Security
Security at JusticeWare
Court records demand protection at every layer.
Visit our Trust CenterIsolated by design
-
AWS GovCloud (US)
The AWS region built for U.S. government workloads.
-
Separate environments
Each court runs in its own isolated AWS GovCloud account.
-
Private databases
Never directly reachable from the internet.
-
U.S. data residency
All data stays in the United States.
Data protection
-
Encryption
TLS 1.2+ in transit, AES-256 at rest.
-
Daily backups
Encrypted and kept for 30 days.
-
Automatic failover
A standby database takes over if a data center fails.
Threat protection
-
Web application firewall
Blocks common attacks and abusive traffic.
-
Runtime monitoring
Application containers are watched for signs of compromise.
-
Vulnerability scanning
Application images and dependencies are checked for known vulnerabilities.
-
Penetration testing
Performed at least annually.
Audit logging
-
Infrastructure logs
All cloud activity is recorded.
-
Database auditing
Every change is logged, and suspicious activity raises an alert.
Our team
-
Least privilege
Access to court environments is limited to staff whose role requires it.
-
Secure sign-in
Single sign-on with MFA. Access is revoked within one business day of a role or employment change.
-
Access reviews
At least annually, and quarterly for high-risk vendors.
-
Screening and training
Background checks for every hire, and security training every year.
Incident response
We maintain an incident response plan and notify affected customers without undue delay.
Built into JusticeWare
MFA, sealed records, confidential parties and complete audit trails.
See security featuresTrust Center