Security Built for
Law Enforcement
IronCase is designed from the ground up to meet the strictest security requirements for handling Criminal Justice Information. Your data protection is our highest priority.
CJIS Security Policy Compliance
Designed to support FBI CJIS Security Policy compliance across all 13 security areas. Built to meet the most stringent requirements for handling Criminal Justice Information.
- WebAuthn + TOTP multi-factor authentication
- AES-256-GCM encryption at rest and in transit
- 15-minute session timeout enforcement
- Comprehensive audit logging of all CJI access
SOC 2 Type II Controls
SOC 2 Type II controls implemented for security, availability, and confidentiality based on industry best practices.
- Continuous monitoring and testing
- Documented security policies
- Incident response procedures
- Vendor risk management
Data Encryption
All data is encrypted using industry-standard protocols, ensuring your sensitive information remains protected at all times.
- TLS 1.3 for data in transit
- AES-256-GCM for data at rest
- Blind HMAC-SHA256 indexes for PII search
- Key rotation support with zero downtime
Access Control
Role-based access control ensures personnel only access information appropriate to their role and need-to-know.
- Granular role-based permission system
- HITL supervisor approval workflows
- Tenant-isolated multi-agency architecture
- Automatic account lockout after failed attempts
Audit & Monitoring
Every action is logged and auditable. Complete visibility into who accessed what and when.
- Immutable audit logs
- Real-time security alerts
- Anomaly detection
- Compliance reporting
Infrastructure Security
Hosted on enterprise-grade infrastructure with multiple layers of physical and network security.
- SOC 2 compliant data centers
- DDoS protection
- Network segmentation
- Regular penetration testing
Our Security Promise
We understand the critical nature of law enforcement data. IronCase undergoes regular security assessments, penetration testing, and compliance audits to ensure your data remains protected. Our team includes security professionals with backgrounds in law enforcement technology and federal compliance.
Compliance & Certifications
FBI CJIS Security Policy
IronCase is designed to support FBI Criminal Justice Information Services Security Policy compliance, including all required technical controls, administrative policies, and personnel security requirements.
SOC 2 Type II Controls
SOC 2 Type II controls implemented and designed to operate effectively to protect your data's security, availability, and confidentiality.
CalECPA Compliance
Built-in tracking for California Electronic Communications Privacy Act requirements, with automated notification deadline management.
NIST 800-53
Controls aligned with NIST Special Publication 800-53 security and privacy framework, covering access control, audit and accountability, incident response, and system and communications protection.
Data Residency
All data is stored in United States data centers. Enterprise customers can specify regional data residency requirements for additional compliance needs.