Enterprise-Grade Security

Security at Airbit

Your aviation maintenance data is mission-critical. We protect it with enterprise-grade infrastructure, encryption, and access controls — designed for regulated operations.

Infrastructure

Cloud Infrastructure & Backups

All Airbit data is stored on secure cloud infrastructure with automated daily backups. Your data is backed up every day and stored across multiple locations with geographic redundancy - ensuring your critical maintenance records are always safe and recoverable.

☁️

Secure Cloud Hosting

Your data is hosted on enterprise-grade cloud infrastructure with industry-leading security controls.

🔄

Daily Cloud Backups

Automated daily backups with geographic redundancy across multiple locations.

🏗️

ISO 27001 Facilities

Our hosting partners hold ISO 27001 and SOC 2 certifications.

Encryption

End-to-End Encryption

All data is encrypted in transit and at rest using industry-leading cryptographic standards. No plaintext storage — ever.

TLS 1.3 in Transit

All communications between your browser and our servers are protected with TLS 1.3 — the latest and most secure version of the Transport Layer Security protocol. Perfect forward secrecy is enforced on every connection.

AES-256 at Rest

All stored data — including maintenance records, compliance documents, and personal information — is encrypted at rest with AES-256 (256-bit Advanced Encryption Standard). Encryption keys are managed through a dedicated key management service with automatic rotation.

Access Control

Granular Permissions & Identity

Only authorised personnel access your data. Role-based controls and single sign-on integration ensure the right people see the right information.

Role-Based Access Control

Define granular permissions per user and team — administrator, quality manager, certifying engineer, read-only, and custom roles.

SSO / SAML Integration

Enterprise plans support Single Sign-On via SAML 2.0, integrating with Azure AD, Okta, Google Workspace, and other identity providers.

Full Audit Log

Every action is recorded — who did what, when, and on which record. Immutable audit trails meet EASA Part-M record-keeping requirements.

Compliance

Regulatory Alignment

Airbit is designed to meet the regulatory demands of aviation maintenance organisations worldwide. Our platform supports compliance with international aviation authorities including EASA, FAA, CAAI (Israel), and other national regulators, as well as global data protection standards.

GDPR

Full EU data protection compliance with DPA available on request.

EASA Part-M / Part-145

Workflows and record formats aligned with EASA continuing airworthiness and MRO requirements.

SOC 2 Type II

SOC 2 Type II certification currently in progress. Available upon completion to Enterprise customers.

ISO 27001

Our hosting infrastructure partners maintain ISO 27001 certifications.

Data Backup

Resilience & Recovery

Your maintenance records are backed up daily with a 30-day retention window. In the event of a disaster, your data can be restored within minutes.

Daily

Automated Backups

Incremental backups every day, full backups weekly. All encrypted with AES-256.

30 Days

Retention Window

Rolling 30-day point-in-time recovery. Restore to any backed-up snapshot on demand.

Immediate

Incident Response

Our team responds immediately to any incident and works continuously until full resolution is achieved.

Incident Response

24/7 Monitoring & Response

Our security operations centre monitors all systems around the clock. Automated alerting, predefined escalation procedures, and a documented incident response plan ensure rapid containment and resolution.

  • Real-time threat detection and anomaly monitoring
  • Documented incident response plan (IRP) with severity tiers
  • Customer notification within 72 hours per GDPR requirements
  • Post-incident reviews and published root cause analyses

Response Time Targets

Critical (P1)< 15 min
High (P2)< 1 hour
Medium (P3)< 4 hours
Low (P4)< 24 hours

Testing Schedule

Annual Penetration Test

Full external and internal penetration test by an independent third-party firm, performed annually.

Continuous Vulnerability Scanning

Automated vulnerability scanning runs weekly against all production systems.

Reports on Request

Executive summary and remediation report available to Enterprise customers under NDA.

Penetration Testing

Annual Independent Testing

We engage independent security firms to perform thorough penetration testing of the Airbit platform at least once per year. All findings are prioritised, tracked, and remediated according to severity.

Enterprise customers can request the latest penetration test executive summary under a non-disclosure agreement.

Security Inquiries

Questions About Security?

Need a full security review, a copy of our penetration test report, a custom Data Processing Agreement (DPA), or a completed security questionnaire? Our security team responds within one business day.

security@airbit.biz