Security
Security architected for criminal-justice data
BlueCore is built on a CJIS-aligned security architecture and deploys in your own environment, so your agency stays in control of its data and its compliance program.
CJIS-aligned architecture. BlueCore is designed to support your agency's CJIS compliance and audit requirements. It is not CJIS-certified — CJIS compliance is a program we are built to support.
Control domains
Defense-in-depth, by design
Architecture statements describing how BlueCore protects data — not availability SLAs or guarantees.
Identity & access
Granular role-based access control with multi-factor authentication and an httpOnly, BFF session architecture for web and mobile.
Multi-tenant isolation
Every record is scoped to its agency. Data stays isolated by tenant, enforced at the data layer.
Encryption
TLS in transit and field-level encryption for sensitive CJI. Encryption-at-rest hardening is actively in progress.
Tamper-evident audit
Append-only audit trails record who did what, when — across every module, for accountability and review.
Service-to-service trust
Internal services authenticate with signed tokens. No implicit trust between components.
Deployment control
Self-host or on-prem deployment options with on-prem AI inference, so your data stays in your environment.
Threat modeling
Designed around least privilege and defense-in-depth, with protected characteristics excluded from threat scoring.
Resilience by design
A high-availability architecture designed for continuous operation and real-time synchronization across screens.
Deployment
Your data, your environment
Deploy BlueCore in your own environment with on-prem AI inference options. Internal services authenticate with signed service tokens — no implicit trust between components.
- Self-host / on-prem deployment options
- On-prem AI inference — nothing leaves your tenant
- Signed service-to-service authentication
- Tamper-evident, append-only audit across modules
- Capability-based RBAC scoped per agency
Ready to dig into the details?
Request a security and deployment data sheet and a walkthrough with our team.