Level Access

Level Access has signed the Cloud Security Alliance (CSA) AI Trustworthy Pledge, joining organizations committed to advancing responsible and secure AI. The pledge represents a public commitment to developing and deploying AI systems in alignment with key principles, including safety, transparency, ethical accountability, and privacy protection. Level Access is publicly listed among participating organizations: View CSA AI Trustworthy Pledge signatories By participating in this initiative, Level Access reinforces its approach to AI governance—prioritizing secure design, responsible use, and protection of customer data. This milestone supports our broader commitment to transparency and trust as we continue to evolve AI-enabled capabilities across our products and services.

Level Access is not impacted by the recently disclosed npm supply chain incident involving malicious versions of the `axios` package (versions 1.14.1 and 0.30.4), which Datadog reported may affect certain Datadog open‑source CI/CD and serverless tooling. After internal review, we confirm that Level Access does not use the affected Datadog packages or installation methods associated with this incident. We have additionally scanned our environment and found no instances of the malicious `axios` versions or related indicators of compromise. Based on our assessment, there is no impact to Level Access systems, products, or customer data. No mitigation actions are required at this time. As part of our ongoing security program, we continue to monitor updates from Datadog and relevant security intelligence sources and will take appropriate action should the situation change. If you have any questions or concerns, please be in touch.

Level Access is not impacted by the recently disclosed vulnerabilities affecting Cisco Catalyst SD‑WAN systems (CVE‑2026‑20127 and CVE‑2022‑20775). After internal review, we confirm that Level Access does not use Cisco Catalyst SD‑WAN or other Cisco SD‑WAN solutions in our environment. Our infrastructure is hosted in Amazon Web Services (AWS) and managed exclusively through AWS‑native services. Level Access does not manage or operate physical network devices or SD‑WAN controllers. As a result, these vulnerabilities are not applicable, and no mitigation actions are required. As part of our ongoing security program, we continue to monitor relevant security advisories and threat intelligence to proactively assess potential risks. If you have any questions or concerns, please be in touch.

Level Access is not impacted by the recently disclosed critical vulnerability affecting certain Fortinet products (CVE‑2026‑24858). After internal review, we confirm that Level Access does not use Fortinet products in our environment. Therefore, no mitigation actions are required. We will continue to monitor advisories from FortiGuard Labs and relevant security intelligence sources as part of our ongoing commitment to proactive risk management. If you have any questions or concerns, please be in touch.

Level Access is not impacted by the recently disclosed critical vulnerability in Apache Tika (CVE-2025-66516). After internal review, we confirm that Level Access does not use Apache Tika in our environment. Therefore, no mitigation actions are required. If you have any questions or concerns, please be in touch.