CJIS-Compliant Data Security
TRULEO is a CJIS-compliant platform deployed in AWS GovCloud, designed to meet the FBI Criminal Justice Information Services (CJIS) Security Policy requirements for law enforcement data handling.
Security architecture
- Encryption in transit and at rest — all data is encrypted using industry-standard protocols
- Metadata-only retention — TRULEO retains only the metadata necessary to operate the platform; raw CJI is not retained beyond operational need
- AWS GovCloud deployment — hosted in a FedRAMP-authorized environment with strict access controls
- IT policy enforcement — access is governed by departmental configurations and role-based permissions
Read more about our security here.

CJIS session timeout
Per FBI CJIS Security Policy, users must be automatically logged out after 30 minutes of inactivity.
Session expiry warning: TRULEO warns you 5 minutes before your session expires with a modal dialog. You can:
- Click Stay Active to extend your session and continue working
- Click Log Out to end your session immediately
If you don't respond within the 5-minute window, you are automatically logged out. Any unsaved work should be saved before stepping away from your device.

Best practices
- Save report drafts frequently if you're working on long documents
- Log out manually when leaving your workstation rather than relying on the timeout
- Contact your TRULEO representative to request changes to organizational security settings