Get started in seconds, add your team as you go do more with your visual assets on Air!
Sign up for free

Security

Last update: March 22, 2021

Our security commitment

Air is committed to using enterprise-grade best practices to protect our customers. We maintain the highest standards of data privacy and security because we know your intellectual property is important to keep secure.

Secure and reliable infrastructure

Air leverages Amazon Web Services (AWS) for the hosting of all production data. AWS data centers are monitored by 24×7 security, biometric scanning, video surveillance and are SOC 1, SOC 2, and SOC 3 certified.

Sub-processors

We work with the following companies and tool systems to store, analyze, and transmit data for our users. They've been carefully vetted for best-in-class security practices.

Application security

Data Encryption

We keep data secure in transit and at rest. Data is on accessible via TLS/SSL and is encrypted with AES256 at rest.

SSO

Single Sign-on (SSO) allows you to authenticate users in your own systems without requiring them to enter additional login credentials. All plans include SSO via OAuth, and our enterprise plan includes SSO via SAML 2.0.

Data Permissions & Authentication

Access to customer data is limited to authorized employees who require it for their job and data access is logged.

Incident Response

Security breaches will be communicated within 48 hours, and vulnerabilities are fixed ASAP.

In-app Permissions

Users can be assigned different roles to administer, manage, engage with or access content.

Data Deletion

Users can request account and user data deletion via the following e-mail address privacy@air.inc.

Penetration testing

Our team runs penetration testing with the NCC Group. These annual network and and application layer penetration tests follow Google's Penetration Testing Guidelines.

SOC 2 compliance

Air is driving toward SOC 2 compliance. Air has not yet been audited by an independent firm, but our team has begun drafting policies and procedures using Drata, the world's most advanced security and compliance automation platform.

Service levels

We have uptime of 99.9% or higher. You can check our past month stats at https://status.air.inc/.

Questions?

To report any security vulnerabilities, please email us at security@air.inc.

We're also always available to answer questions on this topic. Just send us a note at security@air.inc 🔐

Interested in advanced security settings? Contact sales to learn about our Enterprise plan →