AWS GovCloud storage
Sensitive police data is stored in AWS GovCloud (US), in a database with no public access. Files also replicate to a second GovCloud region.
Security at AVAIRY Solutions
Guardian AI handles sensitive police information, so its security was designed around the FBI CJIS Security Policy. Here is what we do and where your data lives.
Why it matters
A caller's words, a tip, or a BOLO can hold sensitive information. Before you trust a vendor with it, you should be able to see exactly how it's protected.
CJIS-aligned design
Sensitive police data is stored in AWS GovCloud (US), in a database with no public access. Files also replicate to a second GovCloud region.
AES-256 at rest with AWS KMS keys, TLS 1.2 or newer in transit, and FIPS endpoints for connections to AWS services.
Authenticator app or passkey sign-in, which each agency can require. Sessions lock after 30 minutes idle and require a new sign-in after 12 hours.
Roles decide who can see, hear, publish, or export. Your agency controls who has access to what.
Administrative actions are logged with who, what, when, and source IP. AWS activity in GovCloud is logged with CloudTrail.
Our AWS organization is opted out of AWS using content to improve its AI services, and Amazon Bedrock doesn't use your content to train models.
Where your data lives
Guardian AI keeps sensitive police data in AWS GovCloud (US), AWS's isolated regions built for government workloads. Supporting services, such as sign-in and the website, run in standard U.S. AWS regions.
We'll walk your CJIS officer through the specifics for the modules your agency uses.
FAQ
Guardian AI is built with CJIS-aligned controls. CJIS security is a shared responsibility between an agency and its vendors, so we review our controls with your CJIS Systems Officer or Terminal Agency Coordinator.
Sensitive police data is stored in AWS GovCloud (US). Supporting services, such as sign-in and the website, run in standard U.S. AWS regions. We'll walk your CJIS officer through the specifics.
Data at rest uses AES-256 encryption with AWS KMS keys. Connections use TLS 1.2 or newer, and connections to AWS services use FIPS endpoints.
Each agency can require it. Staff can use an authenticator app or a passkey, and sessions lock after 30 minutes of inactivity.
Our AWS organization is opted out of AWS using content to improve its AI services, and Amazon Bedrock doesn't use your content to train models.
Tell us what your agency needs to review, and we'll walk through it with you and your CJIS officer.
+1.440.597.4600