Draft content — pending legal review.
Security
Security
How SkySuite protects customer data and flight evidence.
Data in transit
All traffic served over TLS 1.2+. Internal service-to-service calls authenticated. HSTS enforced on all subdomains.
Data at rest
Customer databases encrypted at rest. Media (photos, video, telemetry) sealed with SHA-256 on upload; any modification re-seals and logs the actor.
Access controls
Org-scoped tokens. Role-based access within an org. Admin actions audit-logged immutably.
Backups
Postgres daily snapshots retained 30 days; weekly snapshots retained 1 year; off-site replication to Cloudflare R2.
Vulnerability disclosure
Security issues: [email protected]. We respond within 24h. Safe-harbor for good-faith research.
Compliance roadmap
SOC 2 Type II in progress (target 2026 Q3). FedRAMP for public-safety customers on the roadmap. PLACEHOLDER — confirm with legal.