Skip to content
Cjis

CJIS compliance tool with every module in one workspace

Cjis is built only for the CJIS Security Policy. Every module below works on the same record: the assessment finds the gap, the checklist assigns it, policies and evidence prove it, and the agency report shows it. Nothing lives in a separate spreadsheet, and nothing in Cjis is criminal justice information.

Compliance desk in an agency office with two monitors showing task lists, policy binders on a shelf and a printed agency report beside the keyboard
01 01/06

Readiness assessment by policy area

Questions are mapped to the CJIS Security Policy areas and the v6.0 control families, from Access Control and Identification and Authentication to Media Protection, Incident Response and Supply Chain Risk Management. Each area gets a score, and each gap gets its priority from P1 to P4.

  • Score per area and overall readiness
  • Gaps ranked by priority, P1 first
  • Mapping to v5.9.5 for states still auditing on it
  • Per system assessments on Pro and Enterprise
Check my readiness

Requirements checklist

Every requirement becomes a task with an owner, a status, a due date, a note and linked evidence. The list is the working plan between audits. See the full CJIS compliance requirements by area.

  • Filter by priority, policy area or system
  • Assign owners across IT, HR and records
  • Evidence linked straight to the task it closes
02 02/06

Policies and procedures with templates

Editable templates cover access control, incident response, media sanitization, mobile devices, passwords and advanced authentication, personnel screening, awareness training, physical security and configuration management. Starter includes 10 core templates, Team includes all, Pro and Enterprise add your own custom policies. Browse the CJIS policy templates.

  • Version history for every policy
  • Owner, approval date and next review date
  • Reminder before each annual review
03 03/06

Personnel register

Everyone with unescorted or logical access to CJI in one table: role, access level, fingerprint-based background check date and status, CJIS Security Addendum certification for vendor staff, training due date, and the dates access was granted and revoked. Starter covers 10 people, Team 75, Pro 300 and Enterprise has no limit.

  • CSV import of existing staff lists
  • Flags for access without a recorded check
  • Revocation dates kept when people leave
  • Addendum certification tracked per person

Security awareness training tracking

Training due dates per person, completion records and uploaded certificates, with reminders 30 and 7 days before expiry. A built-in role-based awareness briefing with a short quiz supplements your state's training platform and does not replace it. More on CJIS training.

  • Due dates by person and by role
  • Certificates attached to the personnel record
  • Reminders to the person and to the LASO
Check my readiness
04 04/06

Evidence locker

Attach screenshots, configuration exports, signed agreements and log review exports to the control, policy or person they prove. The locker holds compliance documents only and never CJI: each upload shows a notice and the file name is checked before saving. Storage is 2 GB on Starter, 25 GB on Team, 100 GB on Pro and 1 TB on Enterprise.

  • Evidence linked to controls, policies and people
  • Upload dates shown, so stale evidence stands out
  • No criminal justice information, ever

Reminders

Cjis watches the dates that make compliance decay and tells the right owner before each one passes. Reminders are included on every plan.

  • Awareness training expiry
  • Background re-investigations per your state's rules
  • Annual policy review and audit date countdown
  • Open P1 gaps
Check my readiness
05 05/06

Agency report

One PDF and one shareable read-only link per agency, with the assessment summary, control status, policies with dates, the personnel compliance table and the evidence index. Starter reports to 1 agency, Team to 3, Pro to 25 and Enterprise without a limit. Vendors see how this works on CJIS compliance for vendors.

  • PDF export for the agency file
  • Read-only link you can revoke
  • One report per agency, with its own systems and people
See pricing

Export

Your compliance data stays yours. Export the checklist, the personnel register, policies and the evidence index at any time, on every plan.

  • CSV export of registers and checklists
  • PDF export of policies and reports
  • Evidence files downloadable as you uploaded them
06 06/06

Roles and audit log

On Pro and Enterprise, roles and permissions decide who can edit controls, approve policies or view personnel records, and the audit log records every change with who made it and when.

  • Admin, editor and read-only roles
  • Change history for controls, policies and people
  • Unlimited admin seats on Pro and Enterprise
See pricing

SAML SSO

Enterprise connects Cjis to your identity provider through SAML single sign-on, so access follows your existing accounts and offboarding. Enterprise also includes multiple organizations, priority support with a response SLA and annual invoice payment. Compare every plan on CJIS compliance software pricing.

  • Sign in with your SAML identity provider
  • Access ends when the account is disabled there
  • Multiple organizations under one subscription
See pricing

How Cjis compares with the other ways to run CJIS work

A side by side view of what you get in each case, from the first readiness score to the report an agency reads.

Need Cjis Spreadsheet Consultant Generic GRC tool
Readiness score by CJIS Security Policy area Yes No Once per engagement Not CJIS specific
Controls mapped to the v6.0 priorities Yes Built by hand In the consultant report Framework set up by you
CJIS policy and procedure templates Yes No Yes General templates
Personnel register with screening and training dates Yes A separate sheet No Partly
Evidence attached to each control Yes Links in cells A folder at the end Yes
Reminders before training and reviews expire Yes No No Yes
Report for each agency Yes Built by hand Once per engagement Not CJIS specific
Monthly price From $49 Staff time only Billed per engagement Priced for broad frameworks

What the tool does not do

Cjis is an independent compliance tool. It is not affiliated with, endorsed by or certified by the FBI or the CJIS Division, and using it does not make anyone "CJIS certified", because the FBI does not certify companies. Cjis is not legal advice, and your agency or state CSA decides the outcome of every review. Cjis never stores CJI.

Check my readiness