Skip to main content
WiFi for train operators and stations

One network platform for every train, station and crew member you run

A captive portal that feeds your CRM, passenger surveys at sign-in, identity-based WiFi for crew and station staff, and a private key for every onboard device. Layered on top of the access points and backhaul you already have.

  • Captive portal with CRM integration
  • Passenger micro-surveys
  • Cloud RADIUS for crew and staff
  • xPSK for onboard and station devices
Passengers using phones and laptops at the tables of a bright, modern train carriage
Welcome aboardPreference already on file, no sign-up prompt shown
Crew tablet connectedOwn key, own VLAN, apart from passengers
Trusted by rail and transport operatorsAvanti West Coastc2cManchester Airport GroupAGS AirportsBrussels South Charleroi AirportPalm Beach International Airport
The gap

Your WiFi carries millions of passengers. Most of them leave no trace in your CRM.

Train operators run some of the busiest networks in the country across rolling stock, stations and depots, usually with a small network team and a separate supplier for each part. The gap tends to show up in four places.

A typical operator today

  • A free WiFi page that collects email addresses and sends them nowhere useful
  • Passenger insight that depends on occasional, expensive fieldwork
  • Crew, station staff and contractors sharing one WiFi password
  • Card terminals, screens and cameras on the same key as everything else

With Purple

  • Every sign-up checked against your CRM and preference center in real time, as Avanti West Coast does
  • Short surveys at sign-in: c2c gathered 5,066 responses in six days
  • Everyone signs in with their own work account, and leavers lose access automatically
  • Every device gets its own key and VLAN, kept apart from passengers
One platform, four networks

Passengers, insight, people and devices, each on the right network

Four networks that usually mean four suppliers, run from a single pane of glass by the team you already have.

Passengers onboard and at stations

Turn every WiFi sign-in into a record your CRM can use

Passengers sign in on the train and at the station, and Purple sends consented, verified data to your CRM and marketing preference center. Avanti West Coast runs a live API check at sign-in: passengers with no marketing preference on file see the opt-in, those who already have one do not, and each record is matched to the service they are traveling on.

  • Avanti West Coast gains 80,000 marketable records a month, a 1,200% increase in marketable records reaching its CRM
  • Verify checks each email address in real time, so only valid records reach your CRM
  • CCPA/CPRA consent with a full audit trail, sent to your CRM through 400+ data connectors
  • Use the data to promote your loyalty scheme and direct bookings, as Avanti West Coast does with Club Avanti

Purple does not replace your onboard connectivity. Your routers and backhaul bring the internet to the train, and Purple runs the sign-in, data and network policy on top.

Explore guest WiFi
A passenger signing in to train WiFi on a phone at a carriage table, coffee and a small bag beside themPassengers
Passenger surveys and insight

Ask passengers how they feel while they are still on board

Micro-surveys sit inside the WiFi sign-in, so you hear from passengers during the trip rather than weeks later. c2c ran three surveys covering traveler profiles, onboard safety and station safety, each switched on and off automatically after two days. The results showed 42% of travelers felt less safe after 7pm, which shaped plans for more visible staff late in the evening.

  • c2c gathered 5,066 responses in six days, at an average 35% response rate
  • LogicFlow switches each survey on and off, and shows it only to the passengers you choose
  • Separate surveys for onboard and station experience, run side by side
  • Results go straight to your insight and operations teams, with no fieldwork to commission
Explore first-party WiFi data
A commuter answering a short survey on a phone while standing on a station platform in the early eveningSurveys
Crew and station staff

One login for crew, station staff and contractors

Conductors, catering crew, station teams and depot staff connect with the account they already use. Purple syncs with Microsoft Entra ID, Okta, Google Workspace and JumpCloud over SCIM, and group membership decides which network and policy each person gets.

  • Leavers are revoked automatically when their account is disabled
  • Crew, station staff and contractors land on separate VLANs with their own rules
  • Company tablets and laptops get EAP-TLS certificates through Intune, Jamf, Kandji or Hexnode
  • Cloud RADIUS with a 99.9% uptime SLA and no on-premise RADIUS server to run
Explore staff WiFi
A station team member in a plain uniform using a tablet on a platform as a train arrivesCrew and staff
Onboard and station devices

A private key for everything that cannot sign in

Catering trolley card terminals, passenger information screens, cameras, ticket machines and sensors cannot use a username and password. xPSK gives each one its own key and its own VLAN, so a leaked key affects one device, not the whole fleet.

  • Keep on-board retail card terminals off the passenger network, on their own VLAN
  • MAC binding ties each key to the first device that uses it
  • Revoke a single key without re-keying every device on the train
  • No per-device license and no cap on devices per key
Explore xPSK
A catering trolley in a train aisle with a handheld card terminal, passengers seated on either sidexPSK
One platform instead of four suppliers

What it takes to build it yourself, and what it takes with Purple

Everything a rail network team would otherwise build, integrate and maintain, delivered as a service on the hardware you have.

