Security & data ownership
Your records. Your export button. Any time.
Your records belong to your certificate, not to us. Export everything yourself, whenever you want. When data is stale, it shows red. Never green.
01 · DATA OWNERSHIP
Your data is yours. In the product and in the contract.
Self-service export, any time.
CSV, JSON or PDF, including per-aircraft records, documents and audit trails. No ticket, no waiting.
No data hostage when you leave.
Leaving doesn't cost you your records. Export everything on your way out, the same way you would any other day.
Export or escrow, in the contract.
A contractual guarantee of full export, or escrow, if we ever stop operating.
02 · HUMAN IN THE LOOP
The software flags. Your people decide.
Direct2 does the regulatory math and stops what shouldn't go. It never signs, releases or decides for you.
- The system computes, flags and blocks.
- A named, qualified person releases, signs and decides.
- Who, when and why are recorded every time.
03 · FAIL-SAFE
When data is stale, it shows red. Never green.
Stale, unknown or unreachable data shows red. A late import can never make an aircraft look airworthy.
- Every synced value shows its source and age.
- Unknown is treated as not airworthy until a person checks it.
- The release waits for current data, not the other way round.
04 · TAMPER-EVIDENT RECORDS
Records that hold up when someone asks.
Append-only audit log.
Written by the database itself. Entries can be added, never edited or removed.
E-signatures to AC 120-78B.
Signatures tied to a named person, a time and the record they signed.
AC 120-78B
Effective-dated rule sets.
Show your POI what rule applied on the day of the flight.
Published duty-validation scenarios.
The test cases behind the duty engine, so your chief pilot can check the math.
05 · SECURITY CONTROLS
What protects your records.
Built to SOC 2 controls. Report available under NDA once issued.
Tenant isolation.
At the application and database layers, with row-level security.
MFA on every account.
Required, not optional. Plus single sign-on with the major identity providers.
Role-based access per aircraft.
Scoped to the tails a person works on, with roles that expire.
Inspector access.
Read-only and time-boxed. Access ends on the date you set.
Encryption.
TLS 1.2+ in transit and encryption at rest. Field-level encryption for passports and dates of birth.
Card data never stored.
Tokenized by the payment processor. It never touches our servers.
Point-in-time recovery.
With restore drills, not just backups.
Hosting.
Hosted with an established cloud infrastructure provider. Region: [pending]
Scanning and testing.
Automated security scanning on every code change. Independent penetration testing.
06 · SAFETY-REPORT PRIVACY
Anonymous means anonymous. And we publish the limits.
- Anonymous reports store no identity, IP address or device data, even in the audit log.
- Confidential identity is restricted to the people the operator designates.
- The published privacy model includes its limits.
The limits of anonymity
- A subpoena or legal discovery can reach confidential records.
- Details written into a report can identify the reporter, even when the report is anonymous.
- Confidential reporting is not ASAP. ASAP needs an FAA MOU.
07 · AVAILABILITY AND SUPPORT
Up when you fly. Honest when something's wrong.
Availability.
Public status page. Availability target for dispatch-critical reads (airworthiness, due list, deferrals, FRAT gate, duty legality): [pending]
System statusResponsible disclosure.
If we find a calculation defect, we notify every affected customer. Security researchers can report issues to us directly.
Security disclosure policyAOG-hours support.
A support channel for the hours aircraft actually fly: [phone / hours pending]
Who's responsible
Responsibility for regulatory compliance stays with the certificate holder. Direct2 computes, flags and blocks. Your Director of Operations, chief pilot, DOM and safety manager make the calls, and the record shows who made each one.
Who owns the data?
You do. Export everything yourself at any time, in CSV, JSON or PDF, including per-aircraft records, documents and audit trails.
What if you shut down?
Your contract includes a guarantee of full export, or escrow, if we ever stop operating. And you can export everything yourself any day before that.
Do you have SOC 2?
Direct2 is built to SOC 2 controls. The report will be available under NDA once it's issued.
Do you support MFA and SSO?
MFA is required on every account. Single sign-on works with the major identity providers.
How does inspector access work?
You give your inspector read-only access that expires on a date you set. They can look; they can't change anything.
Is safety reporting anonymous?
Anonymous reports store no identity, IP address or device data, even in the audit log. Confidential reports restrict the reporter's identity to the people you designate.
Anonymity has limits, and we publish them: a subpoena or legal discovery can reach confidential records, and details written into a report can identify the reporter even when it's anonymous. Confidential reporting is not ASAP, which needs an FAA MOU.
Does the software make the go/no-go call?
No. The software computes, flags and blocks. A named, qualified person releases, signs and decides, and who, when and why are recorded every time.
Responsibility for regulatory compliance stays with the certificate holder.
What if an import is late?
Stale, unknown or unreachable data shows red, and the release is held. A late import can never make an aircraft look airworthy.
Due diligence
Bring your security questions.
Book a demo and try the export button yourself, or talk to our team about your security review and contract terms.