Security & Trust
Security
Your operation’s schedules, financial records, member details, and documents live in Resyrv. Here is how we protect them: in transit, between organizations, and in how we handle payments.
Encryption in transit
Every connection to Resyrv is encrypted with industry-standard TLS, so every page loads over HTTPS. Traffic reaches us through Cloudflare’s global network, and we enforce HTTP Strict Transport Security, so your browser will only ever talk to Resyrv over an encrypted connection.
Network and application hardening
Resyrv sits behind Cloudflare, which absorbs denial-of-service traffic and screens requests at the edge before they ever reach the application. Every response also carries a strict Content Security Policy and a full set of security headers (frame protection, MIME-type pinning, and referrer and permissions policies) that close off common browser-based attacks.
Your data is isolated at the database level
In Resyrv, one organization can never see another organization’s data, and that boundary is enforced by the database itself, not only by application code.
Every table is governed by row-level security policies tied to your organization. Even in the unlikely event of an application bug, the database refuses to return another organization’s rows.
Accounts and access
Sign-in and credentials are handled by Clerk, a dedicated identity provider.
Inside your organization, everything is permission-gated: each member’s role decides exactly what they can see and do, and API access is scoped by short-lived, signed tokens. A member can never act beyond the authority their role grants.
Payments and card data
Card and bank payments are processed by Stripe, a PCI-DSS Level 1 certified payment provider, which is the highest level of payment-security certification. Resyrv never stores full card numbers.
We keep only the card brand and last four digits for display (for example, “Visa ending 4242”), while the sensitive details live inside Stripe’s vault behind a token.
Hosting and infrastructure
Resyrv runs on cloud infrastructure fronted by Cloudflare’s global edge network.
Backups
The Resyrv database is backed up daily so your operation’s records can be recovered in the event of a failure.
Export your own data anytime
From inside the app you can:
- Run reports and CSV exports covering members, flights, and financial activity.
- Download account statements and invoices as PDFs.
- Export pilot logbooks and training records.
- Sync financials to QuickBooks or Xero.
Privacy
How we collect, use, and protect personal and organizational data is covered in full in our Privacy Policy.
Was this page helpful?
Can’t find what you need? Contact us - a real person reads every message.