One network platform for every train, station and crew member you run
A captive portal that feeds your CRM, passenger surveys at sign-in, identity-based WiFi for crew and station staff, and a private key for every onboard device. Layered on top of the access points and backhaul you already have.
- Captive portal with CRM integration
- Passenger micro-surveys
- Cloud RADIUS for crew and staff
- xPSK for onboard and station devices

Your WiFi carries millions of passengers. Most of them leave no trace in your CRM.
Train operators run some of the busiest networks in the country across rolling stock, stations and depots, usually with a small network team and a separate supplier for each part. The gap tends to show up in four places.
A typical operator today
- A free WiFi page that collects email addresses and sends them nowhere useful
- Passenger insight that depends on occasional, expensive fieldwork
- Crew, station staff and contractors sharing one WiFi password
- Card terminals, screens and cameras on the same key as everything else
With Purple
- Every sign-up checked against your CRM and preference center in real time, as Avanti West Coast does
- Short surveys at sign-in: c2c gathered 5,066 responses in six days
- Everyone signs in with their own work account, and leavers lose access automatically
- Every device gets its own key and VLAN, kept apart from passengers
Passengers, insight, people and devices, each on the right network
Four networks that usually mean four suppliers, run from a single pane of glass by the team you already have.
Sign-in that feeds your CRM
A branded captive portal onboard and at stations, with consent and verified emails sent straight to your CRM.
02 · InsightAsk passengers while they travel
Micro-surveys at sign-in, switched on and off automatically, by route, station or time of day.
03 · Crew and staffSign in with the work account
Identity-based WiFi through Microsoft Entra ID, Okta or Google Workspace. Joiners connect, leavers are revoked.
04 · DevicesA private key for every device
xPSK gives catering terminals, screens, cameras and ticket machines their own key and VLAN.
Turn every WiFi sign-in into a record your CRM can use
Passengers sign in on the train and at the station, and Purple sends consented, verified data to your CRM and marketing preference center. Avanti West Coast runs a live API check at sign-in: passengers with no marketing preference on file see the opt-in, those who already have one do not, and each record is matched to the service they are traveling on.
- Avanti West Coast gains 80,000 marketable records a month, a 1,200% increase in marketable records reaching its CRM
- Verify checks each email address in real time, so only valid records reach your CRM
- CCPA/CPRA consent with a full audit trail, sent to your CRM through 400+ data connectors
- Use the data to promote your loyalty scheme and direct bookings, as Avanti West Coast does with Club Avanti
Purple does not replace your onboard connectivity. Your routers and backhaul bring the internet to the train, and Purple runs the sign-in, data and network policy on top.
Explore guest WiFi
PassengersAsk passengers how they feel while they are still on board
Micro-surveys sit inside the WiFi sign-in, so you hear from passengers during the trip rather than weeks later. c2c ran three surveys covering traveler profiles, onboard safety and station safety, each switched on and off automatically after two days. The results showed 42% of travelers felt less safe after 7pm, which shaped plans for more visible staff late in the evening.
- c2c gathered 5,066 responses in six days, at an average 35% response rate
- LogicFlow switches each survey on and off, and shows it only to the passengers you choose
- Separate surveys for onboard and station experience, run side by side
- Results go straight to your insight and operations teams, with no fieldwork to commission
SurveysOne login for crew, station staff and contractors
Conductors, catering crew, station teams and depot staff connect with the account they already use. Purple syncs with Microsoft Entra ID, Okta, Google Workspace and JumpCloud over SCIM, and group membership decides which network and policy each person gets.
- Leavers are revoked automatically when their account is disabled
- Crew, station staff and contractors land on separate VLANs with their own rules
- Company tablets and laptops get EAP-TLS certificates through Intune, Jamf, Kandji or Hexnode
- Cloud RADIUS with a 99.9% uptime SLA and no on-premise RADIUS server to run
Crew and staffA private key for everything that cannot sign in
Catering trolley card terminals, passenger information screens, cameras, ticket machines and sensors cannot use a username and password. xPSK gives each one its own key and its own VLAN, so a leaked key affects one device, not the whole fleet.
- Keep on-board retail card terminals off the passenger network, on their own VLAN
- MAC binding ties each key to the first device that uses it
- Revoke a single key without re-keying every device on the train
- No per-device license and no cap on devices per key
xPSKWhat it takes to build it yourself, and what it takes with Purple
Everything a rail network team would otherwise build, integrate and maintain, delivered as a service on the hardware you have.

What operators get from the WiFi they already run
Avanti West Coast uses passenger sign-ins to grow the marketable records in its CRM. c2c uses short surveys at sign-in to understand how safe travelers feel, onboard and at stations.
Figures from Purple customer results: Avanti West Coast and c2c.

