GeoSpy
GeoSpy is Graylark Technologies’ visual intelligence platform: it estimates where a photograph was taken from the pixels alone, with no EXIF metadata or landmark required. Access is licensed to vetted law enforcement, government and enterprise teams.
What is GeoSpy?
GeoSpy is the visual intelligence platform published by Graylark Technologies, Inc., billed on its home page as The Visual Intelligence Platform. It answers one question: where was this photograph taken? The answer comes from the picture itself. Graylark states that its geolocation predictions are made exclusively through the analysis of the image pixels, reading vegetation, soil, architecture, sky, road texture, sun angle, typography and topography. A photo whose EXIF data was stripped by a social platform, or one that shows no monument at all, therefore remains workable.
The publisher calls the underlying model an LGM, a Large Geospatial Model, in deliberate contrast with an LLM: where a language model correlates tokens drawn from written text, an LGM interprets multidimensional real-world data such as images, photogrammetric scans and volumetric 3D data. Launched in December 2023, it is exposed through three modes. Geo-Estimation, or Global Search, covers the whole world and narrows a scene to between 1 and 50 km in real time. Precision Targeting, or Street Search, works at street level across more than 1,000 cities with meter-level accuracy, and custom cities can be added. Property Targeting, or Property Search, matches a scene against more than 100 million property records with nationwide coverage and can match objects across several images. The company claims more than 10,000 cases solved worldwide.
Access runs through a web interface, a mobile application or an API, and is reserved for qualified government and enterprise organizations, with licensing and pricing quoted on request. Graylark describes a governance model built on controlled access, auditability of every action and human oversight, with no anonymous access and no passive mass surveillance, and repeats that the AI complements human expertise rather than replacing it.
One change matters before you engage: GeoSpy was renamed Raven, effective April 2026, under the formula “same model, same team, same work, a new name”, and app.geospy.ai now redirects to app.withraven.ai. This is a rebrand, not a shutdown: geospy.ai remains online and current. The successor product also carries capabilities the historical GeoSpy did not: CAR-ID v2.0, which returns a vehicle’s make, model and year from one image, AI-generated image and face-swap deepfake detection in beta, and case management that gathers every search, pin and source onto one shared map.
What it does
- Estimate where a photograph was taken from its pixels alone, with no EXIF metadata and no landmark in frame.
- Narrow a worldwide search to a region of 1 to 50 km, with real-time inference.
- Pin a scene to street level with meter-level accuracy across more than 1,000 cities.
- Match a scene to a built structure against more than 100 million property records.
- Match objects across several images to tie separate pictures to one place.
- Identify a vehicle’s make, model and year from a single image (CAR-ID v2.0, a capability of the successor product Raven).
- Flag AI-generated images and face-swap deepfakes (Raven capability, in beta), and gather sources, pins and annotations in a shared case file.
When to use GeoSpy / When not to
A quick filter to help you decide if GeoSpy is the right fit.
When to use GeoSpy
- Detectives and criminal investigators who need to place a suspect, a scene or a stolen object from a single photograph.
- Government agencies and international security organizations running vetted-access investigative tooling under a license.
- Insurance fraud investigators cross-checking a claim’s declared location against road texture, foliage and sun angle in the submitted photos.
- Newsroom OSINT desks, fact-checkers and photo editors verifying where a social media image was really taken.
- Corporate security and private investigation teams working from low-context imagery, with no sign, no monument and no EXIF data to go on.
When not to use GeoSpy
- Private individuals and hobbyists: the acceptable use policy states that users shall not use the services for personal purposes, only for purposes authorized and directed by the customer organization.
- Anyone expecting to sign up and start in five minutes: access is granted only after a written request, a review by Graylark and an approval, then attachment to a tenant.
- Teams that need courtroom-grade evidence: the acceptable use policy states search results are not intended or permitted to be used as admissible evidence in a court of law or any court filing.
- Buyers who need a published price or a permanent free tier: no amount is published anywhere and the terms describe GeoSpy as a paid service after any trial.
- European controllers who need a documented compliance file before onboarding: no GDPR reference, no data processing agreement, no Article 27 representative and no hosting location are published.
How to use GeoSpy
A typical end-to-end flow, from setup to results.
- Request access from Graylark, supplying the email address or addresses to be enabled: there is no self-service sign-up.
- Fill in the demo request form with your name, job title, organization type, company name, website, work email, phone number and intended use case.
- Select your organization type from the categories Graylark serves: law enforcement or government, law enforcement training or instruction, private investigation, insurance and fraud investigation, corporate security, or other.
- Wait for Graylark to review the request; once approved, your users are added to a tenant, which represents a given customer or team.
- Where one is offered, start on a trial period, itself subject to review and approval, with eligibility and details supplied on request.
- Move to a paid subscription for continued use; fees are notified at sign-up and set out in the service agreement.
