Security & privacy at airfocus

At airfocus, we protect your data with industry-leading security structures and
practices. Thousands of the world's most innovative companies
trust airfocus to keep their data safe.

Why do thousands of companies trust airfocus?

We earn trust from our users by providing industry-leading security standards.
airfocus covers the following:

Security

Data security built into our infrastructure, product, and operations. Single Sign-On (Google, Microsoft Azure AD, Okta, SAML), granular roles, and field-level permissions across hundreds of workspaces.

Reliability & availability

Cloud-based infrastructure designed for business continuity. Full transparency into system status and performance.

Privacy & data protection

A comprehensive privacy program, not a policy statement. We treat your customer signal and strategic context as what they are: critical business assets.

Compliance

Aligned to global privacy and security standards so you meet your obligations without a separate workstream.

airfocus is ISO 27001:2022 certified

We have a comprehensive Information Security Management System in place which is ISO/IEC 27001:2022 certified and the world's leading standard for information security management. Our physical infrastructure is hosted on highly secure data centers that are also ISO 27001:2022 certified.

Data storage and encryption at rest

With cloud hosting, we are able to offer enhanced performance, reliability, and security. We encrypt data at rest using an industry-standard AES encryption algorithm. All user passwords are hashed with a PBKDF2-based robust hashing algorithm and individual salts per password.

Data encryption in transit

All communication between airfocus servers and the client browser is secured using the industry standard Transport Layer Security (TLS). Only the most relevant and secure level of TLS is accepted by airfocus (currently 1.2). We have an A+ rating in the SSL Labs security report. See this SSL report for more information.

Product security & SAML/SSO

airfocus offers a robust set of in-product data protection and admin controls (admin, editor, contributor, and viewers, as well as workspace permissions). Enterprise admins can securely deploy airfocus to their organizations with Single Sign-On (SSO).

Credit card & payment security

We do not store any credit card information or related personal information on our servers or process payments. All payments are processed through our partner Stripe.

Annual penetration tests

Our infrastructure, web applications, and APIs are penetration tested and certified annually by external independent parties.

Security FAQ

Who carries out the ISO 27001:2022 certification?

The certification is carried out by an independent auditor. You can download our ISO 27001:2022 certificate here.

Do you have dedicated Single Sign-On integrations?

Yes. We have dedicated Single Sign-On integrations available for Microsoft Azure DevOps, Google Cloud, and Okta. Alternatively, you can set up customer SAML SSO with any Identity Provider (IDP) of your choosing.

How do we handle payments?

We use Stripe to handle payments. Stripe is a leading global payments system provider and enforces stringent PCI DSS (Payment Card Industry) compliance criteria to ensure that any data stored and/or processed on its servers is handled in a secure way. Details about their security can be found here.

Uptime

airfocus offers priority support and up to 99.9% uptime commitment to Enterprise customers. Real-time and historical platform available is provided transparently here.

Business continuity

airfocus's infrastructure maintains business continuity and ensures to provide daily backups in separate data centers and disaster recovery plans for restoring services in the event of unavoidable failures.