Glossary

Above the wall: A role that can see every case in the organization regardless of its categories: Administrator, Supervisor, and Auditor.

Accident report: A record of a non-crime event at a store (such as a slip-and-fall), kept for liability, insurance, and workers'-compensation purposes. Never an incident, and never counted or linked with crime records.

Assessment: A scored in-store compliance check conducted against an assessment template, in the Store Assessment feature. (The feature was previously called "audits"; the word "audit" no longer appears on screen, and the Auditor role is unrelated to it.)

BOLO (be on the lookout): A visual alert bulletin about an active suspect, carrying a photo, physical description, method summary, and incident history. Distributed to store staff and partners. Created from an incident or a case.

Booster, A person who physically enters a store and steals merchandise, the "field" role in an organized retail crime operation.

Case (investigation): A formal investigative record tracking a criminal subject, crew, or operation over time. Contains members, activities, evidence, financials, network analysis, and AI chat. A case is either Open or Closed. In the app, this area is labeled Cases.

Category: A named compartment that case data sits in, shown as a label in the product. A category assigned to a person is what the Chinese Wall compares against a case's labels to decide access.

Change History: The per-field record of edits to a case (what changed, from what to what, by whom, and when). Available on internal cases only, from the case's chain-of-custody bar.

Chinese Wall: The compartment system that keeps one investigative team's cases from being visible to another. Turns on the categories a case and a user share. Fails closed: no categories means no cases. See Roles and access.

Cluster: A group of connected incidents. A cluster now comes into existence when someone connects two incidents; there is no scheduled clustering run. Clusters can be opened as cases.

Entitlement (feature entitlement): The set of product areas (Incidents, Accidents, Cases, Store Assessment) an organization has bought and is allowed to reach. Set by Retailium; it can only narrow what a role reaches, never widen it.

Fence: A person or business that knowingly buys and resells stolen merchandise, converting stolen goods into cash for a crew.

Incident (store event): A security incident recorded at one store: shoplifting, robbery, assault, burglary, fraud, and similar. The platform's foundational data layer. Labeled Incidents in the app. ("Store event" is a retired term for the same record.)

Involved Persons: The tab on a case that lists the case's members (suspects and associates). Labeled "Involved Persons" on both case shapes.

Label: A named, colored tag an administrator assigns to cases and users. The compartments the Chinese Wall turns on. Called a category when assigned to a person.

Loss value: The estimated retail value of merchandise stolen or damaged in an incident.

Modus operandi (MO): The characteristic method a suspect or crew uses. In the platform, MO tags are structured labels such as "concealment," "distraction," or "grab-and-run," used to detect patterns.

ORC (organized retail crime): Coordinated theft or fraud by criminal networks targeting retail stores for profit.

ORC flag: A marker on an incident indicating it is believed to be part of an organized retail crime operation rather than opportunistic theft. Affects filtering and analytics.

Primary target, The one member who is the subject of a particular case. Independent of the member's role in the crew, a fence can be a primary target.

Proposed connection: A suggested link between two incidents that the platform's scoring engine flagged as similar. A suggestion, not a conclusion, until an analyst confirms or dismisses it.

Recovery value: The value of stolen merchandise recovered or seized. Tracked alongside loss value to measure investigative impact.

Soft delete: The platform never permanently erases records. Deleting hides a record; it is not truly removed. There is generally no undelete for the user, though an administrator can restore some soft-deleted records.

Territory: The geographic scope (region, district, area, or individual store) assigned to a Regional or District Asset Protection Manager, which scopes the stores, incidents, accidents, and assessments they can reach.