A persistent intelligence layer for drug trafficking organization (DTO) mapping, confidential informant (CI) management, and controlled buy documentation — built for narcotics units, drug task forces, and multi-agency Drug Task Force (DTF) operations under 28 CFR Part 23.
This module adds a dedicated narcotics intelligence layer to the Crime Investigation core — supporting tactical enforcement, investigative case development, and strategic drug trafficking organization (DTO) mapping in a single platform. Intelligence persists beyond case closure and becomes a permanent picture of the trafficking network, available for future cases, homicide investigations, and multi-agency operations.
← Crime Investigation TemplateMeets 28 CFR Part 23 reasonable suspicion standards, 5-year review and purge requirements, and audit logging mandates for federally funded criminal intelligence systems. FBI CJIS Security Policy v6.0 and SOC 2 Type II certified. Designed for multi-jurisdictional Drug Task Force (DTF) operations with granular access controls per agency and role.
From initial tip to a persistent drug trafficking organization picture — how Hubstream structures narcotics intelligence collection, informant management, controlled buy documentation, and DTO mapping for drug task forces and multi-agency operations.
A narcotics intelligence case opens when a tip, complaint, or referral meets the reasonable suspicion threshold required under 28 CFR Part 23. The intake record captures the source type — anonymous tip line, confidential informant referral, patrol officer report, partner agency referral, or surveillance observation — along with the basis for reasonable suspicion, the initial subject or organization identified, and the receiving supervisor's authorization. Tip sources that don't meet threshold are documented but not entered into the intelligence system, creating an auditable record of the intake decision. Where a confidential informant is the source, their CI record is linked from the outset and the chain of source attribution is preserved throughout the case lifecycle.
Target development builds a comprehensive subject profile from all available sources — prior case records, RMS data, partner agency intelligence, surveillance observations, CI debriefs, and open-source research. Each subject record tracks their known role in the drug trafficking organization (street-level dealer, mid-level distributor, supplier, financier, or logistics coordinator), known associates, vehicles, phones, and addresses. Confidential informant records are maintained as a separate, access-controlled entity — documenting the CI's background, reliability history, handler assignments, active cases, payments, and any documented criminal history. The debrief log captures every contact between the handler and the CI, with date, location, topics discussed, and intelligence produced. CI records are visible only to authorized handlers and supervisors, with full audit logging of every access.
Each controlled purchase operation is documented as a structured Controlled Buy Record — capturing pre-buy preparation (CI search and wire-up, marked currency serial numbers, surveillance team deployment), the buy itself (date, time, location, CI involved, target involved, quantity and type of substance, buy money used), and post-buy evidence handling (substance field test, evidence submission, chain of custody log). Audio and video recordings are attached directly to the controlled buy record with chain of custody documentation meeting court admissibility standards. Marked currency serial numbers are logged and linked to the specific buy, enabling tracing if currency is later recovered in a search. The controlled buy record links to both the CI record and the target's subject profile — building the evidentiary chain from surveillance to prosecution.
Hubstream's DataSpace visualizes the full drug trafficking organization — supply chain hierarchy from source to street, distribution network structure, organizational roles, geographic territory, and inter-DTO relationships. Multi-criteria search allows analysts to query across phone numbers, vehicles, locations, associate names, and financial identifiers simultaneously. AI-powered link analysis detects hidden connections across case files — surfacing the same phone number appearing in three separate investigations, a vehicle linked to a known DTO member showing up at a new target's residence, or a financial account connected to both a narcotics case and a money laundering referral. Intelligence developed during one case is automatically available to investigators working related cases, eliminating the information silos that allow trafficking networks to operate across jurisdictional lines without detection.
Narcotics intelligence doesn't close when a case closes. Subject profiles, DTO network maps, controlled buy records, CI debrief logs, and surveillance data are retained as a persistent intelligence picture — available for future investigations involving the same individuals, networks, or geographic areas. Intelligence developed in a street-level controlled buy case may resurface months or years later as critical evidence in a homicide investigation, a federal indictment, or a multi-jurisdictional takedown. Role-based dashboards give command staff, task force supervisors, analysts, and street-level investigators each the appropriate view of the intelligence without overexposing sensitive CI information or ongoing operational details. Dissemination records document every instance of intelligence sharing — who received it, when, and under what authority — meeting 28 CFR Part 23 audit requirements. Five-year review flags automatically surface records for required supervisory review and purge evaluation.
