Security

Security Policies

Security Training & Awareness

Security Training & Awareness

Security is built into everything we do at Dalet Access. Our security program protects our systems, our customers’ data, and the networks communities depend on, guided by recognized frameworks including the NIST Cybersecurity Framework.

Network & Data Protection
Encryption, access controls, threat detection, and continuous monitoring across our infrastructure.

Endpoint & Device Security
Every device that connects to our infrastructure, internal or external, must meet our security and compliance requirements.

Incident Response & Risk Management
A documented incident response plan with clear escalation procedures, investigation steps, and timely communication with affected clients.

Personnel & Access Controls
Background checks, regular security training, and role-based access, so people can reach only the systems their work requires.

Compliance & Audit Readiness
Our policies are reviewed regularly against industry frameworks. We support clients with HIPAA, PCI-DSS, and other regulatory requirements as part of their network design.

Security Training & Awareness

Security Training & Awareness

Security Training & Awareness

Strong security starts with people. Everyone at Dalet Access, from leadership to field staff, completes required security training each year, covering current threats, compliance requirements, and safe work practices.

Training continues throughout the year with:

  • Quarterly phishing simulations and response drills
  • Monthly security tips and threat alerts
  • Role-based workshops for staff with elevated access
  • On-demand guidance from our AI-powered security assistant

The result is a team prepared to recognize and respond to security risks before they become incidents.

Data Center Security

Report a Security Issue

Report a Security Issue

Dalet Access does not operate its own data centers. We host our services with leading cloud infrastructure providers, which gives us the physical safeguards, redundancy, and 24/7 security monitoring of top-tier facilities.

Every hosting provider we work with must maintain:

  • SOC 2 Type II reports, audited annually
  • ISO/IEC 27001 certification for information security management
  • Or an equivalent recognized framework for data privacy, integrity, and operational security

Edge infrastructure. Equipment we deploy in the field, such as PINN™ nodes and edge computing hardware, is designed with tamper-resistant enclosures, encrypted storage, secure remote management, and continuous monitoring, so data stays protected outside the data center too.

Report a Security Issue

Report a Security Issue

Report a Security Issue

If you believe you’ve found a security vulnerability in any Dalet Access system or service, please contact us at info@daletaccess.com. Include as much detail as you can, and avoid accessing or changing data that isn’t yours. We’ll acknowledge your report promptly, investigate, and keep you informed as we work to resolve it.

Data Privacy

We believe connectivity should never come at the cost of privacy. Dalet Access collects only the data needed to deliver, secure, and improve our services, and we never sell personal information.


What we collect
Basic account and contact information for customers, plus technical data needed to run the network, such as device identifiers, connection logs, and performance metrics.


How we use it
To provide and secure our services, troubleshoot issues, meet legal obligations, and improve network performance. We do not use customer data for advertising.


Public Wi-Fi & OpenRoaming
When people connect to public networks we operate, we collect only what’s needed to authenticate devices and keep the network secure. We don’t monitor the content of anyone’s browsing.


Location data
Location-based services are designed to use anonymized or aggregated data wherever possible. Where individual location data is needed, it’s used only with clear notice and consent.


Customer ownership
Organizations that use our services own their data. We process it only to deliver the services they’ve contracted for, and we return or securely delete it when a contract ends.


Retention & protection
Data is kept only as long as needed for its purpose or as required by law, encrypted in transit and at rest, and accessible only to authorized personnel.


Your privacy rights
We honor applicable privacy rights, including those under the California Consumer Privacy Act (CCPA). We also support schools and public agencies with their own privacy obligations, such as student data protections.


Questions or requests? Contact us at info@daletaccess.com.