Security, privacy, and CJIS-aligned deployment

Rapid Cortex is designed for public safety workloads with strong authentication, least-privilege access, encryption in transit, and careful handling of sensitive data. This page summarizes our technical posture for procurement and IT conversations.

Not a certification page: we do notclaim CJIS, CJIS-ATP, FedRAMP, or SOC 2 certification here. "CJIS-aligned" means we document controls that agencies can map to the CJIS Security Policy with their assessors; your program must complete its own review.

HTTPS for web experiences and programmatic access; JWT-authorized APIs.
Role-based access tied to agency tenancy and platform administration.
Encryption at rest for managed data stores; optional stronger key management during deployment.
Policy against logging raw secrets, tokens, and full unredacted transcripts in application logs.
Media intake uses private storage with short-lived, controlled retrieval where configured.

Procurement and security questionnaires are handled collaboratively. For tailored materials beyond this summary, contact us.