Protecting your juvenile justice data isn’t just a priority for us—it’s a responsibility we take seriously. With the FBI’s Criminal Justice Information Services (CJIS) Security Policy update on October 1, 2024, we’ve made significant investments to ensure compliance and strengthen security for these updated standards.
Our Commitment to CJIS Compliance
There is no official “CJIS Certification” for software vendors, however, we have taken every step necessary to align with the latest FBI CJIS Security Policy and comply with its requirements. This means juvenile justice agencies using our platform can trust that their data is secure and meets federal standards. These are just some of the recent steps we’ve taken, and updates we’ve made to help comply:
- Employee Training & Screening: Every YouthCenter team member completes the Level 3 or Level 4 CJIS training, depending on their role. To ensure continued compliance with training requirements, annual updated training is scheduled.
- Employee Screening: To ensure compliance with personnel security requirements, every YouthCenter team member undergoes yearly fingerprint-based background checks, and has signed the FBI CJIS Security Addendum.
- Federated Login with Microsoft Entra ID (formerly Azure Active Directory) – This new add-on allows agencies to enforce multi-factor authentication (MFA) using their existing identity provider with the convenience of federated login.
- MFA with Auth0 – The updated CJIS requirements now include Multi-Factor Authentication (MFA). We’ve added this secure login option for agencies that prefer our standalone authentication.
- Microsoft Azure Government Hosting: Since 2020, our platform has been hosted in the Microsoft Azure Government Cloud, a secure, CJIS-aligned cloud infrastructure designed to meet the highest security standards.
Beyond CJIS Compliance
While CJIS compliance is essential, we’ve gone beyond by earning the HIPAA Seal of Compliance, validating our commitment to maintaining the highest standards of security and privacy around health data contained within the YouthCenter platform.
Partnering for a Secure Future
CJIS compliance is a shared responsibility, and we work hand-in-hand with our vendors and clients to ensure best practices are followed. Whether it’s assisting with security policies, audit preparations, or access controls, we’re here to help you maintain compliance and protect your data.
Our commitment to security isn’t just about meeting standards—it’s about ensuring that juvenile justice agencies can operate with confidence, knowing their data is safe, secure, and accessible only to authorized personnel.
Want to learn more about how else YouthCenter protects your data? Check out our security overview. To learn more about adding a federated login to your YouthCenter instance, contact us.
