Security Policy

At AdFlight, security is one of our highest priorities. In the spirit of openness and transparency, here are some of the security measures we take to protect and defend the platform.

We protect your data

All data is written to multiple disks instantly (RAID-1), backed up daily, and stored in multiple locations.

Data transfer

We distinguish between data about your visitors and about you and your team. Your billing information is shared with Stripe. Your profile, creatives and settings are accessible to us in our help desk software to be able to help you in case you need support.

Encrypting data in transit

Data encryption using SSL/HTTPS is enforced whenever possible when using the Service.

Concurrency and rate limiting

We employ several layers to protect against abuse and DDoS attacks, such as concurrency limiting and rate limiting. Our servers gracefully queue requests coming from the same IP address when under high load.

Development practices

• All code changes is tested in a staging environment before deploying to production.
• We use several tools and services to automatically monitor uptime and availability.
• Server logs are permanently deleted after 14 days.

Regularly-updated infrastructure

Our software infrastructure is updated regularly with the latest security patches. Our products run on a network of dedicated servers which is locked down with firewalls and carefully monitored.

Regarding your billing information

All credit card transactions are processed via Stripe using secure encryption - the same level of encryption used by banks. Card information is transmitted, stored, and processed securely on a PCI-Compliant network.