Defense in Depth

Security Trust Center

Enterprise-Grade Technical & Organizational Measures (TOMs).

SOC 2 TYPE II ALIGNED | AES-256 | TLS 1.3

1. Professional Security Stance

DallaSystems applies "Military-Grade" security precision to legacy modernization. We understand that in the Energy and Logistics sectors, security breaches aren't just technical failures—they are business catastrophes.

2. The US-NZ Security Corridor

Encrypted Transit

All data shared between Dallas and our Wellington engineers travels through AES-256 encrypted IPSec VPN tunnels with TLS 1.3 encryption for any public API endpoints.

Identity Governance

We mandate Multi-Factor Authentication (MFA) and Hardware Security Keys (YubiKey) for all infrastructure access.

3. Data Protection Controls

Encryption at Rest: All client data stored within our dev/staging environments is encrypted using AES-256. Key management is handled through Hardware Security Modules (HSMs).

3.1 Access Control

We follow the Principle of Least Privilege (PoLP). No engineer has permanent access to Client production data unless explicitly required for a critical migration window.

4. Vulnerability Management

Our modernization process includes automated security scanning at every stage of the CI/CD pipeline. We utilize:

  • Static Analysis (SAST): Scanning all modernization code for vulnerabilities before deployment.
  • Dependency Auditing: Ensuring no vulnerable third-party libraries enter your modernized stack.
  • Annual Penetration Tests: We engage independent third-party security firms to probe our own infrastructure.

5. Responsible Disclosure

As part of our commitment to the Dallas tech community, we maintain a responsible disclosure program. If you believe you have found a security issue in any of our systems, please contact our Security SIRT team immediately.

Security Inquiries:
Email: legal@dallasystems.com
Emergency: +1-469-646-0997 (Priority 1)