The entity set specific to the Narcotics Intelligence module — what each record represents, what data it holds, and how it connects to the broader investigation, DTO network, and intelligence picture.
The primary record for a drug trafficking organization — the entity all members, supply chain links, and territorial data connect to. Persists as a permanent intelligence record across case closures, prosecutions, and personnel changes.
An individual with confirmed or suspected involvement in drug trafficking. The profile persists and grows across multiple cases, controlled buys, and CI debriefs — building an intelligence picture that survives case closure.
A separate, access-controlled record for each CI — distinct from a subject or witness record. Visible only to authorized handlers and supervisors. Contains reliability history, active assignments, debrief log, payments, and background documentation.
A structured record of a controlled purchase operation — from pre-buy preparation through evidence submission. The primary evidentiary record linking a CI, a target, and a specific drug transaction in a court-admissible format.
A structured record of a surveillance operation — fixed, mobile, or electronic. Captures observations, participants, vehicles, locations, and attached media. Links to both subject profiles and active investigations.
A geographic reference associated with DTO activity — a stash house, distribution point, meeting location, or recurring contact zone. Plotted and updated as surveillance and contact data accumulates.
A documented connection between two entities — subject to subject, subject to DTO, DTO to DTO, or subject to location. Each link is typed, sourced, and dated so the basis for the association is auditable and courts-ready.
A formal output generated from narcotics intelligence data — a task force briefing, a multi-agency dissemination package, an indictment support document, or a strategic DTO assessment. Every report is logged with recipient agencies and authorization.
The relationship paths that surface hidden connections across subjects, DTOs, controlled buys, surveillance logs, and locations — turning case files into a persistent, queryable DTO intelligence picture.
Each subject links to a DTO with a documented role — supplier, distributor, street dealer, financier, or logistics coordinator. The full DTO roster and hierarchy are visible instantly, including members identified in separate cases by different agencies, and members whose role has changed as the investigation developed.
Relationships between DTOs — supply chain links, alliances, territorial rivalries, and sub-organization structures — are documented explicitly. Investigators can trace how a street-level distribution network connects upstream to a transnational supplier or sideways to a rival organization operating in adjacent territory.
The CI record documents exactly which subjects the informant has provided intelligence on, through which cases, and with what level of reliability — creating an auditable basis for CI-sourced intelligence that meets court admissibility standards and protects CI identity through access controls.
Each controlled buy links directly to the target subject profile and the active investigation — building the evidentiary chain from CI debrief through controlled purchase to prosecution. Marked currency recovered in a later search can be traced back to the specific buy record that documented its serial numbers.
Surveillance observations automatically contribute to both the subject's activity timeline and the DTO's network map — a vehicle spotted at a new location links that address to the subject's profile; an unknown associate observed during surveillance generates an associate link for follow-up investigation.
Every subject record is cross-referenced against CCIC and NCIC in real time — surfacing active warrants, criminal history, and out-of-state records automatically. A subject with no local history who appears in a regional or federal database is flagged before an investigator wastes resources developing intelligence that already exists elsewhere.
Narcotics intelligence that persists beyond case closure becomes searchable by investigators working unrelated case types — a homicide investigator querying a suspect's phone number may surface a narcotics surveillance log that places the suspect at a DTO stash house 18 months earlier, providing motive and network context that was invisible in the case file alone.
Intelligence generated by one task force member agency is available to approved partner agencies within their authorized scope under 28 CFR Part 23 controls — without requiring a manual export, a data request, or a separate system login. Every access and dissemination is logged for audit purposes.
From tactical enforcement to strategic DTO mapping — Hubstream gives narcotics units, drug task forces, and federal partners a single platform where intelligence survives case closure and serves every investigation that follows.