The SAKHA system (Law Enforcement — Police — Electronic Services System) is the centralized portal for the electronic services of the Law Enforcement Command of the Islamic Republic of Iran (FARAJA). As one of the core infrastructures of e-government, it provides citizens with a broad set of law enforcement and administrative services remotely. The system covers services such as military conscription affairs, passport issuance and renewal, residence verification, vehicle registration and license plate exchange services, inquiry into and appeals against traffic violations, and the management of certain exit-from-country procedures.

SAKHA's official function is stated as facilitating citizens' access to law enforcement services and reducing in-person visits. However, the system's centralized nature and the requirement that citizens register and verify their identity in order to carry out a wide range of essential affairs have turned SAKHA into one of the main nodes for the aggregation of sensitive citizen data. Identity verification in this system is performed by linking the national ID number, the phone number registered with the Civil Registry Organization, and basic identity information — effectively creating a non-repudiable digital identity for users.

SAKHA simultaneously collects and integrates data from different and sensitive domains, including identity information, exact residential address, military service records, passport status and exit-from-country collateral, and law enforcement and traffic records. This data aggregation makes it possible to link the civil, law enforcement, and judicial domains, and allows the law enforcement institution to condition citizens' access to certain administrative rights on the completion or confirmation of data in the system.

From a surveillance perspective, SAKHA functions beyond a service system and becomes an instrument of "digital administrative control," such that restrictions — like blocking license plate exchange, suspending certain services, or imposing exit bans — can be applied systemically and without physical confrontation. The concentration of this volume of sensitive data in a system under FARAJA's direct management, in the absence of a comprehensive personal data protection law, carries serious risks of privacy violations and the secondary use of data for surveillance and security purposes.