Trust centre
Compliance you can check, not just read about
SeyAero holds flight recorder data, cockpit audio and protected Annex 13 records. Our control environment is monitored continuously by the platform itself: each control below is re-tested against live production on every scheduler tick, and a failure opens a dated remediation finding with a severity clock. The counters on this page come from that engine — not from a spreadsheet.
Controls passing
—
Controls monitored
33
Automated checks
—
Last verified
—
Frameworks we map to
SOC 2 Type II (Security, Availability, Confidentiality)
31 mapped controls
ISO/IEC 27001:2022 Annex A
31 mapped controls
GDPR Art. 32 — security of processing
6 mapped controls
ICAO Annex 13 §5.12 — protection of investigation records
7 mapped controls
SOC 2 and ISO 27001 certificates are issued by independent auditors following an observation window. SeyAero operates the full control set continuously and produces the evidence an audit requires on demand; certification status and the current report are available under NDA from the compliance desk.
The control set
Governance & risk
- GOV-01Information security policy set approved and currentcontinuously verified
A published policy set (security, acceptable use, privacy, incident response, BCDR) is approved by leadership and reviewed at least annually.
SOC2:CC1.1 · ISO27001:A.5.1 · GDPR:Art.32
- GOV-02Risk register maintained and reviewedcontinuously verified
Security, availability and aviation-safety risks are recorded with likelihood, impact, treatment and owner, and reviewed at least every 180 days.
SOC2:CC3.2 · ISO27001:A.5.7
- GOV-03Control ownership and management reviewattested / 90d
Every control has a named owner; management reviews the compliance posture and open findings at least quarterly.
SOC2:CC1.2 · ISO27001:A.5.4
- GOV-04Findings are remediated within severity SLAcontinuously verified
Automated and manual findings are triaged and closed inside their severity window: critical 7 days, high 30, medium 90.
SOC2:CC4.2 · ISO27001:A.5.36
Access control
- AC-01Row level security on every tenant tablecontinuously verified
Every table in the application schema enforces row level security with at least one explicit policy, so no tenant can read another operator's case material.
SOC2:CC6.1 · ISO27001:A.8.3 · ANNEX13:5.12
- AC-02No anonymous exposure of case or commercial datacontinuously verified
Anonymous (unauthenticated) database grants are limited to a reviewed allow-list of deliberately public tables and never include write access.
SOC2:CC6.1 · ISO27001:A.8.4 · ANNEX13:5.12
- AC-03Privileged database routines are not caller-exposedcontinuously verified
Security-definer routines pin a search path and are not executable by anonymous callers.
SOC2:CC6.3 · ISO27001:A.8.2
- AC-04Least privilege for platform staffcontinuously verified
Platform administrator and billing grants are minimal, individually attributed, and revocable; dormant grants are removed.
SOC2:CC6.2 · ISO27001:A.5.18
- AC-05Quarterly user access reviewcontinuously verified
Every person with production access is reviewed at least every 90 days and confirmed still required.
SOC2:CC6.2 · ISO27001:A.5.18
- AC-06Offboarding revokes access same daycontinuously verified
When a person is offboarded their platform grants, mail identities and vault keys are revoked on the same working day.
SOC2:CC6.2 · ISO27001:A.5.11
Cryptography & data protection
- CR-01Evidence encrypted client-side (zero knowledge vault)continuously verified
Case evidence is encrypted with AES-256-GCM in the investigator's browser; the platform stores only wrapped keys and never a plaintext passphrase.
SOC2:CC6.7 · ISO27001:A.8.24 · GDPR:Art.32 · ANNEX13:5.12
- CR-02Evidence storage is private by defaultcontinuously verified
No storage bucket holding case material is publicly listable or readable.
SOC2:CC6.1 · ISO27001:A.8.12
- CR-03Non-repudiation ledger integritycontinuously verified
Every signed artefact is SHA-256 hashed and chained into the append-only ledger; the chain verifies end to end.
SOC2:CC7.2 · ISO27001:A.8.15 · ANNEX13:5.12
- CR-04Secrets are managed, never committedcontinuously verified
All signing keys, provider keys and webhook secrets live in the managed secret store and are present in production.
SOC2:CC6.1 · ISO27001:A.8.24
Operations & monitoring
- OP-01Continuous monitoring is actually runningcontinuously verified
The scheduler tick that drives ingestion, notifications and compliance monitors has executed within the last 24 hours.
SOC2:CC7.1 · ISO27001:A.8.16
- OP-02Audit logging of privileged and case actionscontinuously verified
Privileged staff actions and case-material access are written to an immutable activity trail retained for the contract term.
