Sapphire PCN · Private Cellular Network

Your private 5G cellular network.

Dedicated private 5G/LTE infrastructure for your installation, designed and operated by DHI. Connect authorized people and devices for data, voice and IoT, with access and traffic policies under your control.

Private
Dedicated site coverage
Authorized
SIM & eSIM access
Multi-service
Data · Voice · IoT
DHI
End-to-end operator
Sapphire PCN · Exchange approved

Sapphire PCN is approved by The Exchange.

01 — PRIVATE CELLULAR

Your site. Your network. Your rules.

PCN means Private Cellular Network. Sapphire brings dedicated radios, a cellular core and access controls to your installation, so you can define coverage and authorize devices without relying on a public mobile operator’s local network.

How it connectsPrivate access. DHI-operated infrastructure.

Your private cellular network · Authorized access only

01 — Your devicesData · Voice · IoT

Approved SIMs and eSIMs connect compatible devices to your network.

02 — Your infrastructureDedicated radios + Sapphire core

Private LTE/5G coverage, device authentication and traffic policies operated by DHI.

03 — Beyond the siteSelected backhaul

Fiber, satellite or a hybrid design connects the private network to external services where required.

Private radio access operates independently of a public mobile operator’s local coverage. Voice services, device support and traffic routing follow the agreed network configuration.

Data

Connect people and operations

Provide private cellular access for approved phones, computers, hotspots and operational applications across the site.

Voice

Support team communications

Carry voice services over your private network, configured for compatible devices and your communication requirements.

IoT

Connect devices and equipment

Bring cameras, sensors and other approved connected equipment into defined service groups with their own access and traffic policies.

Controlled access

Only authorized devices can join. A nearby phone cannot simply register on your private network. DHI provisions and manages the SIM/eSIM credentials and policies used to grant, change or revoke access.

02 — SECURITY

Control the network. Govern access.

Direct control over who connects, how traffic flows, and what stays local — physically separate from DoD mission systems.

Governing principle

Separation by architecture, not by policy memo.

Personal traffic never routes across NIPR, SIPR, or other mission systems. Access is identity-based and centrally revocable; traffic handling is U.S.-anchored or governed under agreed terms.

A1 Identity-based access

Users and devices authenticate through SIM or eSIM credentials. Access can be granted, denied, changed, or revoked centrally.

A2 Segmentation

Distinct APNs, slices, or logical traffic domains for soldiers, families, Exchange operations, MWR, USO, contractors, and IoT — each with its own policy.

A3 Architectural separation

Physically and logically separate from DoD mission networks. Personal traffic never routes across NIPR, SIPR, or other mission systems.

A4 Traffic governance

Full operator visibility into who is connecting, their service class, and how resources are being used — a more disciplined posture than public-only.

A5 Local traffic handling

Traffic can be U.S.-anchored or managed under agreed governance. The operator controls what stays local and what routes through controlled gateways.

03 — ARCHITECTURE

The platform, layer by layer

Purpose-built from the radio equipment to the helpdesk.

L1Outdoor layerTowers, sector radios, small cells, and controlled outdoor coverage for parking areas, common spaces, approaches, and exterior zones.
L2Indoor layerIndoor radios or access points for Exchange retail, MWR, lodging, barracks, housing, and other buildings.
L3Control layerAuthentication, SIM/eSIM policy, device identity, service classes, segmentation, traffic steering, and operational visibility.
L4User layerPersonal phones, tablets, Sapphire portable hotspots, Sapphire In-Room units, POS terminals, and staff devices.
L5Operations layerMonitoring, alarms, service assurance, helpdesk visibility, and lifecycle support through the managed service model.
BACKHAUL

Not dependent on a single path

Fiber for capacity, satellite for resilience and reach — hybrid where continuity matters most.

Option 01

Fiber

Primary high-capacity backhaul for main sites where terrestrial infrastructure is available and stable.

Option 02

Satellite

Rapid deployment, augmentation, or remote-site option where terrestrial links are limited or resilience is needed quickly.

Option 03

Fiber + Satellite

Hybrid design for resilience, graceful degradation, and service continuity if one path is constrained.

Satellite backhaul dish supporting a Sapphire PCN deploymentHybrid backhaul — satellite augmentation
OPTIONAL MOBILITY

Service beyond the private network

Private site access and off-site mobility are different services. Where configured, the same customer app can also support public-carrier plans and international roaming outside the installation.

Beyond the site

Private on site. Carrier service off site. Off-site coverage uses supported public operators and destination plans; profile selection and availability follow the deployment configuration.

04 — DEPLOYMENT

Designed around the installation

Five phases, one accountable operator — from site survey through lifecycle support.

PHASE 01

Site survey & design

Outdoor zones, indoor buildings, RF conditions, power, backhaul, and device requirements.

PHASE 02

Radio installation

Towers, sector radios, small cells, or indoor access points — per the site design.

PHASE 03

Core & policy activation

Activate the agreed core architecture, authentication, segmentation and traffic routing.

PHASE 04

User enablement

SIM/eSIM profiles, app credentials, and device options for barracks, lodging, and offices.

PHASE 05

Operations & support

Performance, alarms, utilization, and customer support through one managed service model.

Sapphire Flyaway Kit transit case
NEED IT IN HOURS, NOT WEEKS?

Sapphire Flyaway Kit

The same platform — governance, policy engine, SIM identity, app — in three portable cases. Operational the same day.

Flyaway Kit specifications
05 — GOVERNANCE

One accountable operator

DHI designs, deploys, monitors, supports, and manages the full Sapphire PCN lifecycle — a single accountable partner from site survey to daily operations. No finger-pointing between vendors.

DHI technician servicing a Sapphire PCN base-station equipment cabinetManaged service — 24/7 monitoring & lifecycle support
Approved by The Exchange

Request an installation briefing

Evaluating private cellular — permanent infrastructure or rapid-deploy? An engineer will walk your team through architecture, governance, and the deployment path for your site.

Sapphire PCN — Your Private 5G & LTE Cellular Network