- Sign in through the web interface or the mobile application, or call the service programmatically through the API.
- Upload an image and read the result: a region, a street-level address or a property match, returned within seconds.
- Treat the EXIF metadata returned alongside the prediction as context only, since it plays no part in the estimate.
- Keep credentials confidential and report any security incident immediately to compliance@graylark.io: the customer is responsible for all activity carried out under its users’ accounts.
Pros & Cons
Pros
- Needs no metadata at all, so it still works on images whose EXIF was stripped by a social platform.
- Meter-level accuracy claimed on covered cities, with worldwide region estimation as a fallback.
- Results returned in seconds where manual verification takes hours or months.
- Explicit no-training commitment: neither customer images nor their metadata are used to train the AI.
- Short and documented retention, starting at seven days for a quick search.
- Public, detailed acceptable use policy with named prohibitions, backed by a governance model of controlled access, auditability and human oversight.
- Capabilities that reach beyond geolocation under the Raven name, from vehicle identification to deepfake detection, on top of a claimed 10,000-plus cases solved.
Cons
- No public pricing whatsoever: licensing and price come on request only, so no budget can be sized without going through sales.
- Access is gated by a qualification review rather than a sign-up form, and personal use is forbidden outright by the acceptable use policy.
- Results are explicitly indicative and not definitive, and are not admissible as evidence in court.
- Thin compliance file for a European buyer: no GDPR reference, no data processing agreement, no Article 27 representative, no sub-processor list and no stated hosting location.
- No support email is published, the only exposed channel being compliance@graylark.io, and the site is English-only with no list of supported languages.
- No public API documentation although the terms announce programmatic access, and no App Store or Google Play link despite the mobile application named in the same clause.
- Liability is capped at 100 dollars with mandatory individual arbitration and a class action waiver, and the April 2026 rename leaves geospy.ai and withraven.ai side by side, blurring the brand and its entry points.
Pricing & Plans
There is no permanent free plan and no published price point. The home page states that licensing and pricing information is available upon request, and that the service is available for qualified government and enterprise organizations. The terms of service describe GeoSpy as a paid AI-powered geolocation service: a trial period may be offered for some services, subject to review and approval, and after that trial continued use is subject to fees, which are notified when the trial is taken out and before any charge. No entry amount, currency or billing unit appears anywhere on the site or in its sitemap. The free and open GeoSpy Plus edition described in a blog post of December 2024 does not belong to the current offer, which the terms of service of March 2025 supersede.
- Trial period
- subject to Graylark’s prior review and approval
- with eligibility and terms supplied on request.
- Paid subscription for continued use after the trial
- quoted on request under a license
- with fees notified at sign-up and set out in the service agreement.
Data, GDPR & hosting
A consolidated view of how GeoSpy handles your data.
GDPR overview
The word GDPR appears nowhere in GeoSpy’s public documents. The privacy policy, Version 1.0 effective March 19th 2025, rests entirely on United States law: California Civil Code Sections 1798.83-1798.84, which let California residents prevent disclosure of personal data to third parties for direct marketing purposes through compliance@graylark.io, and Nevada’s NRS 603A opt-out from data sales, which Graylark says does not bite because it sells no data. There is no representative designated under Article 27, no named data protection officer, no data processing agreement published or offered, no list of sub-processors, no stated hosting location and no reference to standard contractual clauses. The publisher is American, in Redwood City, California, and Californian law governs. None of this claims or denies GDPR compliance: a European controller simply has no published material to rely on.
Who owns the data?
The terms leave uploaded images with the customer: users are responsible for ensuring that what they upload complies with applicable law and infringes no third-party privacy or intellectual property rights. Graylark collects those images with their associated metadata and holds them inside a tenant, which represents one customer or team; a company may hold several. Ownership of the site and its content stays with Graylark, which grants only a non-exclusive, non-sublicensable, non-transferable license to use it. Two clauses widen that picture: aggregated, de-identified or anonymized data may be used and shared by Graylark, and all personal data may pass to a third party in a merger, acquisition, bankruptcy or other change of control.
Reuse rights
Graylark declares a single purpose for uploaded material: delivering the geolocation service the customer requests. Predictions are made exclusively through analysis of the image pixels; EXIF metadata is stored and handed back to the user for information only and never feeds the estimate. Training is ruled out in plain terms, for images as well as metadata. Other personal data supports account creation and management, billing, support, personalization, marketing of the site and correspondence, and may reach recipients described only by category: hosting, technology and communication providers, analytics vendors and lead-generation providers. Cookies are in use. Graylark also reserves the right to disclose data to authorities and law enforcement for legal obligations, safety, enforcement of the terms and dispute resolution. What the customer may do with the output is bounded rather than free: the license granted over the site and its content is non-exclusive, non-sublicensable and non-transferable, use must be authorized and directed by the customer organization, and results are indicative, with court filings expressly excluded.
