Your competitive intelligence is sensitive. We treat it that way — with enterprise-grade security built into every layer of the AiR platform.
All data is encrypted in transit using TLS 1.2+ and at rest using AES-256. Your credentials are hashed using bcrypt and never stored in plain text.
Strict role-based access controls govern who on our team can view what. Production data access is limited to authorized engineers on a need-to-know basis, with full audit logging.
Our infrastructure is monitored 24/7 for anomalies, intrusion attempts, and unusual activity. Automated alerts and an on-call rotation ensure rapid response around the clock.
We conduct regular internal security reviews and periodic third-party assessments. Vulnerabilities are tracked, prioritized, and remediated according to severity.
AiR is hosted on AWS within industry-standard data centers. Network-level protections include firewalls, DDoS mitigation, and VPC isolation.
All AiR team members complete security awareness training, follow a documented security policy, and use hardware-key MFA for system access. Background checks are conducted for roles with data access.
AiR is designed to comply with applicable data protection laws and industry standards. Our security practices are reviewed and improved on an ongoing basis.
No system is perfectly immune. What matters is how quickly and transparently we respond. Here's our incident response process.
In the event of a confirmed breach affecting your personal data, we will notify affected customers and relevant regulatory authorities within the legally required timeframe (72 hours for GDPR).
Automated alerts and on-call engineers identify and isolate the incident within minutes.
We determine what data was affected, how many customers are impacted, and the root cause.
Affected customers are notified promptly with clear details about what happened and what to do.
We fix the vulnerability, conduct a full post-mortem, and implement controls to prevent recurrence.
We appreciate security researchers who help us keep AiR safe. If you've discovered a potential security issue, please report it to us responsibly before disclosing it publicly.
Email us at max@getairesults.ai with subject line "Security Disclosure." Please include:
We commit to acknowledging reports within 72 hours, keeping you informed of our progress, and not pursuing legal action against good-faith researchers who follow this process.