Our security commitment

Last update: August 16, 2021

Air is committed to using enterprise-grade best practices to protect our customers. We maintain the highest standards of data privacy and security because we know your intellectual property is important to keep secure.

Secure and reliable infrastructure

Air leverages Amazon Web Services (AWS) for the hosting of all production data. AWS data centers are monitored by 24×7 security, biometric scanning, video surveillance and are SOC 1, SOC 2, and SOC 3 certified.

Sub-processors

We work with the following companies and tool systems to store, analyze, and transmit data for our users. They've been carefully vetted for best-in-class security practices.

Application security

Incident Response

Security breaches will be communicated within 48 hours, and vulnerabilities are fixed ASAP.

In-app Permissions

Users can be assigned different roles to administer, manage, engage with, or access content.

Data Deletion

Users can request account and user data deletion via the following e-mail address: privacy@air.inc.

Data Permissions

Access to customer data is limited to authorized employees who require it for their job and data access is logged.

Data Encryption

We keep data secure in transit and at rest. Data is on accessible via TLS/SSL and is encrypted with AES256 at rest.

SSO

Single Sign-on (SSO) allows you to authenticate users in your own systems without requiring them to enter additional login credentials.

We offer full transparency into system status, compliance, and performance

Penetration testing

Our team runs penetration testing with the NCC Group. These annual network and application layer penetration tests follow Google's Penetration Testing Guidelines.

SOC 2 compliance

Air is SOC 2 compliant. Air works with Drata, the world’s most advanced security and compliance automation platform, to meet SOC 2 standards and has successfully passed an independent audit. The security of our customers’ data remains Air’s top priority, and our SOC 2 Type I report objectively certifies our ability to ensure its protection.

Service levels

We have uptime of 99.9% or higher. You can check our past month stats at https://status.air.inc/.

Questions?

To report any security vulnerabilities or receive additional details on our security provisions, please email us at security@air.inc. 🔐

If interested in advanced security settings in your Air workspace contact sales to learn more about our Enterprise plan →