Freight rail is the largest federally designated piece of critical infrastructure most Americans never see. Four U.S. Class I carriers — BNSF, Union Pacific, CSX, and Norfolk Southern — plus the U.S. operations of CN, CPKC, and a thousand-strong short line ecosystem, move 1.6 billion tons of freight a year across 140,000 route miles, through tens of thousands of grade crossings, and into hundreds of intermodal terminals, classification yards, dispatch centers, and maintenance shops. Each one of those facilities is a pedestrian entry point. Each one is policed by badge.nnBadges verify credentials. They cannot verify the person holding them. Tailgating, cloned cards, and terminated-employee access are invisible to credential-only systems. Meanwhile, organized cargo theft surged past $200 million in 2025 — a 50%+ year-over-year increase, with more than 75,000 incidents reported by AAR. Trespasser fatalities reached 793 in 2025 — the single largest category of rail-related death in America. Hazmat consequences sit one access-control failure away.nnEvery Class I carrier runs two fundamentally different security environments. The operational footprint concentrates cargo theft, trespass, and credential sharing. The corporate and dispatch footprint concentrates insider threat, TSA cyber-physical exposure, and corporate-espionage risk. Safience secures both with the same edge architecture and the same RAC human-verification backbone.
Identity Intelligence for Freight Rail
Know who is walking through your classification yards, intermodal terminals, dispatch centers, and maintenance shops — in under 60 seconds — without putting a single watchlist record on a single sensor. Built on 56.7M+ law-enforcement-sourced, verified identities and mandatory human verification. Two parallel buying centers operate inside every Class I carrier — physical security and workforce integrity. Both gates must clear before contract.
Select your role to see how Safience addresses your specific challenges.
Chief Security Officer
Decision Maker
Your badge readers verify credentials. They cannot verify the person holding them. RTIS/RVIS sensors at pedestrian choke points close the gap — no enrollment, no workflow change for your crew, and not a single X-LST entry or UMbRA record ever lives on the sensor.
VP Safety
Champion
The FRA's expanded safety culture framework now scores access control and workforce suitability. Safience produces the documented, defensible audit trail your SMS submission needs — and reframes identity intelligence as a safety program, not just a security purchase.
VP Operations
Decision Maker
No stop. No enrollment. No friction at the gate. RTIS/RVIS deploys at pedestrian thresholds across terminals, classification yards, and maintenance shops with zero workflow change for authorized personnel — and zero new endpoints on your dispatch or crew-management stack.
Chief Information Security Officer
Technical Gatekeeper
TSA SD 1580/82-2022-01C extends cyber requirements to OT. The RTIS/RVIS sensor is a one-way outbound transmitter — one ~30KB cropped JPEG per entry event, no return channel, no X-LST or UMbRA data on the device. A compromised sensor cannot expose what it does not hold.
General Counsel
Gatekeeper
BIPA exposure has produced nine-figure settlements. Our defense is architectural: non-match images are deleted immediately, no biometric identifier is stored, and the carrier — not Safience — is the data controller for X-LST. For eMotive, the patented dual face-and-name match (US20240193715A1) is the FCRA accuracy defense.
Chief Financial Officer
Economic Buyer
AAR reported $200M+ in cargo theft losses across major carriers in 2025 — a 50%+ year-over-year jump. A single hazmat-corridor identity failure is a multi-million-dollar event before litigation. Safience is the quantifiable risk reduction your board risk committee and insurance underwriter are already asking for.
CHRO / VP Human Resources
Decision Maker — eMotive
A January background check leaves you blind to an October arrest until next January. On a chlorine, ammonia, or crude corridor, that's a 364-day duty-of-care gap. eMotive closes it continuously — patented dual face + name matching, encrypted alerts to HR only, never an automated adverse action.
VP Labor Relations
Champion
SMART-TD, BLET, and the Boilermakers have challenged monitoring tech at peer carriers. Safience is consent-based at onboarding, deployed only at the entry threshold, and architecturally incapable of automated adverse action. Non-match data is deleted instantly — there is no historical record of employee movement to subpoena or grieve.
