Legal · September 2026

Security

AeroDesk Global is built on a security-first foundation. Whether you run a single module or the entire platform, your data is protected by enterprise-grade controls across every layer.

Enterprise-Grade Security

AES-256 encryption at rest, TLS 1.3 in transit, continuous monitoring across all modules.

Identity & Access

SSO, MFA, and role-based access control (RBAC) with module-level and sub-item granularity.

Infrastructure

Hosted on SOC 2-compliant cloud infrastructure with automated failover and geo-redundancy.

Compliance

Built to align with GDPR, DPDP Act, ISO 27001, and industry-specific aviation regulations.

Security Controls

Technical controls enforced across all modules, by default.

Encryption
AES-256 at rest · TLS 1.3 in transit
Authentication
MFA · SSO · Session timeouts
Authorization
RBAC · Module + sub-item permissions
Data Isolation
Multi-tenant with row-level security
Audit Logging
Every action tracked across modules
Backups
Automated daily · Point-in-time recovery
Network Security
WAF · DDoS protection · IP allowlisting
Data Residency
Regional storage · Configurable locations

Compliance & Certifications

SOC 2 Type IIAligned
ISO 27001Aligned
GDPRCompliant
DPDP Act (India)Compliant
Aviation Regulatory StandardsAligned

Incident Response

We maintain a documented incident response plan with defined severity levels, escalation paths, and customer notification SLAs. In the event of a security incident, affected customers are notified within our committed timeframe.

  • 24/7 monitoring and automated anomaly detection
  • Dedicated security team with on-call rotation
  • Post-incident review and public transparency reports

Vulnerability Disclosure

We welcome responsible disclosure of security vulnerabilities. If you believe you have found a vulnerability in any AeroDesk module or service, please report it to us directly.

Email: security@aerodesk.global

Response time: Within 24 hours

Recognition: Hall of fame (with your consent)