Free brochure
Take this page into your next budget meeting
Everything on this page as an eight-page PDF brochure, ready to share with the people who sign off your network spend.
Get the brochure
Your name and email is all we need. The download appears straight away.
Live without new hardware
- 1
Connect your systems
Link your CRM and preference center, and Microsoft Entra ID, Okta or Google Workspace for crew and staff.
- 2
Point your access points at Purple
We configure the passenger, staff and device networks on the onboard and station access points you already own.
- 3
Roll out fleet by fleet
Switch on one fleet or station group at a time with our onboarding team, starting wherever the need is greatest.
See your trains and stations on one network platform
Tell us about your fleet, stations and systems, and we will show you how passenger, survey, staff and device access would work on your hardware.
- Works with Cisco Meraki, HPE Aruba, Ruckus, Juniper Mist, Ubiquiti UniFi, Cambium, Extreme and Fortinet
- Integrates with your CRM and marketing platforms through 400+ data connectors
- ISO 27001 certified, CCPA/CPRA compliant, US RADIUS region
Book a rail demo
A 30-minute call with someone who knows rail networks.
Train WiFi questions, answered
What rail IT, commercial and customer experience teams ask us most
Do you provide the onboard internet connection?
No. Purple is not a connectivity provider. Your onboard routers and backhaul bring the internet to the train. Purple runs the captive portal, identity, data and network policy on top, on the access points you already have.
Do we need to replace our access points?
No. Purple works with Cisco Meraki, HPE Aruba, Ruckus, Juniper Mist, Ubiquiti UniFi, Cambium, Extreme and Fortinet, and with any onboard or station hardware that supports a captive portal or RADIUS. There is no on-premise RADIUS server to install.
How does passenger data reach our CRM?
Through 400+ data connectors or a custom integration. Avanti West Coast checks each sign-in against its CRM and marketing preference center with a live API call, so only passengers without a preference see the opt-in, and Verify confirms each email address in real time.
Can we survey passengers on specific routes or at specific stations?
Yes. Micro-surveys sit inside the WiFi sign-in, and LogicFlow decides who sees which survey and when it switches on and off. c2c ran separate onboard and station safety surveys this way and gathered 5,066 responses in six days.
What happens when a member of crew or station staff leaves?
When their account is disabled in Microsoft Entra ID, Okta or Google Workspace, SCIM revokes their WiFi access automatically. They cannot reconnect, and there is no shared password to change.
How do card terminals, screens and cameras connect?
With xPSK. Each device gets its own key and VLAN, bound to the first device that uses it, so on-board retail terminals stay apart from passenger traffic. You can revoke one key without touching any other device.
Where is our data held?
Purple has RADIUS regions in the US, EU, and UK, is ISO 27001 certified and CCPA/CPRA compliant, and has had zero data breaches since 2012.
Featured products for Trains
The Purple platform pieces most Trains venues deploy on day one.
Guest WiFi platform for Trains
Captive Portals, analytics, and marketing automation as a cloud overlay.
Captive Portal software for Trains
Modern Captive Portals with social login, SSO, and marketing consent.
Passwordless WiFi for Trains
EAP-TLS, iPSK, and Passpoint - replace shared passwords with identity.
Recommended solution for Trains
WiFi for IT & network teams. Cloud Captive Portals, RADIUS, and analytics layered on top of Cisco, Aruba, Juniper Mist, Meraki, and Ubiquiti.
See WiFi for IT & network teams →Related pillar guides
The topical pillars most relevant to Trains. Each guide is the canonical hub for that area of the platform.
Guest WiFi
The master guide to delivering guest WiFi: models, layers, compliance, and how to choose a provider.
Captive portal
How the WiFi sign-in works, the eight authentication methods, and the join surface technical detail.
WiFi marketing
Turn captive portal sign-ins into consented first-party data, activated through your CRM and ESP.
Further reading for Trains
Technical guides, articles and customer stories for teams running WiFi in this sector.
Guides for Trains
- Train WiFi: The Complete Guide for Rail Operators and Passengers
- Is Train WiFi Safe? What Rail Passengers Need to Know
- Railway WiFi Network: How Operators Are Delivering Connectivity at Speed
- Passenger WiFi: How Transit Operators Use WiFi Data to Understand Journeys
- Airport WiFi Security: How to Protect Passengers on Public Networks
- Guest WiFi for Airports: Roaming, Transit, and Throughput
Related industries
Other verticals running on the same Purple platform.
Speak to an expert
Tell us about your venues and we'll show you how Purple fits.