VP Government Affairs / Compliance
Champion
Safience reads as a directive response, not a discretionary purchase. The platform aligns to TSA SD 1580/82, NIST OSAC TGD 0008 (Passive Live Facial Recognition), and FRA workforce-suitability expectations — with documentation ready for federal and state regulators.
Law-enforcement-sourced unique individuals — arrest, conviction, sex offender registration, active warrant, BOLO, and missing person records with complete chain of custody. Carriers never touch UMbRA directly; only RAC adjudication routes through it.
From sensor capture at a pedestrian gate to a human-verified, legally defensible alert delivered to your security operations center. No automated action. No autonomous decision.
Non-match images are purged instantly at the edge. No biometric database is created on your network. No video stream exists at any tier. Nothing to subpoena. Nothing to breach.
50,000+ new records per day from 18,000+ law enforcement agencies. Not quarterly batches. Not commercial aggregator lag. Booking-grade data — captured before court records and before commercial databases see it.
Open Networks. Known Threats. No Connection Between Them.
Eight Identity Gaps Every Class I Carrier Lives With Today
-
The Cargo Theft Gap
Organized crews — many transnational, several tied to designated foreign cartels — staged the 50%+ year-over-year jump in rail cargo theft. Your cameras record the offload. They cannot identify the offloaders. Without identity intelligence at the pedestrian thresholds adjacent to lot transfers and trans-loads, theft prevention is reactive by design.
-
The Trespasser u0026amp; Suicide Gap
793 fatalities and 524 injuries in 2025 — the largest cause of rail-related death in America. The majority of casualties involve individuals known to local law enforcement. RTIS/RVIS detects matches at pedestrian thresholds in seconds. RVIS rides on every sensor and cannot be disabled, scanning every entry for missing and endangered persons.
-
The Trespass-Order Gap
A judge issues a trespass order against a serial yard intruder. Your guards have a binder. The intruder walks in behind a contractor crew, in a different jacket, at shift change. Without identity verification at the pedestrian gate, the order is unenforceable.
-
The Background-Check Gap
Your pre-hire background check was clean — eleven months ago. Last week, the employee was arrested in another state. They show up for tomorrow’s shift with full hazmat-zone access. Annual checks cannot close this window; eMotive can, continuously, with a patented dual face-and-name match (US20240193715A1).
-
The Contractor u0026amp; Vendor Gap
Intermodal terminals, locomotive shops, and capital-project sites depend on a contractor population that turns over constantly. A six-week-old arrest report does not appear in your pre-engagement screen. eMotive monitors any defined roster — employees, volunteers, contractors, vendors — with explicit consent at onboarding.
-
The Insider Threat Gap
TSA's Surface Transportation Security Advisory Committee has issued multiple Insider Threat recommendations (most recently January 2025). Insiders move through credentialed doors by definition. Identity verification at the threshold, paired with continuous workforce monitoring, is the only architecture that addresses the credentialed insider directly.
-
The Hazmat Suitability Gap
Coal, crude, ethanol, ammonia, chlorine. The crews loading, switching, and inspecting these consists are the carrier's last line of defense. A workforce-suitability event between annual background cycles is invisible to your current program. eMotive closes the cycle to as little as one hour from booking.
-
The Missing u0026amp; Trafficked Persons Gap
Trafficking networks use the rail network the same way they use any transit network. RVIS — identical hardware to RTIS, always on, never disableable — scans every entry image against NCMEC, NamUs, BOLO, and Silver Alert designations. Your facility becomes a recovery point at no additional cost and no added hardware.
