Security and Your Data | Flight Suite HQ

Your school's data is yours, and kept apart

Each school's records are separated in the database by row-level security policies, so one school's members cannot read another's.
Every connection uses HTTPS, and browsers are told never to connect over anything else.
We do not sell, rent or trade your personal information, and we never sell user data.

Eleven roles, from owner and treasurer to instructor, mechanic, student and renter, each seeing only what its work needs. A school can switch individual features off for a role.
Passwords are at least 10 characters.
Flight Suite HQ support can view an account as a user only from our own admin console, and each time is logged.

With AC 120-78B mode on, each signature records the signer, their certificate number, the time, the IP address and a statement of intent, with a SHA-256 hash of the record.
A signed record is locked in the database. Mistakes are fixed with a formal correction that keeps the original.
The audit log records who did what. Nobody can edit or delete it, and it exports as a CSV.

Card and bank details go to Stripe or Square, never to us. We keep only the card's brand and last four digits, to show which card is on file.

Export members, reports, the audit log and more as CSV files; a student's complete record, transcript and transfer record as PDFs; or read it through the API with a key you control.
Anyone can delete their own account from their profile. Contact details, certificates, medical details, images and saved cards are deleted; flights, training, invoices and signed maintenance records a school must keep stay under 'Deleted User'.
Questions about your data go to support@flightsuitehq.com.