SECURITY AND TRUST

Built for criminal justice data.
From day one.

Our team includes former officers who've handled this data themselves. We know what's at stake, so we hold it to a higher standard than the rules require.

Request our SOC 2 report Talk to our team

CJISCompliant

SOC 2Independently audited

AWS GovCloudUS government region

HIPAACompliant

GovAI CoalitionMember

01 · PROTECTION

Built to the newest CJIS standard.

ENCRYPTION

256-bitPolicereports.aiv6.1CJIS Security Policy, 2026

Every piece of data, at rest and in transit, is encrypted at 256-bit, the level the latest CJIS Security Policy requires.

CLIENT-SIDE ENCRYPTION

Encrypted before it leaves the device.

Data is encrypted on your agency's own devices before it is sent. Only the agency that created it can open it, which protects PII and criminal justice information.

02 · YOUR DATA

Your data stays yours. Full stop.

Never used to train AIYour reports and evidence are never used to train or fine-tune AI models.

Hosted in AWS GovCloudThe isolated US government cloud region, built for regulated public sector workloads.

Zero external retentionYour data is not kept by outside parties.

Closed admin environmentAdministrative access is restricted to approved IP addresses only.

Role-based accessOfficers, detectives and supervisors see what their role allows.

Full audit trailWho created what, from which source, and who signed off.

03 · RESPONSIBLE AI

AI drafts. The officer decides.

Every document is reviewed and signed by the officer before it is submitted. We're a member of the GovAI Coalition, alongside more than 140 US government agencies working on responsible AI standards.

01Human review, every timeNothing is submitted without the officer's sign-off.

02Sources you can checkFacts link back to the interview, notes or document they came from.

03Ready for AI disclosure lawsBuilt to support rules like California SB 524 and Utah SB 180.

04 · FOR IT AND PROCUREMENT

Everything your review needs.

We've been through state CJIS reviews before. Ask and we'll send the package.

SOC 2 reportSecurity, availability, confidentialityON REQUEST

CJIS documentationPolicies, controls and questionnairesON REQUEST

Architecture diagramsNetwork, hosting and data flowsON REQUEST

Accessibility (VPAT)Section 508 conformance reportON REQUEST

We also follow ISO 27040 for storage security, ISO 27031 for business continuity and ISO 27018 for protecting personal data in the cloud.

Questions from your IT team?

We'll walk them through our security, hosting and compliance in one call.

Built for criminal justice data.From day one.