What you need
Build it in-house
With Purple
Passenger sign-in
A basic splash page that stores emails in a spreadsheet
Branded captive portal with CCPA/CPRA consent and a full audit trail
CRM data
Manual exports, unverified emails and duplicate records
Live CRM and preference center integration, with real-time email checks
Passenger insight
Commissioned fieldwork, a few times a year
Micro-surveys at sign-in, switched on and off automatically
Crew and staff access
One shared password, or your own RADIUS servers and certificates
Synced from Entra ID, Okta or Google Workspace, on cloud RADIUS
Onboard and station devices
One shared key, changed every time it leaks
A private key and VLAN for each device
Hardware
Often tied to one vendor’s access control license
Cisco Meraki, HPE Aruba, Ruckus, Juniper Mist, Ubiquiti UniFi and more
A rail operator's commercial and network team reviewing a calm dashboard in an office overlooking the platforms
Results from UK rail

What operators get from the WiFi they already run

Avanti West Coast uses passenger sign-ins to grow the marketable records in its CRM. c2c uses short surveys at sign-in to understand how safe travelers feel, onboard and at stations.

1,200%
increase in marketable records reaching the Avanti West Coast CRM
80k
marketable records a month for Avanti West Coast
5,066
passenger survey responses for c2c in six days
35%
average survey response rate on c2c

Figures from Purple customer results: Avanti West Coast and c2c.

Cover of the Purple Trains WiFi brochure

Free brochure

Take this page into your next budget meeting

Everything on this page as an eight-page PDF brochure, ready to share with the people who sign off your network spend.

Get the brochure

Your name and email is all we need. The download appears straight away.

How it works

Live without new hardware

  1. 1

    Connect your systems

    Link your CRM and preference center, and Microsoft Entra ID, Okta or Google Workspace for crew and staff.

  2. 2

    Point your access points at Purple

    We configure the passenger, staff and device networks on the onboard and station access points you already own.

  3. 3

    Roll out fleet by fleet

    Switch on one fleet or station group at a time with our onboarding team, starting wherever the need is greatest.

Talk to our transport team

See your trains and stations on one network platform

Tell us about your fleet, stations and systems, and we will show you how passenger, survey, staff and device access would work on your hardware.

  • Works with Cisco Meraki, HPE Aruba, Ruckus, Juniper Mist, Ubiquiti UniFi, Cambium, Extreme and Fortinet
  • Integrates with your CRM and marketing platforms through 400+ data connectors
  • ISO 27001 certified, CCPA/CPRA compliant, US RADIUS region

Book a rail demo

A 30-minute call with someone who knows rail networks.

Train WiFi questions, answered

What rail IT, commercial and customer experience teams ask us most

Do you provide the onboard internet connection?

No. Purple is not a connectivity provider. Your onboard routers and backhaul bring the internet to the train. Purple runs the captive portal, identity, data and network policy on top, on the access points you already have.

Do we need to replace our access points?

No. Purple works with Cisco Meraki, HPE Aruba, Ruckus, Juniper Mist, Ubiquiti UniFi, Cambium, Extreme and Fortinet, and with any onboard or station hardware that supports a captive portal or RADIUS. There is no on-premise RADIUS server to install.

How does passenger data reach our CRM?

Through 400+ data connectors or a custom integration. Avanti West Coast checks each sign-in against its CRM and marketing preference center with a live API call, so only passengers without a preference see the opt-in, and Verify confirms each email address in real time.

Can we survey passengers on specific routes or at specific stations?

Yes. Micro-surveys sit inside the WiFi sign-in, and LogicFlow decides who sees which survey and when it switches on and off. c2c ran separate onboard and station safety surveys this way and gathered 5,066 responses in six days.

What happens when a member of crew or station staff leaves?

When their account is disabled in Microsoft Entra ID, Okta or Google Workspace, SCIM revokes their WiFi access automatically. They cannot reconnect, and there is no shared password to change.

How do card terminals, screens and cameras connect?

With xPSK. Each device gets its own key and VLAN, bound to the first device that uses it, so on-board retail terminals stay apart from passenger traffic. You can revoke one key without touching any other device.

Where is our data held?

Purple has RADIUS regions in the US, EU, and UK, is ISO 27001 certified and CCPA/CPRA compliant, and has had zero data breaches since 2012.

Recommended solution for Trains

WiFi for IT & network teams. Cloud Captive Portals, RADIUS, and analytics layered on top of Cisco, Aruba, Juniper Mist, Meraki, and Ubiquiti.

See WiFi for IT & network teams →

Speak to an expert

Tell us about your venues and we'll show you how Purple fits.