Security & trust
We publish what
we've earned.
Nothing more.
Flag carriers and regulated training organisations have serious security and compliance requirements. This page exists so your IT and procurement teams can verify exactly what Use Before Flight has done — not what we claim to be working toward.
- ISO 27001 Certified
- ISO 9001 Certified
- GDPR compliant
Certifications
ISO 27001 Certified
Information security management
Covers the full scope of data processing, storage, and transmission across both QUANTUM and the Training App.
- Risk-assessed security controls across all systems
- Regular internal and external audits
- Incident response procedures tested and documented
- Access control policies for all staff and systems
Certified by AENOR, one of Europe's leading certification and inspection bodies.
ISO 9001 Certified
Quality management system
Covers software development, customer support, and implementation — consistent quality across every engagement.
- Documented development and release processes
- Customer feedback loops built into QMS
- Supplier and partner quality controls
- Continual improvement framework in place
Certified by AENOR, one of Europe's leading certification and inspection bodies.
Security architecture
Encryption
All data encrypted at rest (AES-256) and in transit (TLS 1.2+). No exceptions.
Access control & SSO
Role-based access control. SSO integration available for enterprise identity providers. Two-factor authentication (2FA) supported via your identity provider.
Infrastructure
Hosted on AWS with data residency options across Europe and elsewhere, depending on applicable regulation. Where specific regional requirements fall outside our standard hosting options, we work with trusted third-party providers to accommodate them. 99.9% uptime SLA, 24x7x365.
Audit logging
Full audit trail for every action. Exportable for authority review. Tamper-evident, timestamped.
Integrations
Full REST API and webhooks available for integration with your existing systems — HR, roster, and more.
Backup & recovery
Automated daily backups with point-in-time recovery. RPO and RTO parameters available on request.
Your data
Your data is yours. Always.
We process data on behalf of our customers. That data belongs to you — not us. It will never be used for any purpose other than delivering our services to you.
We are fully compliant with EU and UK GDPR and can operate across different jurisdictions. Data processing agreements are standard practice and included in all our contracts.
Your contract with us, and its data processing agreement, set out exactly how we handle your organisation's data. For specific data handling queries, contact us directly at [email protected].
For procurement teams.
We know that enterprise procurement at airlines and ATOs involves IT security reviews, legal due diligence, and compliance assessment. We make it as straightforward as possible.
| ISO 27001 certificate | Available |
|---|---|
| ISO 9001 certificate | Available |
| Penetration test summary | Available (NDA) |
| Data processing agreement | Available |