# Investigative Case Management **Aliases:** ICM **Entity class:** Federal investigative case-management system **Domain:** Homeland security / criminal investigations / information systems **Doc Type:** System Node **Maturity:** Developed ## Definition **Investigative Case Management (ICM)** is ICE's modernized electronic case-management environment for criminal and administrative investigations. It replaced relevant legacy TECS case-management functions with consolidated subject records, structured and unstructured search, de-confliction, workflow controls, electronic case files, and contemporary authentication. ## Architectural Significance ICM belongs to the source-system and case-management layer. It records and organizes investigative work under ICE authorities. [[wiki/ICEPIC|ICEPIC]] belonged to an analytical layer that correlated data and identified non-obvious relationships; the [[wiki/DHS Law Enforcement Information Sharing Service|LEIS Service]] belongs to an exchange layer that exposes selected information to authorized partners. The 2019 LEIS privacy assessment describes the service after ICEPIC and DPICS2 retirement as drawing from source systems rather than relying on the former centralized repositories. That is architectural continuity with a changed storage model, not evidence that every ICEPIC algorithm, field, or access path continued unchanged. ICM was deployed in 2016 on [[wiki/Palantir Gotham|Palantir Gotham]] as HSI's official investigative system of record. Its documented surrounding components included the [[wiki/PRIME Interface Hub|PRIME Interface Hub]], [[wiki/HSI Data Warehouse|HSI Data Warehouse]], [[wiki/Telecommunications Linking System|TLS]], and [[wiki/PenLink|PenLink]]. The 2026 modernization direction is the [[wiki/Case Management and Analytics Platform|Case Management and Analytics Platform]], which joins case workflow and investigative analytics over an [[wiki/Enterprise Lakehouse|Enterprise Lakehouse]]. ## Sources / Provenance - [[research/Immigration and Customs Enforcement Pattern Analysis and Information Collection (ICEPIC)|ICEPIC research dossier]] - [DHS — ICE Investigative Case Management PIA](https://www.dhs.gov/sites/default/files/publications/privacy-pia-ice-icm-june2016.pdf) - [DHS — Law Enforcement Information Sharing Service PIA](https://www.dhs.gov/sites/default/files/publications/privacy-pia-ice-leiss-july2019_0.pdf) ## Relationships - **article-linked institution or supplier:** [[wiki/Palantir Technologies|Palantir Technologies]]. - **article-linked implementation or program:** [[wiki/ImmigrationOS|ImmigrationOS]]. - **article-linked implementation or program:** [[wiki/ELITE|ELITE]]. - **collection route:** [[collections/The Civilian Intelligence Marketplace|The Civilian Intelligence Marketplace]]. - **counterterrorism architecture:** [[collections/Terrorism, Counterterrorism, and the Intelligence Environment|Terrorism, Counterterrorism, and the Intelligence Environment]]. - **source article:** [[articles/The Coming Market for Civilian Spycraft|The Coming Market for Civilian Spycraft]]. - **operated by:** [[wiki/United States Immigration and Customs Enforcement|ICE]]. - **supports:** [[wiki/Homeland Security Investigations|Homeland Security Investigations]] and other authorized ICE users. - **modernized:** legacy [[wiki/Treasury Enforcement Communications System|TECS]] case-management functions. - **source-system role for:** [[wiki/DHS Law Enforcement Information Sharing Service|DHS LEIS Service]]. - **implemented on:** [[wiki/Palantir Gotham|Palantir Gotham]]. - **connected systems:** [[wiki/PRIME Interface Hub|PRIME]], [[wiki/HSI Data Warehouse|HSI Data Warehouse]], [[wiki/Telecommunications Linking System|TLS]], and [[wiki/PenLink|PenLink]]. - **modernized through:** [[wiki/Case Management and Analytics Platform|CMAP]]. ## Civilian intelligence marketplace ICE case-management environment implemented on Palantir technology and connected with investigative systems. Its case-record and workflow role provides the foundation against which the article describes newer prioritization and field-facing applications. The enforcement stack connects source records, case context, prioritization, and field-facing leads. ICM organizes investigative work; ImmigrationOS adds the functions described in its procurement; ELITE supplies maps, profiles, address scores, and lead concentrations. These are complementary roles in a pipeline that helps professionals find and act with greater coverage and competence. ### Marketplace sources - [[articles/The Coming Market for Civilian Spycraft#VIII. Palantir, ImmigrationOS, ELITE, and the Contractor as Sovereign Function|The Coming Market for Civilian Spycraft — VIII. Palantir, ImmigrationOS, ELITE, and the Contractor as Sovereign Function]] — October 2026 revision; immediate source for this entry’s place in the marketplace. - [American Immigration Council, ICE to Use ImmigrationOS by Palantir.](https://www.americanimmigrationcouncil.org/blog/ice-immigrationos-palantir-ai-track-immigrants/) - [Axios, ICE Pays Palantir $30M to Build New Tool to Track and Deport Immigrants (May 1, 2025).](https://www.axios.com/local/denver/2025/05/01/palantir-deportations-ice-immigration-trump) - [Sophie Feng and Jay Stanley, ACLU, All the Ways Palantir Is Assisting Trump's Abusive Removal Campaign (March 24, 2026).](https://www.aclu.org/news/privacy-technology/palantir-deportation-roundup) ## Connected marketplace roles The source article connects this entry with [[wiki/Accurint Virtual Crime Center|Accurint Virtual Crime Center]], [[wiki/PenLink|PenLink]], [[wiki/Palantir Technologies|Palantir Technologies]], [[wiki/ImmigrationOS|ImmigrationOS]], [[wiki/Immigration Lifecycle Management|Immigration Lifecycle Management]], [[wiki/Federal Bureau of Investigation|Federal Bureau of Investigation]], [[wiki/Drug Enforcement Administration|Drug Enforcement Administration]], [[wiki/Bureau of Alcohol Tobacco Firearms and Explosives|Bureau of Alcohol Tobacco Firearms and Explosives]], [[wiki/Student and Exchange Visitor Information System|Student and Exchange Visitor Information System]], [[wiki/Phone Extraction|Phone Extraction]]. These routes locate the associated people, implementations, methods, and operational contexts in [[articles/The Coming Market for Civilian Spycraft|The Coming Market for Civilian Spycraft]]. **Collections:** [[collections/The Civilian Intelligence Marketplace|The Civilian Intelligence Marketplace]] · [[collections/Terrorism, Counterterrorism, and the Intelligence Environment|Terrorism, Counterterrorism, and the Intelligence Environment]].