You should be suspicious Robert. I don't know anything about Cott but have seen other vendor's who offered govenment agencies deals that were too good to be true only to learn what they were really after was the information and images for resale. Your agencies should check their contracts very carefully to see who owns the images (or copies) once they are scanned. If the contract does not specifically prevent the vendor for redistribution, they probably are.

We had one case here in Texas where a county suffered a catastrophic loss of data and images. The went to their vendor for backup copies only to be told they would have to buy them back at the same price they had been selling them to others. It took the threat of a lawsuit to get that vendor to do the right thing.

We have found cases where our investigators found the software provided "programmer's back doors" that allowed the images and data to be transmitted live back to India without the knowledge of the agency. See