Skip to main content

CISO as a Service · Compliance as a Service

Get compliant.
Stay secure.

DataFence is your security function: the appointed CISO, the privacy lead, the certification programme manager and the first call when something goes wrong. We take you from "we need to be compliant" to a certified, audited, operating security programme, and we keep it running.

ISO 27001 · SOC 2 Type II · GDPR · Israeli Privacy Law · ISO 42001, delivered in Israel, the EU, the UK and the US.

Trusted by organisations across finance, healthcare, SaaS, education and critical infrastructure

  • The Academic College of Tel Aviv–Yaffo
  • Aminolab
  • Azrieli College of Engineering, Jerusalem
  • BDM Healthware
  • Capitalise.ai
  • Cellcom
  • DealHub
  • DirectCom
  • eToro
  • Coface BDI
  • Sports Channel
  • Healthee
  • IBI Capital
  • Justt
  • K2view
  • Leapwork
  • Medinol
  • Meitav
  • Mor Inside
  • Mor Research Applications
  • The Pension Clearing House
  • Qlik
  • Questar
  • R.G.E Group
  • Snappy
  • Source Defense
  • Spuntech
years of security and compliance experience
0+
organisations engaged since inception
0+
active client programmes
0
SOC monitoring and incident response
24/7

When organisations call us

  1. 01

    A deadline.

    A customer, tender or investor requires ISO 27001 or SOC 2, often with a hard date attached.

  2. 02

    A question of ownership.

    The board, a regulator or an enterprise customer asks who is accountable for security and privacy.

  3. 03

    A moment of pressure.

    An incident, a due-diligence review or a security questionnaire needs a credible answer now.

Whatever brought you here, let's talk

What we do

One accountable team. The whole security lifecycle.

Combine our services into a single programme, or start with the one you need most.

A

Security leadership

Senior security and privacy leadership without a full-time hire.

B

Certification & compliance

From gap analysis to certificate, and every surveillance audit after it.

C

Risk & assurance

Know where you are exposed and fix what matters first.

D

Operations & resilience

Detect, respond and recover, around the clock.

View all services

Why DataFence

Why DataFence

Most organisations don't need another report. They need someone accountable for getting security done. That is how we work.

  • Hands-on, not advisory-only.

    We write the policies, build the evidence and sit in the audit room with you, so your engineers stay focused on the product.

  • An auditor's perspective.

    Our CEO is a senior ISO 27001 lead auditor for the Standards Institution of Israel. We prepare you for the audit as it will actually be conducted.

  • One accountable team, the whole lifecycle.

    Certification, virtual CISO, DPO, monitoring, testing and incident response under one contract and one point of contact.

  • Evidence collected once, used twice.

    We map one control set to ISO 27001, SOC 2 and, increasingly, ISO/IEC 42001, so the same evidence serves every framework you need.

  • Programme-managed and transparent.

    Every engagement runs on a live task board with named owners, due dates and status. You see progress weekly, not at the end.

  • Cost-effective and predictable.

    Senior expertise without the cost of a full-time executive hire, a clearly defined scope, and a tailored offer within 24 hours of our first conversation.

  • We stay after the certificate.

    Surveillance audits, management reviews, vendor assessments and the next framework. The programme keeps running, and so do we.

New

Govern your AI before your customers ask.

Enterprise buyers now ask for AI assurance in security reviews, and EU AI Act obligations are phasing in. ISO/IEC 42001 is the certifiable standard for AI management, and we build it on top of the ISMS you already run.

Explore AI governance
  • AI inventory and classification
  • AI risk and impact assessments
  • AI red teaming and LLM penetration testing (OWASP Top 10 for LLM Applications)
  • ISO/IEC 42001 certification escort

How we work

Six steps from first call to certificate

  1. 1

    Free initial conversation.

    By phone or on site, we assess your requirements and share first insights.

  2. 2

    Tailored offer.

    Within 24 hours, a detailed document with full explanations and a cost-effective budget.

  3. 3

    Project kickstart.

    We cover every phase and agree timeframes, owners and expectations.

  4. 4

    Implementation.

    Hands-on delivery: policies, controls, evidence and remediation.

  5. 5

    Continuous support.

    Our full attention throughout: answers, advice and follow-ups.

  6. 6

    Completion and beyond.

    We hand over all results, materials and documentation, and we can run your surveillance cycle.

Predictable. Transparent. Cost-effective.

See how we work

Founder note

The auditor's view, on your side

Since 2018, our founder and CEO Salo Pomerantz has served as a senior ISO 27001 lead auditor for the Standards Institution of Israel (SII), with around 600 ISO 27001 audits conducted. Since 2007 he has served as the appointed information security officer and virtual CISO for organisations across finance, defence, fintech, health-tech, academia and the non-profit sector.

Salomon (Salo) PomerantzFounder & CEO

Meet DataFence

Ready for your free consultation?

Tell us about your security and compliance goals. Within 24 hours of our first conversation, we'll send you a detailed, cost-effective offer tailored to your needs.