Executive Synthesis
What numerical codes reveal beyond official acronyms
Tenders for Noldus FaceReader with the Remote Photoplethysmography (rPPG) module enable heart rate and vascular pulse extraction directly from sub-pixel skin color variations under ambient light, without contact sensors, alongside automated decoding of 28 Facial Action Units (FACS).
Procuring Social Science Profiler Plus at UM 0418 integrates quantitative language analysis into the security apparatus: Need for Power (nPow), Need for Affiliation (nAff), Need for Achievement (nAch), and cognitive complexity extracted from interrogation transcripts.
While SEAP shows only an opaque paying military CUI, the ADR official registry directly confirms its identity: 'Romanian Intelligence Service through UM 0296 Bucharest', a certified qualified trust provider for electronic signatures, seals, and timestamps.
The joint procurement led by UM 0929 for UM 0296 defines the physical perimeter of national critical IT: between 120,000 and 140,000 EDR agents, 10–12 Gbps SSL inspection throughput, and Dragos and Recorded Future threat intelligence feeds.
Unlike cyber or intelligence analysis units, UM 0510 contracts exclusively medical software maintenance (Charisma Medical, Pharmec Cabinet/Pharmacy) and dental consumables, managing clinical workflows and CASAOPSNAJ reporting for SRI's hospital network.
UM 0418 acquired licenses for voice cloning (ElevenLabs Pro) and AI video avatar generation (Synthesia Creator), alongside Google Workspace Education Plus for 1,500 users, matching the operational profile of the National Intelligence Academy (ANIMV).
Interactive Signal Workbench
How technologies purchased by UM 0418 operate: from facial capillaries to spoken words
Remote Photoplethysmography (rPPG) exploits the fact that hemoglobin in facial capillaries absorbs green light (530 nm) more strongly than red or blue light. With each heartbeat, blood volume surges, subtly altering skin chrominance. A standard camera separates RGB channels to extract the plethysmographic pulse wave.
The Facial Action Coding System (FACS), implemented in Noldus FaceReader, classifies facial muscle movements into Action Units (AUs), correlating involuntary micro-tensions with emotional states and cognitive load.
Social Science Profiler Plus parses raw text against quantitative dictionaries developed by David Winter and Margaret Hermann, tallying grammatical patterns to compute Need for Power, Affiliation, and Conceptual Complexity.
System Mapping
Military entity × Verified technological layer in public procurement
| Military Unit / CUI | Remote Optical rPPG | FACS Micro-Expressions | Psycholinguistics | Cyber Shield & EDR | Qualified PKI / Trust | Synthetic Media / AI | Medical SIUI / Clinical | GIS & Spatial Intelligence |
|---|---|---|---|---|---|---|---|---|
|
UM 0418 București
Behavioral Psychology, Analysis & Training Center (National Intelligence Academy / SRI) |
✓ | ✓ | ✓ | — | ✓ | ✓ | — | ✓ |
|
UM 0296 București
National Cyberint Center & Qualified Trust Service Authority (SRI) |
— | — | — | ✓ | ✓ | — | — | — |
|
UM 0929 București
Logistics & Central Procurement Directorate (SRI) |
— | — | — | ✓ | — | — | — | — |
|
UM 0510 București
Clinical, Hospital & Pharmaceutical Network (SRI) |
— | — | — | — | — | — | ✓ | — |
|
UM 02499 București
Cyber Defense Command (Ministry of National Defense) |
— | — | — | — | — | — | — | — |
|
DGPI (UM 0205 București)
General Directorate for Internal Protection (Ministry of Internal Affairs) |
— | — | — | — | — | — | — | — |
Forensic Entity Profiles
Detailed forensic profiles of each node in the archipelago
UM 0418 exhibits the rarest software signature in SEAP: a Noldus behavioral analysis lab (Observer XT, FaceReader with rPPG module for contactless pulse measurement), Social Science Profiler Plus psycholinguistic analysis, AI voice cloning and video avatars (ElevenLabs, Synthesia), Google Workspace Education Plus (1,500 users), and QDA Miner qualitative tools.
Technical beneficiary and paying entity of major PNRR and POC cybersecurity contracts (668M RON and 56.4M RON). Officially certified in the ADR register as SRI's qualified provider for electronic signatures, seals, and timestamps.
The central hub through which SRI launches major public tenders for its entire unit network, including the landmark 668-million-lei PNRR C7 cyber contract and direct AI assistance subscriptions (Claude).
Unit dedicated entirely to medical care, clinical labs, pharmacy, and dental services. Operates Charisma Medical (SQL Server database workflows) and Pharmec Cabinet with live SIUI and CASAOPSNAJ reporting.
The central operational unit of the Romanian Armed Forces Cyber Defense Command, responsible for military network hardening and eastern flank threat neutralization.
Internal intelligence service of the Ministry of Internal Affairs. Contracted the SAT advanced analytics platform supporting over 200 concurrent AI sessions and multi-source Big Data fusion.
Epistemic Rigor
What the written records establish versus where working hypotheses begin
Claim: Joint procurements of FaceReader (with rPPG), Observer XT, and Profiler Plus configure an unprecedented contactless behavioral analysis capability in Romania.
All three contracts were awarded on the exact same day to PRAGMA Computers, sharing the @dcti.ro contact domain, indicating an integrated research or training bundle.
Noldus and Profiler Plus are also used in academic research. Without operational mission orders, utilization could be purely instructional or experimental.
Claim: UM 0296 combines the role of beneficiary of the 668M PNRR cyber shield with SRI's official qualified electronic signature issuer.
The ADR official register explicitly records 'Romanian Intelligence Service through UM 0296 Bucharest', resolving ambiguity over CUI 14381010.
Holding an internal Certification Authority (CA) role does not imply that all civilian or state traffic flows operationally through UM 0296.
Claim: UM 0510's procurement profile is 100% oriented toward clinical systems, pharmacies, dentistry, and SIUI reporting.
Charisma Medical and Pharmec Cabinet are standard hospital commercial tools managing patient registries and CASAOPSNAJ reimbursements.
Medical data workflows may serve fitness vetting for personnel, but do not represent a cyber operational vector.
European Norms & Safeguards
Where technical certainty ends and what the law mandates regarding remote biometrics
Articles 5 and 14 of the EU AI Act classify emotion recognition systems in law enforcement and border management as prohibited practices (when inferring emotions in public spaces without consent) or high-risk AI requiring strict transparency and fundamental rights assessments. Procuring FaceReader and rPPG in specialized units creates direct regulatory tension with the European framework.
In Romanian jurisprudence, polygraph tests and behavioral deception assessments are not autonomous evidence, but investigative orientation tools. Extending these methods to contactless video biometrics (rPPG) introduces false-positive vulnerabilities from lighting or motion, lacking certified standing in court.
The absence of specialized offensive intercept tools or covert surveillance hardware from SEAP does not imply non-existence. Public procurement law allows national security exemptions; what appears in SEAP is solely the surface forced into view by EU funding (RRF/NRRP) or civil procurement mandates.
Primary Dataset
Over 40 documented contracts with SICAP codes, values, vendors, and raw excerpts