Security

Last update: March 22, 2021

Our security commitment

Air is committed to using enterprise-grade best practices to protect our customers. We maintain the highest standards of data privacy and security because we know your intellectual property is important to keep secure.

Secure and reliable infrastructure

Air leverages Amazon Web Services (AWS) for the hosting of all production data. AWS data centers are monitored by 24×7 security, biometric scanning, video surveillance and are SOC 1, SOC 2, and SOC 3 certified.

Sub-processors

We work with the following companies and tool systems to store, analyze, and transmit data for our users. They've been carefully vetted for best-in-class security practices.

Application security

Data Encryption

We keep data secure in transit and at rest. Data is on accessible via TLS/SSL and is encrypted with AES256 at rest.

SSO

Single Sign-on (SSO) allows you to authenticate users in your own systems without requiring them to enter additional login credentials. All plans include SSO via OAuth, and our enterprise plan includes SSO via SAML 2.0.

Data Permissions & Authentication

Access to customer data is limited to authorized employees who require it for their job and data access is logged.

Incident Response

Security breaches will be communicated within 48 hours, and vulnerabilities are fixed ASAP.

In-app Permissions

Users can be assigned different roles to administer, manage, engage with or access content.

Data Deletion

Users can request account and user data deletion via the following e-mail address privacy@air.inc.

Penetration testing

Our team runs penetration testing with the NCC Group. These annual network and and application layer penetration tests follow Google's Penetration Testing Guidelines.

SOC 2 compliance

Air is SOC 2 compliant. Air works with Drata, the world’s most advanced security and compliance automation platform, to meet SOC 2 standards and has successfully passed an independent audit. The security of our customers’ data remains Air’s top priority, and our SOC 2 Type I report objectively certifies our ability to ensure its protection. 

Service levels

We have uptime of 99.9% or higher. You can check our past month stats at https://status.air.inc/.

Questions?

To report any security vulnerabilities, please email us at security@air.inc.

We're also always available to answer questions on this topic. Just send us a note at security@air.inc 🔐

Interested in advanced security settings? Contact sales to learn about our Enterprise plan →