There is no such thing as a CJIS certification. Please see this white paper released by Symantec in 2014, which quotes a CJIS security analyst:

"Please be aware there is no CJIS certification process with regard to the CJIS Security Policy. The only certifications related to CJIS that I know of are in regard to facial recognition and finger print capture standards. Those do not have any relation to the CJIS Security Policy. … We do not certify, nor endorse any product, solution, or vendor."

Any vendor that says their product or service is "CJIS certified" is... how shall I put this... stretching the truth? 

That said, Laserfiche has been certified for compliance with other security standards, most notably those put forth by the Department of Defense (i.e. 5015.2). Laserfiche also says version 10 and onwards is being tested against FIPS-enabled servers as part of the release process. So essentially it comes down to this: as long as you follow industry best-practices during deployment, any data you store in Laserfiche will be extremely safe. That's why it is the dominant ECM solution in government.