Mapping a trafficking corridor across the air gap

Background

Trafficking corridors are, by design, jurisdictional problems. Movement is deliberately routed across provincial and national boundaries precisely because each authority sees only its own segment, and no one sees the route as a whole. The corridor is real; the view of it is fractured.

The data to reconstruct it usually exists — telecom records, hotel registries, vehicle movements, field reports — but it is scattered across systems that do not share a network, and it is sensitive enough that it cannot leave the agency's own infrastructure.

The challenge

Movements in the case crossed provincial boundaries, and each province held its records in its own system. No single analyst could see the corridor as a whole — only the segment that fell within their own jurisdiction's data.

As with most operational work, the window was measured in days. A corridor reconstructed too slowly is a historical record, not an intervention. The unit needed to see the movement as a system, fast enough to get ahead of the next transfer.

And the data was sensitive enough that it had to stay inside the agency's own infrastructure — no cloud, no third-party processing. Whatever did the work had to run on-premise, within the perimeter.

The approach

• Deployed CLERINT Fusion on-premise, inside the agency's own infrastructure, and ingested the three provinces' telecom, hotel-registry, vehicle and field-report data.
• Resolved entities across the provincial datasets into one corridor graph, so a phone seen in one province and a vehicle seen in another became properties of the same movement rather than unrelated records.
• Applied geographic clustering to surface recurring stop points as prioritised hotspots, and used pathfinding to connect the vehicles, phones and locations that consistently moved together.
• Ran pattern analysis over prior movements to project the most probable next transfer window and location, turning a map of the past into a forecast for the next few days.

A fortnight of cross-referencing became a same-day map. And the map didn't just show where they had been — it told us where to be next.— Investigator, regional unit

The outcome

The unit turned what would have been a fortnight of manual cross-referencing into a same-day corridor map, with recurring safe-house hotspots prioritised and the movement rendered as a single connected system across the three provinces.

Pattern analysis pointed to a probable next transfer point, letting the unit position itself ahead of the movement rather than reconstructing it afterward. They intervened at a predicted point while the window was still open.

Because the whole deployment sat inside the agency perimeter, none of the sensitive operational data left the building to produce the result — sovereignty and speed at the same time.

Results

• Three provinces' data unified into a single corridor graph.
• 12 safe-house hotspots surfaced by geographic clustering.
• An intervention at a predicted transfer point, inside the window.
• Fully on-premise — no operational data left the perimeter.

Why it matters

Corridors defeat single-jurisdiction analysis by design. The unlock is resolving entities across the jurisdictional seams so the route becomes one object an analyst can reason about.

Hotspots and prediction turn that map from a record into a plan: not just where the movement has been, but where to be waiting for it next.