Precision Intelligence, Not Surveillance Theater
| Capability | Traditional Rail Security | Safience Intelligence Stack |
|---|---|---|
| Threat detection | Reactive — cameras record for post-incident review | Proactive — known threats identified at pedestrian entry in under 60 seconds |
| Trespass-order enforcement | Manual BOLO; relies on guard recognition and luck | Automated X-LST match at every sensor-equipped threshold |
| Cargo-theft response | Investigation begins after the offload is gone | Identity flagged at the pedestrian threshold; RAC-verified evidentiary record produced in real time |
| Workforce monitoring | Point-in-time background check at hire; annual at best | Continuous eMotive monitoring — encrypted alerts within hours of a new arrest |
| Data retention u0026amp; privacy | CCTV stored for weeks or months; BIPA / FCRA liability | Zero retention on non-match; nothing on the sensor to breach |
| Bandwidth u0026amp; OT footprint | 4K video streams; OT review nightmare | One ~30KB outbound JPEG per entry event; one-way transmitter |
| Human oversight | Automated alarms or unmonitored DVR | RAC human verification architecturally required at aankh.biometrica.com |
| TSA SD 1580/82 readiness | Compliance gaps must be patched after the directive | Designed to the directive — outbound-only, non-sensitive endpoint classification |
| BIPA / privacy posture | Each stored template is a potential statutory exposure | Non-match deleted instantly; carrier remains X-LST data controller |
| Union / labor compatibility | Monitoring tech triggers grievance procedures | Consent at onboarding; entry-threshold-only; no automated adverse action |
| Insurance u0026amp; risk transfer | Higher premiums; risk-pool penalties | Documented identity intelligence at entry — quantifiable risk reduction for Du0026amp;O and liability lines |
| Deployment speed | Months of OT review, network rework, and integration | Days — sensors deploy on existing pedestrian-gate infrastructure |
One Platform. Six Products. One Deployment.
Safience is a unified identity intelligence platform, not a stack of point solutions. A single sensor footprint at your pedestrian choke points simultaneously runs threat identification, victim recovery, operator-controlled watchlist enforcement, continuous workforce monitoring, the LE-only intelligence backbone, and investigative 1:1 comparison.
RTIS: Real-Time Threat Identification System
Rail facility threat detection
Edge sensors at yard gates, terminal pedestrian entries, dispatch centers, and shop doors identify known threats — active warrants, registered sex offenders, individuals on the carrier's X-LST — as they arrive. Every match is human-verified at the Safience RAC before any alert reaches your team. Non-match images are deleted at the edge.
Learn MoreRVIS: Real-Time Victim Identification System
Missing u0026amp; endangered person recovery
Identical hardware to RTIS. Always running. Cannot be disabled. Every scan also queries NCMEC, NamUs, BOLO, and Silver Alert designations. Your perimeter quietly becomes a recovery network for trafficking victims and vulnerable individuals at zero additional hardware cost.
Learn MoreX-LST: Operator-Controlled Watchlists
“X” is not an acronym. It means “any.”
Each carrier builds and manages its own compartmented lists: trespass-order subjects, terminated employees, banned contractors, VIP escort lists. X-LST data is opaque to Safience except at the RAC adjudication moment, isolated from UMbRA, and invisible to every other operator.
Learn MoreeMotive: Continuous Workforce Integrity Monitoring
Patented. US20240193715A1.
A database of people you have express written consent to monitor — employees, volunteers, contractors, or any defined group. eMotive checks that roster against every new arrest entering UMbRA using both face and name comparison. The dual-factor match is what solves the common-name problem. Encrypted alert to HR only. No automated adverse action. FCRA-compliant.
Learn MoreUMbRA: Unique Mission to Build Records and Arrests
56.7M+ verified identities
The intelligence backbone behind RTIS, RVIS, and eMotive. 55 million LE-sourced unique individuals from 18,000+ contributing agencies. Booking-grade data captured before court records and commercial aggregators see it. Updated hourly. Law enforcement access only — carriers interact only with their own X-LST.
Learn MoreQAPLA: Investigative 1:1 Facial Comparison
qapla.biometrica.com
A browser-based tool for comparing two images and determining whether they are the same person. Strictly 1:1, not 1:N. Uses a distinct algorithm from UMbRA's 1:N engine — two independent algorithms reaching the same result is evidentiary confirmation; one algorithm run twice is not.
Learn More60 Seconds from Capture to Informed Action
From edge capture to legally defensible action in under 60 seconds.
-
The Edge
0:00An RTIS/RVIS sensor at a pedestrian yard gate or terminal entry captures a single ~30KB cropped JPEG. No video. No audio. No retention. All non-matching images are deleted at the edge.
