School–Public Safety Radio Interoperability While Maintaining CJIS Certification for PSAPs

School districts and public safety agencies almost never share a radio system. Districts run their own UHF/VHF analog or DMR fleets, or increasingly LTE Push-to-Talk over Cellular (PTToC) apps and radios. Police, fire and the PSAP run licensed P25 or TETRA trunked systems governed by CJIS security policy. When an incident happens on a campus, those two worlds have to talk to each other in seconds — but the agency cannot simply add school staff onto its P25 talkgroups without inheriting a CJIS compliance problem. The ip³Radio InteliGate gateway solves both halves: real interoperability at the edge, with a controlled boundary that keeps CJIS-scoped systems clean.

Quick answer

InteliGate is a hardware LMR-to-LTE gateway that patches a district's radios (LMR or ip³PTT) to a dedicated interoperability talkgroup on the agency's radio network. Because the bridge is audio-only at a donor radio interface — no query, transmission, storage or display of Criminal Justice Information — the school side never enters CJIS scope. The PSAP keeps its certified system untouched, and dispatchers gain a one-button path to campus staff.

Why CJIS is the blocker for school interoperability

The FBI CJIS Security Policy applies to systems that access, process, transmit or store Criminal Justice Information (CJI) — NCIC and CCH queries, driver and vehicle records, incident data, and the identity of the personnel who touch them. Radio voice traffic itself is generally not CJI, but the systems that carry it often sit inside the same certified security boundary as CAD, mobile data and records. Handing a school district credentials, subscriber IDs or console access on that network expands the boundary to include people who have not had fingerprint-based background checks, security awareness training or personnel screening under CJIS §5.12. Most agencies correctly refuse.

• Personnel screening: every person with access to a CJIS-scoped system needs a fingerprint-based background check and biennial security awareness training.
• Advanced authentication: multi-factor is required for CJI access from outside a physically secure location.
• Audit and accountability: CJIS-scoped systems require logging of access events and retention of audit records.
• Physical protection: equipment inside the boundary must live in a physically secure location with controlled access.
• Media and encryption: CJI in transit outside a secure boundary must be encrypted to FIPS 140-2/140-3 validated standards.

The design goal, therefore, is not to make a school district CJIS-compliant. It is to build an interoperability path that carries voice only and never touches CJI, so the district stays outside the boundary entirely.

How InteliGate creates the interoperability bridge

InteliGate is a plug-n-play, tri-carrier LTE gateway with dual radio interconnect ports. It is OEM-agnostic and connects to Motorola, Kenwood, Harris, Tait, Icom, Hytera and other subscriber radios over analog, DMR, P25 or TETRA. On the LTE side it registers to the ip³PTT platform with AES-256 encrypted voice over three US Tier-1 carriers.

• A donor radio — a normal, agency-programmed subscriber unit — is affiliated to a single dedicated interoperability talkgroup, not the full agency fleet.
• That donor radio plugs into an InteliGate radio interconnect port; InteliGate handles PTT keying, COR/VOX detection and audio levels.
• InteliGate maps that radio channel to an ip³PTT talkgroup shared with district radios, staff smartphones and school resource officer devices.
• Audio crosses in both directions with sub-second latency; GPS, presence and messaging stay on the LTE side only.
• A second interconnect port can bridge a second network — for example the district's legacy UHF repeater — into the same conference.

Nothing on the agency network sees a new IP endpoint, a new console user or a new subscriber ID beyond the single donor radio the agency already controls and can revoke. That is the property that keeps the CJIS certification intact.

Why this keeps the PSAP's CJIS certification intact

• Voice-only data path: InteliGate transports audio at the radio's speaker/mic interface. It has no route to CAD, RMS, NCIC or any CJI system, so no CJI is accessed, transmitted or stored.
• No new network attachment: the bridge terminates at a conventional subscriber radio over RF, not at an Ethernet port on the agency's certified LAN — the most common source of scope creep.
• Agency-controlled talkgroup: the donor radio is provisioned by the agency's system administrator onto one interop talkgroup and can be de-affiliated instantly.
• Encryption in transit: LTE-side audio is AES-256 encrypted end to end, and the LMR side inherits whatever encryption the agency's own talkgroup uses.
• Auditable participation: ip³PTT logs talkgroup membership, PTT events and optional voice recording on the district side, which supports after-action review without exporting anything into the agency's audit scope.
• Clear boundary documentation: because the interface is a physical radio, the agency's CJIS Systems Officer (CSO) can document the bridge as an out-of-scope external voice interconnect.

Always validate the specific architecture with your state CJIS Systems Agency and the agency's CSO before deployment. The pattern below is designed to make that conversation short, but the determination is theirs.

Reference deployment for a school district

• One InteliGate per campus or per district EOC, depending on how granular the agency wants the patch to be.
• Agency donor radio affiliated to an 'SCHOOL-INTEROP' talkgroup, normally in a monitored-but-idle state.
• District users on ip³PTT — rugged Edge-series LTE radios for SROs and facilities, smartphone app for administrators and front-office staff.
• InteliMIC for SROs and officers who need to carry one device that keys both the agency LMR radio and the district's ip³PTT talkgroup.
• ip³PTT Dispatch console at the district safety office for mapping, talkgroup control and recording.
• A documented escalation rule: the patch is enabled full-time for monitoring, or activated on lockdown/alert by dispatch — agencies typically prefer the latter.

Operational scenarios this solves

• Lockdown: a principal keys a school radio and is heard directly by responding units and the PSAP dispatcher, without a phone relay.
• SRO coverage gaps: the SRO carries one InteliMIC and stays on both the agency talkgroup and the school channel simultaneously.
• Bus and transportation incidents: district transportation radios reach responders on rural routes where the LMR footprint is thin but LTE is not.
• Large events: athletics and graduation staffing use temporary ip³PTT talkgroups patched to the agency for the duration of the event only.
• Mutual aid across districts: several districts share a regional talkgroup that a single county gateway bridges to the PSAP.

Governance and policy checklist

• Written MOU between the district and the agency covering talkgroup use, activation criteria and radio discipline.
• CSO review and written determination that the voice-only bridge is outside the CJIS security boundary.
• Named administrators on both sides with authority to enable, disable and revoke the patch.
• Training for school staff on plain-language radio protocol — no ten-codes, no PII over the air.
• Explicit prohibition on relaying CJI (record checks, warrant status, juvenile identifiers) over the interop talkgroup.
• Annual test and after-action review, documented for grant reporting and accreditation.

Funding the deployment

School safety and interoperable communications grants routinely fund gateways, radios and the first years of service. FEMA Homeland Security Grant Program, COPS school violence prevention funding, Byrne JAG and state school-safety grants have all been used for LMR-to-LTE interoperability projects. Our grant assistance team can help match the deployment to an open funding opportunity and supply narrative language describing the CJIS boundary design.

Next step

Bring your agency's radio system type, the district's current radio fleet and the number of campuses to an ip³Things engineer, and we will produce a bridge design, a CJIS boundary diagram for your CSO, and a bill of materials sized to your grant cycle.