Enterprise-grade security for every traveller. TLS 1.3, AES-256, SOC 2 Type II certified.
ENCRYPTION
All data in transit is encrypted with TLS 1.3. Data at rest is AES-256 encrypted.
COMPLIANCE
SOC 2 Type II certified. GDPR compliant. PCI DSS Level 1 for payment processing.
CREDENTIALS
Passwords are bcrypt-hashed with individual salts. We never store plain-text credentials. Two-factor authentication is available for all accounts.
PAYMENT SECURITY
FLYVUELA never stores raw card numbers. All payment data is handled by PCI DSS Level 1 certified processors: Paddle, Razorpay, and Stripe.
VULNERABILITY DISCLOSURE
Found a security issue? Email [email protected] — we respond within 24 hours. Responsible disclosure is appreciated and rewarded.
QUESTIONS ABOUT THIS DOCUMENT?
Write to [email protected] — we answer within 2 business days.