Security
Security at CloudAccess Key
CloudAccess Key is an access control platform: it decides who can open which doors. We treat the security of the platform, the cloud infrastructure it runs on, and the controllers and readers it manages as a core responsibility of company leadership.
Accountability
Security Leadership
Johnathan Penberthy, co-founder of CloudAccess Key, is the company's named Security Leader. He is accountable for the company's security program, including:
- Security of the CloudAccess Key platform, its cloud infrastructure, and connected access control hardware.
- Receiving, triaging, and acting on security and misuse reports.
- Coordinating incident response and notifying affected customers and partners.
- Overseeing who has access to company systems and how that access is granted and reviewed.
Johnathan has more than 18 years of experience in network security, server and computer networking, and telecommunications, including managing regional network security and WAN infrastructure and serving as CTO and CEO of fiber and fixed-wireless broadband providers. See his full background on our About page.
Platform security
How the system is protected
- Encryption
- SSL/TLS secures data from the reader to the cloud.
- Offline-safe by design
- Access decisions are made at the door, so a network outage never opens or locks doors unexpectedly.
- Role-based permissions
- Admins, managers and staff can only see and change what their role allows.
- Access event logs
- Every card scan, denial and door event is recorded per door.
- Tamper detection
- Alerts fire if a device is compromised or disconnected.
- Backups & availability
- Automatic encrypted backups and redundant hosting with 99.9% uptime.
- UL 294 compliant
- Installed to the conditions of UL 294, the safety standard for access control system units.
- Isolated door control
- Door I/O runs on a dedicated control processor, separate from the node that talks to the cloud.
- Managed updates
- Controllers and firmware are kept current remotely, without a site visit.
Disclosure
Reporting a Security Issue
If you believe you have found a security vulnerability in CloudAccess Key, or suspect misuse of the platform, please email our security team. Include enough detail for us to reproduce or investigate the issue, and please give us a reasonable opportunity to fix it before disclosing it publicly.
For product support or account questions, please contact Support instead.