Trust & Safety

Security at AviTracker

How we protect your maintenance data

Last updated: January 2026

Aviation maintenance records are critical for safety and compliance. We implement industry-leading security measures to protect your aircraft data, work orders, and component tracking information.

Encryption

All data encrypted in transit (TLS 1.3) and at rest (AES-256)

Infrastructure

Supabase (PostgreSQL) with automatic backups and 99.9% uptime

Access Control

Role-based permissions: Lead, Mechanic, Inspector roles per work order

Authentication

Secure password policies with Supabase Auth

Data Protection

  • Aircraft records isolated by organization with Row Level Security (RLS)
  • Work orders and tasks scoped to assigned members only
  • Inventory data partitioned per organization
  • All API routes protected with authentication middleware
  • Session management with secure HTTP-only cookies

Compliance & Auditing

  • GDPR-compliant data handling for EU users
  • Data export available for regulatory audits
  • Activity logs for accountability (who did what, when)
  • Secure deletion process respecting retention requirements

24/7 Monitoring

Automated threat detection and security monitoring

Report a Vulnerability

Security issues? Email security@avitracker.org. We respond within 48 hours.