13.pdf` is a 52-page DocuSign package covering a State of Arkansas services contract, required ACIN modifications, LeadSuite and NightHawk order forms, a case-sharing MOU form, an order summary, the vendor's master agreement, and three vendor-authored sole-source letters. State and vendor signatures span 2026-07-13 and 2026-07-14; the vendor's dated signatures are 2026-07-14 (pp. 7, 19, 25, 33, 39, 48). ## Price and term The state contract states a maximum possible three-year amount of **$700,124.94** (p. 3). The order summary rounds that figure to **$700,125.00** and prices each year as: | Service | Annual amount | |---|---:| | LeadSuite Investigations System | $216,000.00 | | Six NightHawk user licenses | $17,374.98 | | Two CellHawk bonus user licenses | $0.00 | | **Annual total** | **$233,374.98** | (`CON-001_LeadsOnline_Executed_Contract_2026-07-13.pdf`, p. 26.) The state signature clause says no obligation will be incurred unless sufficient funds are available when due (p. 7), and the source-of-funds schedule is unpopulated (p. 11). The package contains no invoice, payment, user-provisioning record, or service-acceptance record. ## LeadSuite scope LeadSuite permits participating agencies to transmit case files for continuous automated searching. The contract describes: - raw case ingestion through ODBC, SQL, or other tools and periodic secure transfer; - mapping agency fields into LeadSuite; - people, property, missing-person, stolen-property, ballistic ClearCase/IBIS, OSINT, and nationwide pawn/secondhand searches; - AI-driven narrative sections, automated case summaries, timelines, notifications, and cross-case links; - upload of phone-extraction material and other investigative files. (`CON-001_LeadsOnline_Executed_Contract_2026-07-13.pdf`, pp. 15-17, 35-37.) The attached case-sharing MOU says cases run automatically, including before an investigator is assigned, and continue running each day. It contemplates sharing "complete case information" so users can view cases and investigations (p. 25). Its agency list remains a form: it refers generally to all participating Arkansas law-enforcement agencies or a placeholder specific agency rather than attaching an executed participant roster. LeadSuite access is available to unlimited authorized personnel at up to 20 participating agencies, each of which must accept then-current terms (p. 20). ## NightHawk and CellHawk NightHawk covers unstructured images, video, audio, text, communications, and movement of devices, vehicles, and other entities, including location-reference data generated by telecommunications providers, apps, computers, and extraction systems (p. 46). Its feature table identifies social-media analysis, calls/messages, GPS trackers, gunfire identifiers, LPR hits, link charts, and cross-agency collaboration (p. 47). The package includes two CellHawk bonus licenses at no charge. The vendor's sole-source letter describes CellHawk as cell-phone mapping and analysis (p. 52). That letter is LeadsOnline's own procurement assertion, not an independent market evaluation. > [!contradiction] Contract scope exceeds the incident-only MOU > The ACIN MOU excludes investigative files ([[ACIN Agreements and Participation Terms]], `AGR-201_El_Dorado_PD_MOU_EXECUTED_2026-05-15.pdf`, p. 1). This contract expressly covers case files, narratives, complete case sharing, phone extractions, communications, movement, devices, vehicles, and locations (pp. 15-17, 25, 46-47). See [[T030 - ACIN Incident-Report-Only Scope vs Investigative Data Services]]. ## Pointer-only API The API does not return the underlying search results. It accepts a valid case number and at least two search fields, runs the query against LeadsOnline, and returns a secure pointer to results in the vendor portal (p. 21). The API terms prohibit caching, scraping, bulk harvesting, republishing, populating another database or analytics tool, and using results outside ACIN. Minimal technical logs may be retained for 30 days unless law requires otherwise (pp. 21-23, 41-43). ## Ownership, audit, and exit - Customer-submitted data remains Customer Property; LeadsOnline logs registration, contacts, access, and service use as vendor-owned "Audit Information" (p. 31). - LeadSuite audit records are protected from modification or deletion and retained at least one year (pp. 14, 34). - After termination, the customer has 60 days to export Customer Property; LeadsOnline may destroy it after that period (p. 31). - Sealed or expunged cases can be excluded or purged by the customer's file administrator (pp. 16, 36). The one-year vendor audit period and 60-day exit period coexist with ACIN's internal five- and seven-year schedules; the produced records do not identify the authoritative audit repository or a complete offboarding reconciliation. ## Sole-source material Pages 49-52 contain LeadsOnline letters asserting that LeadSuite, NightHawk, and CellHawk are proprietary and uniquely available from LeadsOnline. Those letters document the vendor's stated justification. No independent competition, scoring, market research, or award evaluation appears in the package. ## Operational boundary > [!contradiction] Executed service package versus funding record > The contract is executed and contains annual payment dates, but its state signature disclaims obligations without sufficient funds (p. 7). The custodian says the federal award and approved budget did not exist as of 2026-07-23. The record therefore supports an executed, funding-contingent package—not payment or live service. See [[T029 - ACIN Funding Obtained Language vs No Federal Award]]. ## Significance The contract supplies the strongest documentary evidence of ACIN's intended investigative reach. Its narrative analysis, phone and movement data, daily case processing, LPR-hit analysis, and multi-agency case sharing materially deepen [[T014 - ACIN Analytical Reach vs Non-Surveillance Classification]]. ## Open questions / follow-ups - Produce the funding source, invoice, payment, provisioning, onboarding, and active-user records. - Identify which 20 agencies receive LeadSuite access and whether each executed the case-sharing MOU. - Produce ACIN's configuration of automated case transfer, exclusions, alerts, API logging, and retention. - Identify whether CellHawk and NightHawk were activated and what source files were uploaded. - Produce any independent sole-source determination, legal review, or procurement approval.