-
The Match
0:05The cropped image queries against the carrier’s X-LST and (for LE-eligible accounts) against UMbRA’s 56.7M+ records, in under five seconds.
-
The Human
0:15A trained RAC analyst at aankh.biometrica.com reviews and verifies the candidate match. No autonomous decisions. No automated alerts.
-
The Documentation
0:30QAPLA pulls associated records — warrant detail, booking imagery, registry status, case numbers — creating a documented, defensible basis for action.
-
The Action
0:60Rail police, contract security, or the SOC receives a verified, legally defensible alert with full context. The response is an informed intercept, not a guess.
Why Safience for Freight Rail
TSA SD 1580/82 Readiness
The current Surface Transportation Security Directive series — most recently 1580/82-2022-01C — extends cybersecurity expectations to OT and now classifies PTC as a Critical Cyber System. Safience's one-way outbound sensor architecture earns the lowest possible OT risk classification — outbound-only, non-sensitive, low-bandwidth — designed to clear your CISO's review on the first pass.
Exceeds NIST OSAC TGD 0008
Safience was developed in parallel with — and partially informed — the NIST OSAC framework for Passive Live Facial Recognition (January 2024). Non-match deletion is a hard architectural constraint, not a configurable feature. No video exists at any system tier. Third-party algorithm providers receive zero identity data. Your General Counsel can reference TGD 0008 line-by-line and verify Safience exceeds every requirement.
FRA Safety-Culture Alignment
The FRA's expanded safety-culture framework now scores workforce suitability and access control. RTIS/RVIS produces the audit trail. eMotive produces the continuous workforce-suitability record. Both feed your Safety Management System submission.
BIPA u0026amp; State Biometric-Privacy Posture
Instant non-match deletion is the core defense. No biometric identifier is stored within the statutory definition for non-match events. The carrier — not Safience — remains data controller for X-LST. eMotive's patented dual face-and-name match is the FCRA accuracy defense.
Union-Defensible by Design
Consent at onboarding for eMotive. Entry-threshold-only for RTIS/RVIS. No automated adverse action — RAC human verification is architecturally required. No historical record of employee movement to subpoena. Built to coexist with SMART-TD, BLET, Boilermakers, and Brotherhood agreements without forcing a CBA reopener.
Insurance u0026amp; Du0026amp;O Risk Transfer
Documented identity intelligence at entry is quantifiable risk reduction. Carriers can evidence proactive threat identification to underwriters writing property, cargo, Du0026amp;O, and excess liability lines — turning a security capital line into a measurable risk-transfer benefit.
Deployment Speed
Sensors deploy on existing pedestrian-gate infrastructure. ~30KB outbound payloads require negligible bandwidth. No server rooms, no VMS rip-and-replace, no months of OT cutover. Pilot deployments go live in days.
Force Multiplier for Rail Police
BNSF Police, UP Special Agents, NS Police, CSX Police, and short-line rail-police organizations gain real-time identity intelligence about the people walking past them. Institutional memory does not turn over with shift change.
See How Safience Secures Other Environments
The same identity intelligence platform protects critical infrastructure across every vertical Safience serves.
Healthcare
Hospitals use Safience to identify threats at ED and facility entry points without creating PHI
Hospitality
Hotels and resorts close the identity gap at lobbies, employee entrances, and back-of-house thresholds
Banking
Financial institutions protect branches, ATMs, and high-value facilities with the same platform
Airports
Two-world security across landside and airside operations
Higher Education
Campus security, Title IX enforcement, and missing-person recovery
Stadiums
Identity intelligence for large venues and event-driven crowds
All Industries
Critical infrastructure, campuses, and government facilities nationwide
Close the Identity Gap on Your Rail Network.
Schedule a localized Threat Mapping Assessment. We will walk one of your classification yards or intermodal terminals on paper, identify the pedestrian thresholds where identity intelligence reduces the most risk per dollar, and show you a deployment plan with no rip-and-replace and no OT cutover. Pilot deployments go live in days. No long-term commitment required.