October 2020Overview of Flock Safety CJIS compliance
Flock Safety gained access to the NCIC hotlist in October 2018. Flock holds privacy and data security in the highest regard, with all CJIS data handled as follows.
All current CJIS data is hosted on hardware infrastructure provided by AWS GovCloud (See AWS CJIS Policy below) in their GovCloud (US-East) Region. This data is only received by our servers and is never sent or communicated to any external source.
Our data is encrypted at rest using AWS KMS keys, which use FIPS 140-2 validated hardware security modules to generate and store the keys. Access to this data is not available via the outside world.
Access to this infrastructure is limited to employees who have completed Security Awareness Training and a fingerprint-based background check, in addition to signing the FBI Criminal Justice Information Services Security Addendum.
Auditing is performed on all access to the Flock Safety solution and is stored for a minimum of 1 year.
Additionally, access is subject to our Internet Security Policy where additional information can be found (see below).
Additional References
AWS CJIS Policy
Flock Safety Internet Security Policy
1170 Howell Mill Rd. NW · Suite 210, Atlanta, GA 30318