Security & Trust

Security & Data Protection

Resyrv keeps the financial records and documents of your operation. It also keeps the people and records of your organization. This article tells you how we protect them.

Encryption in transit

Resyrv encrypts every connection with industry-standard TLS. Thus, every page loads over HTTPS. Traffic to Resyrv goes through the global network of Cloudflare. We enforce HTTP Strict Transport Security. Thus, your browser connects to Resyrv only through an encrypted connection.

Network and application hardening

Resyrv is behind Cloudflare. Cloudflare absorbs denial-of-service traffic. Cloudflare also examines requests at the edge before they get to the application.

Each response has a strict Content Security Policy and a full set of security headers. These headers give frame protection, MIME-type pinning, and referrer and permissions policies. They stop common attacks that use the browser.

The database isolates your data

An organization can never see the data of a different organization. The database enforces this boundary. The application code also enforces it.

Each table has row-level security policies for your organization. An application bug is unlikely. But if one occurs, the database still refuses to return the rows of a different organization.

Accounts and access

Clerk, a dedicated identity provider, controls sign-in and credentials.

In your organization, the role of each person sets exactly what that person can see and do. Short-lived, signed tokens set the scope of API access.

Payments and card data

Stripe processes card and bank payments. Stripe is a payment provider with PCI-DSS Level 1 certification. This is the highest level of payment-security certification. Resyrv never stores full card numbers.

We keep only the card brand and the last four digits to show the card (for example, “Visa ending 4242”). Stripe keeps the sensitive details in its vault behind a token.

Hosting and infrastructure

Resyrv runs on cloud infrastructure behind the global edge network of Cloudflare.

Backups

We make a backup of the Resyrv database each day. If a failure occurs, we can use the backup to recover the records of your operation.

Export your data at any time

In the app, you can:

• Run reports and CSV exports for members, flights, and financial activity.
• Download account statements and invoices as PDFs.
• Export pilot logbooks and training records.
• Sync your financial data to QuickBooks or Xero.

Privacy

Our Privacy Policy tells how we collect, use, and protect personal data and organization data.

Read the Privacy Policy

Can’t find what you need? Contact us - a real person reads every message.