Certifications and best practices
We follow information security best practices, and use third-party services to confirm what we’re doing is effective.
SOC 2 Type I
Wayflyer Limited has obtained the AICPA’s SOC for Service Organizations, SOC 2 Type I. We were audited by Prescient Assurance. Our SOC 2 Type I report can be requested by emailing security@wayflyer.com.
Continuous monitoring
We use Vanta to continuously monitor our production and corporate infrastructure.
Accredited hosting
We host our platform on AWS and use accredited AWS services.
Penetration testing
Our products and services are tested through external penetration tests performed by third-party security companies.
SSL/TLS A Rating
The Wayflyer application is TLS/SSL-only and scores an A rating on Qualys SSL Labs Test.
CSA Star Program Member
We have completed the Cloud Security Alliance (CSA) Consensus Assessment Initiative Questionnaire (CAIQ).
The questionnaire has been uploaded to the STAR Registry and can be reviewed here.
Key security features
Technical security controls
- Access control lists (ACL), intrusion detection and prevention (IDS/IPS), and web application firewalls (WAF)
- Managed employee devices (MDM, Anti-malware)
- Data anonymization
- Encryption (at rest and in transit)
- Logical access control (granular privileges), and multi-factor authentication (MFA)
- Logging and monitoring
- Vulnerability management program
Organizational security controls
- Information security policies
- Personnel awareness and training
- Business resilience planning (disaster recovery and business continuity)
- Data processing agreements (DPA)
- External penetration testing
- Secure development lifecycle (SDLC)
- Third-party vendor risk management
Any questions?
If you have any questions about the above or anything else about security at Wayflyer, we’d be happy to answer them. Contact security at Wayflyer
