FBI CJIS Security Policy
BEAMRaiL is designed to meet the CJIS Security Policy requirements for vendors handling criminal justice information. We execute the CJIS Security Addendum with each agency.
Fully AdherentSecurity & Compliance
BEAMRaiL is built from the ground up to secure sensitive public safety and law enforcement data. We combine strict CJIS compliance with robust AWS cloud architecture to deliver absolute security without compromise.
01 / Standards
Compliance Posture
We believe in radical transparency. We design our platform to align strictly with the standards that matter most to your operations.
SOC 2
Our SOC 2 Type 1 audit is underway, with Type 2 to follow. View Trust Center →
Audit In ProgressAWS
Hosted on Amazon Web Services in the United States, with AWS's physical, network, and environmental security controls.
Native AWSFIPS 140-3 Cryptography
We use the AWS-LC Cryptographic Module, FIPS 140-3 validated under NIST Certificate #5429.
FIPS Validated02 / Security Architecture
How we secure your data
Security is not an afterthought; it is our foundation. From network topology to access control, we implement industry-leading protocols to protect your operational environment.
Restricted Access
BEAMRaiL staff can't access customer data by default. Support access requires your agency's authorization and is limited to staff who have completed CJIS background checks.
Encryption
AES-256 encryption at rest with keys managed by AWS KMS. TLS 1.2 or higher for all data in transit.
Access Control
SSO support, multi-factor authentication, and role-based permissions so users see only what they're authorized to see.
Audit Logs
Every action is logged. Agency admins can see who accessed what, when, and from where.
Monitoring
Continuous vulnerability scanning and threat detection.
03 / Questions
Frequently asked questions
What security standards does BEAMRaiL follow?
BEAMRaiL is designed to meet the FBI CJIS Security Policy, and our SOC 2 Type 1 audit is underway. Current status is available in our Trust Center.
How is BEAMRaiL hosted and secured?
BEAMRaiL runs entirely on Amazon Web Services, with all data stored in U.S. regions. We rely on AWS's physical security, environmental controls, and network protection.
How is our data encrypted?
All data is encrypted at rest and in transit: AES-256 at rest and TLS 1.2 or higher in transit, using AWS's FIPS 140-3 validated cryptographic module. Encryption keys are managed through AWS Key Management Service (KMS).
Who can access our agency's data?
Only your authorized users. BEAMRaiL staff have no access to customer data by default. Support access requires explicit, time-limited authorization from your agency and is limited to staff who have completed CJIS background checks.
Do you perform penetration testing?
Yes. An independent third-party penetration test is part of our SOC 2 program. We also run continuous vulnerability scanning across our code and infrastructure.
Have additional security questions?
We'll provide CJIS documentation, the CJIS Security Addendum, and architecture details on request.
Contact Us