Keeping your data safe

    You trust us with sensitive information about your business and we appreciate how important it is to look after it properly. Here’s how we make sure your information is used and seen only by the people who need to see it.

    Certifications and best practices

    We follow information security best practices, and use third-party services to confirm what we’re doing is effective.

    SOC 2 Type I
    SOC 2 Type I

    SOC 2 Type I

    Wayflyer Limited has obtained the AICPA’s SOC for Service Organizations, SOC 2 Type I. We were audited by Prescient Assurance. Our SOC 2 Type I report can be requested by emailing security@wayflyer.com.

    Continuous monitoring‍

    We use Vanta to continuously monitor our production and corporate infrastructure.

    Accredited hosting‍

    We host our platform on AWS and use accredited AWS services.

    Penetration testing ‍

    Our products and services are tested through external penetration tests performed by third-party security companies.

    SSL/TLS A Rating‍

    The Wayflyer application is TLS/SSL-only and scores an A rating on Qualys SSL Labs Test.

    CSA Star Program Member‍

    We have completed the Cloud Security Alliance (CSA) Consensus Assessment Initiative Questionnaire (CAIQ).

    The questionnaire has been uploaded to the STAR Registry and can be reviewed here.

    Key security features

    Technical security controls

    • Access control lists (ACL), intrusion detection and prevention (IDS/IPS), and web application firewalls (WAF)
    • Managed employee devices (MDM, Anti-malware)
    • Data anonymization
    • Encryption (at rest and in transit)
    • Logical access control (granular privileges), and multi-factor authentication (MFA)
    • Logging and monitoring
    • Vulnerability management program

    Organizational security controls

    • Information security policies
    • Personnel awareness and training
    • Business resilience planning (disaster recovery and business continuity)
    • Data processing agreements (DPA)
    • External penetration testing
    • Secure development lifecycle (SDLC)
    • Third-party vendor risk management

    Any questions?

    If you have any questions about the above or anything else about security at Wayflyer, we’d be happy to answer them. Contact security at Wayflyer