Security, data and compliance in Census Field Logic & Enumeration App

How Census Field Logic & Enumeration App protects data and supports your compliance obligations.

Security controls

Protected data on devices

Case data on a device is encrypted, limited to the enumerator's current assignments, removed after transmission, and can be wiped remotely through your device management.

Confidentiality by role

Respondent answers are visible only to roles that need them; methodologists and administrators work with aggregates unless your agency grants case access.

United States hosting

Data is hosted in Moraph's United States region only, and support tickets from federal clients are handled only by US citizens with active security clearances.

Encryption and keys

Client data is encrypted in transit and at rest, with keys Moraph staff cannot use without explicit, time-bound authorization that your agency approves.

Complete audit trail

Every view, change, transmission and export is logged with the person and time, and cannot be edited.

Tested releases

Every release passes security testing gates before it ships, and a software bill of materials is maintained for the product. Moraph is SOC 2 Type II and ISO/IEC 27001 audited.

Requirements it supports

• Title 13, U.S. Code, including confidentiality under 13 U.S.C. 9
• Confidential Information Protection and Statistical Efficiency Act (44 U.S.C. 3561 et seq.)
• Privacy Act of 1974 (5 U.S.C. 552a)
• Paperwork Reduction Act (44 U.S.C. 3501 et seq.)
• Federal Information Security Modernization Act (44 U.S.C. 3551 et seq.)
• Section 508 of the Rehabilitation Act

The product supports these requirements; meeting them remains your organization's responsibility.

Where it runs

• Moraph cloud, United States: Hosted and operated by Moraph in the United States region, with data kept in the US.
• Dedicated environment: A single-tenant environment for agencies that require isolation, scoped in the proposal.
• With a managed service: Optionally run alongside a Moraph managed service for operational support during peak field periods, administration and integration support.

Limitations

• It proposes assignments and routes; crew leaders and managers approve them, and operational decisions belong to your agency.
• It does not design the questionnaire or sampling methodology. It runs the instrument and rules your agency approves.
• Quality flags indicate cases worth checking, not misconduct. Every flag is reviewed by a person, and outcomes are your agency's decision.
• It is not the agency's response processing, imputation or tabulation system; completed cases are delivered to your processing environment.
• Offline work covers cases downloaded to the device. Addresses not downloaded beforehand are not available without a connection.
• Moraph holds no FedRAMP authorization for this product. We provide control documentation to support your agency's own authorization decision.
• Requirements specific to your agency's confidentiality statutes, such as sworn status for anyone with access to protected data, are set by your agency; Moraph supports them but does not determine them.
• The app requires agency-managed devices that meet the supported operating system versions listed in the proposal.