Stanford University has terminated its contract with Flock Safety, the license-plate surveillance firm facing a national revolt — yet Palo Alto's own network audit shows Stanford police ran dozens of searches on a shared database that included Palo Alto's cameras as recently as the end of June, undercutting the university's insistence that it never let outsiders touch its data.

Announced Tuesday, Stanford's switch to a closed Genetec Cloudrunner system — one the university says stores data for under an hour and blocks any third-party access — makes it the latest Bay Area institution to walk away from Flock's shared surveillance network. But the timing sits awkwardly against Palo Alto's audit, which recorded Stanford's Department of Public Safety querying a Flock database of neighboring cameras through late June. The gap between what Stanford says its Flock system did and what the regional audit shows is exactly the accountability problem that has driven cities across the country to cut, curb, or physically dismantle Flock's cameras.

Stanford University has ended its agreement with Flock Safety and replaced it with a system that, it says, no outside agency can search, according to reporting by Palo Alto Online. The university announced the move Tuesday through the Stanford Report, framing it as an upgrade to a tool it has used since 2024 to investigate campus crime.

Stanford's public-safety chief, Laura Wilson, called the license-plate cameras "an important investigative tool," crediting them with helping catch a serial office thief and a package thief on campus. The university, which contracts with the Santa Clara County Sheriff's Office for policing, says the cameras aided "numerous investigations."

But the reason Stanford is switching cuts to the heart of the national backlash: Flock is built as a shared network. Patrick Dunkley, Stanford's vice provost for institutional equity, access and community, drew the distinction plainly in a statement to Palo Alto Online. "Flock is built as a shared network with the capability for data to move beyond a single institution, even if that's not how we chose to use it," Dunkley said. The replacement Genetec system, he added, "does not have third-party access built into the architecture."

Here is the friction. Stanford maintains it never gave other agencies or third parties access to its own camera feed, and Dunkley said the university is "not aware of any third-party access to its data." Yet Palo Alto's network audit — the same kind of forensic review that has repeatedly exposed who is quietly searching whom in Flock's ecosystem — found that Stanford's university police conducted dozens of searches in a database that included Palo Alto's cameras as recently as the end of June, according to Palo Alto Online. Running searches against a shared regional database is the mirror image of the concern Stanford now cites as its reason for leaving: once you are on Flock's network, the data moves both directions.

That is not a Stanford-only problem. As Palo Alto Online has previously reported, hundreds of out-of-state agencies searched Palo Alto's plate data through a nationwide feature that Flock disabled for the city in October 2024 and for all of California in March 2025 — years after a 2016 state law made sharing plate data with federal or out-of-state agencies illegal. The Dissent reported in June that federal and out-of-state agencies ran at least 299 illegal queries against San Francisco's Flock network, a breach that began inside a federally funded data-sharing hub.

The Peninsula is now a patchwork. Mountain View terminated its Flock contract in February after the Mountain View Voice documented data breaches; San José added storage limits; East Palo Alto renewed its contract despite warnings the data could feed immigration enforcement; and Palo Alto has agreed to complete its audit before deciding whether to stay. In Sacramento, state Sen. Sabrina Cervantes is pushing legislation that would cap plate-data storage at 30 days and bar agencies from contracting with camera companies whose systems federal and out-of-state police can search by default, according to CalMatters.

The revolt has turned physical elsewhere. In Winona, Minnesota, residents cut down all eight of the police department's Flock cameras; Dallas police reported roughly 25 vandalized cameras; and a North Carolina county commissioner barred Flock critics from speaking at a meeting, 404 Media reported.

Stanford's exit is a win for privacy advocates. But the audit trail it leaves behind is the more revealing document — a record of a private campus police force reaching into a shared surveillance grid at the very moment the institution was preparing to say it never let anyone reach into its own.