Skip to main content
Welcome to Virtru's support portal. As we work to make this page more accessible to screen readers, please contact us at support@virtru.com for technical support.

CJIS compliance

  • Updated

About

Virtru helps you comply with Criminal Justice Information Services (CJIS) requirements by providing client-side encryption of sensitive information and restricting access only to the authorized recipient(s) you outline. With a paid Virtru plan, organizations can send criminal justice information (CJI) compliant encrypted emails and files and apply additional security features. This ensures that confidential information remains private, audit-ready, and protected.

The rest of this article provides more details about how Virtru helps you maintain CJIS compliance. Please keep in mind that CJIS compliance is determined on a state-by-state basis. As a result, maintaining compliance using Virtru may be different depending on your state's interpretation of the regulations and may require advanced Virtru products. 

Personal Privacy Users

Help with CJIS compliance is not available for unpaid users on Personal Privacy accounts. If your organization requires Virtru for a CJIS compliance strategy, you must contact the Virtru Sales Team and purchase a paid plan. 

 

Virtru and CJIS

Virtru is a great fit for a CJIS compliance strategy as it encrypts CJI at rest and in-transit:

  • With FIPS 140-2 mode enabled, Virtru’s encryption meets or exceeds all CJIS requirements.
  • Virtru's client-side encryption prevents third party vendors from having to handle unencrypted CJI.
  • Virtru DLP, when properly configured, enables detection of CJI before it leaves secure locations.

 

Encrypted Search, CKS, and other features

Your organization may also be able to meet CJIS compliance with Encrypted Search enabled. To confirm compliance, we would want to work with your state CJIS governing authority to make sure that Encrypted Search falls in line with their interpretation of the regulations. 

Additionally, some customers may determine that they need Virtru Private Keystore or other advanced features to achieve CJIS compliance in the cloud, while other customers may determine that Virtru’s standard client-side encryption meets CJIS requirements.

 

More Information

As mentioned above, maintaining compliance using Virtru may be different depending on your state's interpretation of the regulations, your use-case, and which Virtru products you use. Our team is happy to answer any CJIS compliance questions specific to your use-case. For more information: 

Related articles