SOC2:CC7.2 · ISO27001:A.8.15 · ANNEX13:5.12
- OP-03Change management with reviewable historyattested / 90d
Production changes are shipped through the versioned pipeline with a reviewable history and reversible migrations.
SOC2:CC8.1 · ISO27001:A.8.32
- OP-04Vulnerability and dependency managementattested / 30d
Dependencies are scanned for known vulnerabilities and high/critical findings are patched within 30 days.
SOC2:CC7.1 · ISO27001:A.8.8
- OP-05Support incident response inside SLAcontinuously verified
Support and security incidents are acknowledged and resolved inside the published SLA, with P1 safety events paged immediately.
SOC2:CC7.4 · ISO27001:A.5.24
- OP-06Authenticated, auditable outbound mailcontinuously verified
Platform mail is sent from an authenticated domain and each message carries a verification code auditable from the staff desk.
SOC2:CC7.2 · ISO27001:A.8.15
Availability & resilience
- RS-01Backups and point-in-time recoveryattested / 365d
Managed database backups run daily with point-in-time recovery, and restores are exercised at least annually.
SOC2:A1.2 · ISO27001:A.8.13
- RS-02Business continuity and disaster recovery testattested / 365d
The BCDR plan is exercised annually with documented RTO/RPO outcomes.
SOC2:A1.3 · ISO27001:A.5.30
- RS-03Published availability commitment is trackedattested / 90d
The 99.9% availability commitment is measured and reported against the SLA.
SOC2:A1.1 · ISO27001:A.5.30
Sub-processor management
- VN-01Sub-processor register accurate and reviewedcontinuously verified
Every sub-processor handling customer data is registered, risk-tiered and reviewed annually with a signed DPA.
SOC2:CC9.2 · ISO27001:A.5.19 · GDPR:Art.28
- VN-02Sub-processor assurance evidence on filecontinuously verified
High-risk sub-processors hold a current SOC 2 or ISO 27001 attestation, recorded in the register.
SOC2:CC9.2 · ISO27001:A.5.22
Personnel security
- PE-01Annual security awareness trainingcontinuously verified
Everyone with production access completes security training every 12 months.
SOC2:CC1.4 · ISO27001:A.6.3
- PE-02Policy acknowledgement on hire and on changecontinuously verified
Staff acknowledge the security and acceptable use policies within 30 days of hire.
SOC2:CC1.5 · ISO27001:A.6.2
- PE-03Background screening where lawfulcontinuously verified
Staff with access to accident material are screened before access is granted, where local law permits.
SOC2:CC1.4 · ISO27001:A.6.1
Privacy & residency
- PR-01Data retention honoured per contractcontinuously verified
Each organisation's retention window is configured and enforced by the retention sweep; expired material is purged.
SOC2:C1.2 · ISO27001:A.8.10 · GDPR:Art.5
- PR-02Data residency honouredcontinuously verified
Residency selections are recorded per entitlement and any exception is logged with an expiry.
ISO27001:A.5.34 · GDPR:Art.44
- PR-03Data subject and operator request handlingattested / 90d
Access, correction and deletion requests are logged in the support desk and answered within 30 days.
GDPR:Art.12 · SOC2:P5.1
Aviation record protection
- AV-01Investigation material segregated from commercial usecontinuously verified
Annex 13 protected records are never used for commercial analytics, and access is limited to the investigating team.
ANNEX13:5.12 · ISO27001:A.5.12
- AV-02Analytical outputs carry provenance and disclaimercontinuously verified
Every generated finding traces to source evidence and carries the advisory-output disclaimer.
ANNEX13:5.12 · SOC2:PI1.1
Sub-processors
- Managed Postgres & object storagehigh riskCustomer-selected region
Primary datastore for cases, evidence metadata and encrypted artefacts.
- Edge application hostinghigh riskGlobal edge
Serves the application and server functions.
- Resendmedium riskUS / EU
Transactional and desk email delivery for seyaero.com.
- AI inference gatewayhigh riskUS
Transcription, drafting and evidence parsing on investigator request.
- Open-Meteo / RainViewer / aviationweather.govlow riskGlobal
Meteorological overlays and observations. No customer data leaves the platform.
- ADS-B and ATC audio relayslow riskGlobal
Public flight telemetry and ambient radio capture.
Documents and requests
Security questionnaires, penetration test summaries, SOC 2 report access and DPA execution are handled by the compliance desk through the support system, tracked against the published SLA.