Trust & Security

Trust, security, and AI you can audit

Switching the systems that run your operation is high-stakes. This page lays out how FlightAtom protects your data and governs its AI: what is live today, and what we will share under NDA during procurement.

Published by FlightAtom · Last reviewed 18 July 2026

Security & Data

What protects your data today

Encryption in transit

Operational data is encrypted in transit. Workflow-appropriate access controls are scoped to the modules and record types included in the implementation.

Least-privilege access

Where implemented, role-based access can be scoped by module, record type, and responsibility according to the agreed authorization model.

Your data stays yours

Customers retain ownership of their records and can export supported data according to the agreed implementation and data-handling policy.

On-premise Delphi option

Delphi can be configured for an on-premise deployment path when the agreed architecture and model setup must keep document and query data within the operator's network.

Reviewable records

Aurora and its connected add-ons preserve workflow-appropriate records and evidence for review across safety, training, crew, and other configured areas.

Modular scope and exports

Start with Aurora, add focused products when a workflow needs more depth, and define supported data exports and connection boundaries in the implementation.

Security Posture

The procurement checklist

Enterprise buyers need specifics before procurement. The rows marked On request are answered in detail in our security documentation, shared under NDA during evaluation. This public page is updated as each is finalized.

Hosting & data residency
On requestCloud-hosted, with an on-premise deployment option for Delphi so document and query data can stay inside your network. Providers and regions shared under NDA during evaluation.
Encryption at rest
On requestStandards and key management shared under NDA during evaluation.
Encryption in transit
LiveEncrypted in transit (TLS).
SSO / SAML / MFA
On requestSupported identity providers and MFA enforcement options shared under NDA during evaluation.
Role-based access control
LiveWorkflow-appropriate RBAC is scoped to the modules and record types included in the implementation.
Audit logging
LiveWorkflow records are available for review across configured modules. Admin and access audit-log scope, retention, and export are shared under NDA.
Backup, recovery & uptime
On requestBackup cadence, RPO/RTO, uptime targets, and incident response shared under NDA during evaluation.
Penetration testing & certifications
On requestPenetration-testing cadence and current certification status shared under NDA during evaluation.
Subprocessors & model providers
On requestList of subprocessors and model providers, with their data-handling terms, shared under NDA during evaluation.
Customer data and model training
On requestData-use and training-exclusion terms depend on the agreed deployment and model provider and are confirmed in security documentation and contract terms. Delphi can use configured operator document sources and supports an on-premise deployment path.
Data deletion & export
LiveSupported data can be exported; deletion and retention follow the agreed data-handling policy.
AI Assurance

Four kinds of “AI”: named, not blurred

Calling everything “AI-powered” makes technical buyers more skeptical, not less. FlightAtom keeps these four layers distinct, and a human owns the decision that matters.

Deterministic

Compliance & legality rules

Configured duty, rest, FTL, and qualification logic can be represented as deterministic rules rather than predictions. Operators validate rule scope, source data, and exceptions.

Machine learning

Predictions & scoring

Fatigue scoring, anomaly detection, and risk trends are statistical models. They identify where to look and provide a score, not a verdict.

Generative

Cited, grounded answers

Delphi retrieves passages from configured document sources and composes answers with citations. Source scope and access depend on the implementation, and users must verify the cited evidence.

Human

Decisions & approval

People approve rosters, sign the dispatch release, and own the call. Where configured, software can propose and explain; a qualified human decides.

Delphi Grounding

How Delphi stays grounded

Delphi retrieves from an operator-provided document corpus and can show section- and page-level source context, confidence or groundedness states, and an abstention when configured evidence is insufficient.
  • Searches the authenticated document corpus configured for the operator; open-web search is not assumed.
  • Supported answer views can show source details such as document title, section, and page.
  • The configured workflow can expose confidence or groundedness context, ask for clarification, or abstain when evidence is weak.

Benchmark figures for answer accuracy, citation precision, and abstention rate, measured against a defined document set and methodology, are shared under NDA during evaluation.

Need the full security pack?

We share detailed security documentation, our DPA, and architecture diagrams under NDA during evaluation.

Request security documentation