Back to Trust center
Security is on our mind
Security is on
our mind
Our systems and data are hosted across multiple Amazon Web Services (AWS) availability zones in the US and EU, ensuring high availability, reliability, and security. These data centers provide top-tier physical and environmental measures for a resilient infrastructure.
Our systems and data are hosted across multiple Amazon Web Services (AWS) availability zones in the US and EU, ensuring high availability, reliability, and security. These data centers provide top-tier physical and environmental measures for a resilient infrastructure.
Data Encryption
- Data is encrypted both in transit and at rest:
Traffic is encrypted using TLS 1.3 with a modern cipher suite, with a minimum support of TLS 1.2. - Customers’ data is encrypted at rest across our infrastructure using AES-256 encryption.
- Credentials are securely hashed and salted using a modern hash function.
Infrastructure Security
Flymingo.ai is hosted across multiple AWS Availability Zones. Additionally, our infrastructure is safeguarded by multiple layers of defense mechanisms, including:
- Firewalls enforcing IP whitelisting and restricting access to permitted network resources.
- A Web Application Firewall (WAF) for real-time attack detection and mitigation.
- DDoS protection with rate limiting.
- Advanced routing configurations to optimize security.
- Network Intrusion Detection Systems (NIDS) across the entire cloud infrastructure.
- Comprehensive logging of both internal and edge network traffic for monitoring and analysis.
Application Security
Our controlled CI/CD pipeline includes static code analysis, vulnerability assessment, secret scanning, end-to-end testing, and unit testing.
- Independent penetration testing is conducted at least annually to validate application security resilience.
- A security-by-design approach ensures security weaknesses are identified early in the product development lifecycle.
Risk Management
Flymingo.ai maintains an Information Security Risk Register aligned with its corporate risk management framework. Risks are identified, recorded, and scored to determine overall risk levels.
- High-risk findings are reported to Flymingo’s Executive Team.
- The Information Security Steering Committee convenes quarterly to ensure continuous updates.
- Annual risk assessments support ongoing security improvements.
Access Control
- We recognize the importance of protecting private and confidential data and regularly conduct user access reviews to ensure only authorized personnel have appropriate permissions.
- Employee access rights are promptly updated upon changes in role or employment, adhering to the principle of least privilege.
Business Continuity and Backups
Flymingo.ai is committed to ensuring continuous, uninterrupted service for all customers.
- Customer data is backed up regularly to support swift recovery.
- All backups are encrypted, tested, and access-controlled for maximum security.
AWS Security Page
