Security

• Documents are stored privately. Nobody can open one from a public link.
• Staff open documents only through signed links that expire after 10 minutes, and every view, and every refused view, is logged.
• Uploads go only through our servers. Files are checked by their actual content, not their file name, and size-limited.

• Access is role-based: pilot, reviewer, admin and head admin. Pilots see only their own applications.
• The rules are enforced in the database and on the server, and they are covered by automated tests.
• Status changes, role changes and document views are written to an audit log that staff can read but not edit.

• Sign-in uses Google Firebase Authentication. We never see or store your password.
• Rate limits apply to uploads, sign-in emails, password resets and the contact form.

Data is encrypted in transit (HTTPS) and at rest, using Google Cloud's standard encryption.

If you find a security problem, write to security@vanvert.co with enough detail to reproduce it. Please give us a reasonable chance to fix it before telling anyone else. We won't take legal action against anyone reporting in good faith.