Security by Design,
Not as an Afterthought
NearCall is engineered around the security and compliance requirements of modern correctional and criminal-justice environments — with encryption, role-based access, device management, network segmentation, audit logging, and security controls built into the platform architecture.
Eleven Layers of Defense
Security is not a single feature. NearCall is designed as a layered architecture spanning identity, encryption, access control, infrastructure, device management, monitoring, and operational security.
Encryption
Encryption protects sensitive data in transit and at rest across supported NearCall services.
Role-Based Access Control
Granular permissions help agencies restrict access based on assigned roles and operational responsibilities.
Audit Logging
Security-relevant administrative and operational activity is logged to support investigations, oversight, and compliance review.
Device Management
Centralized management of deployed NearCall tablets and authorized staff devices, including configuration, policy enforcement, and remote administration.
Network Segmentation
Facility technology can be deployed within segmented network environments with access limited to approved NearCall and agency services.
Secure Cloud Architecture
Segmented cloud infrastructure designed around sensitive correctional workloads and controlled administrative access.
Security Monitoring
Monitoring of platform infrastructure, authentication activity, administrative access, and security events.
Data Retention Controls
Configurable retention policies designed to support agency, contractual, legal, and regulatory requirements.
Administrative Permissions
Tiered administrative privileges, least-privilege access, and separation of duties for sensitive functions.
Physical Device Security
Purpose-built hardware options designed with tamper resistance, managed configurations, and correctional environments in mind.
Compliance-Driven Design
NearCall's security architecture is designed around the requirements commonly encountered in correctional and criminal-justice technology environments.
A defense-in-depth posture, not a single perimeter.
Security-Grade Infrastructure
NearCall's network segmentation, secure edge, and threat monitoring are delivered through enterprise infrastructure from established security and networking manufacturers — configured, managed, and supported as part of the NearCall deployment.
Built With CJIS Requirements in Mind
NearCall is designing its security controls to support FBI CJIS Security Policy requirements where Criminal Justice Information is within the scope of an agency deployment.
CJIS applicability and approval are determined through the applicable agency and state CJIS process. NearCall works with agencies to support required technical controls, documentation, personnel access requirements, and security reviews.
CJIS is not a universal commercial certification. Requirements and approvals are handled through the applicable criminal-justice agency and state process.
Actively Pursuing SOC 2 Type II
NearCall is actively working toward SOC 2 Type II under the AICPA Trust Services Criteria. Our security program is being developed around formal controls for security, access management, change management, monitoring, incident response, vendor risk, and other areas relevant to enterprise and government technology environments.
We believe security claims should be verifiable.
NearCall does not represent certifications or attestations as completed until the applicable independent review has been successfully concluded.
Security Beyond the Application
A credible security posture extends past software controls into the people, processes, and operations that run the platform day to day.
Identity & Access Management
Strong authentication, role-based access, privileged-access controls, and least privilege.
Change Management
Controlled development, testing, approval, and production deployment processes.
Vulnerability Management
Processes designed to identify, prioritize, and remediate security vulnerabilities.
Incident Response
Documented procedures designed to support detection, escalation, containment, recovery, and post-incident review.
Vendor Risk
Security review and oversight of relevant third-party technology providers.
Business Continuity
Resiliency, backup, and recovery practices designed to support critical correctional operations.
Security Extends to the Edge
Every NearCall device deployed inside a facility is managed, locked down, and remotely administered — designed so that the hardware on the housing-unit wall is treated as part of the security architecture, not a blind spot.
Review NearCall's Security Architecture
NearCall supports security and compliance reviews as part of agency procurement, implementation, and technical due diligence. Security documentation, architecture information, applicable control evidence, and compliance materials can be made available through the appropriate review process.
Security and compliance information for customers, agencies, and authorized partners.
The NearCall Trust Center provides a central location for security documentation and compliance status, available through the appropriate review process.
Visit Trust CenterAvailability of specific items is subject to the Trust Center access process and the applicable review stage.