Data retention & training
Hosting summary
No hosting country or region is stated anywhere in GeoSpy’s public documents. The privacy policy names only categories of recipients, hosting, technology and communication providers among them, and publishes no list of individual sub-processors. No data processing agreement is published or mentioned. Security is described in general terms, as appropriate physical, technical, organizational and administrative measures, with no certification cited: no SOC 2, ISO 27001, HIPAA, CJIS or FedRAMP claim appears in any of the archived pages. Graylark also states plainly that no method of transmission or storage is entirely secure. One network observation should not be mistaken for a hosting statement: the domain resolves to an Amazon anycast address routed through Amsterdam, which identifies a content delivery node rather than the location of customer data. In practice, a buyer with data residency requirements has nothing published to rely on and must obtain hosting, sub-processor and security commitments contractually before uploading operational imagery. The publisher sits in California and Californian law governs the terms.
Where GeoSpy works
Country-level availability.
Not available in
Things to keep in mind
Risks and trade-offs to weigh before adopting GeoSpy.
- The product was renamed Raven in April 2026 while geospy.ai stayed online: two sites, two entry points and one redirect from app.geospy.ai to app.withraven.ai. Check which brand, platform and contract you are actually engaging with.
- Search results are indicative and not definitive, and the publisher does not guarantee their accuracy. The real risk is human: an investigator who stops corroborating and lets the model decide loses exactly the expertise Graylark says the tool is meant to complement.
- AI and deepfake detection is explicitly labeled beta on the successor product, so its accuracy is not guaranteed and a negative or positive verdict should not close an inquiry on its own.
- This is a tool that locates people from their photographs, so the risk of misuse is real. The acceptable use policy names the prohibitions, from harassment and stalking to swatting, and restricts images of children under 16, but responsibility for what staff actually do with the tool sits with the customer organization.
- For a European deployment the published record is close to empty: no GDPR mention, no data processing agreement, no Article 27 representative, no sub-processor list and no hosting location, which leaves an impact assessment with very little to work from.
- The contract is one-sided in the usual American way: liability capped at 100 dollars, mandatory individual arbitration in San Francisco County, class action waiver, and a 30-day opt-out window that has to be exercised by post.
- US export controls bar sanctioned parties and residents of embargoed countries; on the operational side, the only published channel is compliance@graylark.io and no public API documentation exists, so support and integration both depend on the service agreement.
Setup & Integrations
Technical difficulty
Technically trivial, administratively slow. Nothing is installed: the service runs in a web interface, with a mobile application and an API mentioned in the terms. Day-to-day use amounts to uploading an image and reading the result. The real effort sits upstream, in submitting an access request, passing Graylark’s review, being approved and attached to a tenant, since user administration goes through the publisher. An API integration would call for development work, but no public documentation exists to size it. Graylark also stresses that interpreting the results still requires human expertise.
Deployment
Behind GeoSpy
Social
Resources
All the official URLs gathered for verification and reference.
Frequently asked questions
How can GeoSpy locate a photo without metadata?
How accurate are the results?
Who is allowed to use GeoSpy?
How much does GeoSpy cost, and is there a free trial?
Are uploaded images used to train the AI?
How long does Graylark keep uploaded images?
Can GeoSpy results be used as evidence in court?
Is there an API?
Who publishes GeoSpy, and is there an age limit?
Has GeoSpy changed its name?
Should you pick GeoSpy?
GeoSpy is a niche tool with real value for a narrow, vetted audience. Its differentiator is technical rather than commercial: predicting a location from the pixels of an image, with no EXIF data and no landmark, is precisely what breaks down when an investigator works by hand on a picture pulled off a social platform. Around that core, Graylark stacks a region estimate anywhere in the world, street-level accuracy on more than a thousand cities and a property match against a very large record base, all returned in seconds.
The price of entry is administrative rather than monetary. There is no sign-up form and no published rate card: you submit an access request, you are reviewed, you are approved, and you are attached to a tenant. Personal use is forbidden. That barrier is a feature for the buyers this tool targets and a deal-breaker for everyone else.
Two commitments stand out and are unusual in this market: images and metadata are not used for training, and retention is short and spelled out, at seven days for a quick search. The European compliance file, by contrast, is close to non-existent, with no GDPR reference, no data processing agreement, no Article 27 representative and no stated hosting location, so a European buyer will have to obtain those guarantees contractually.
Two things to settle before you commit. Results are investigative leads, never proof, and the publisher says so itself. And the product now lives under the name Raven, since April 2026, with broader capabilities covering vehicle identification, deepfake detection in beta and case management, so check which brand, which platform and which contract you are actually signing up for.
- Choosing a selection results in a full page refresh.
- Opens in a new window.