Radar handles sensitive maintenance records and collateral information for operators and their lending partners. This page describes how we protect that data, how we meet our own compliance obligations, and how Radar helps you stay audit-ready.

Security program

We encrypt data in transit (TLS 1.2 and above) and at rest (AES-256), enforce least-privilege and role-based access scoped per organization, log access, and run on hardened cloud infrastructure with automated backups and continuous monitoring. See Security for detail.

Certifications and frameworks

We are pursuing SOC 2 Type II and build our controls to its Trust Services Criteria (security, availability, and confidentiality). We align our practices with widely recognized information-security standards and will publish reports as they are completed. To request our current security documentation, email security@useradar.com.

Data privacy

We comply with applicable data-protection laws, including the GDPR, the UK GDPR, and the California Consumer Privacy Act (CCPA and CPRA). Our Privacy Policy explains what we collect and how we use it. When Radar processes personal data on behalf of a customer, we act as a processor and make a Data Processing Agreement (DPA) available on request.

Subprocessors

We use a limited set of vetted subprocessors to operate the Service (for example cloud hosting and infrastructure, analytics, communications, and payment processing), each under confidentiality and data-protection terms. We maintain a current list and give notice of material changes. Request it at privacy@useradar.com.

Data residency and transfers

Customer Data is hosted in the United States. Where we transfer personal data internationally, we use appropriate safeguards such as Standard Contractual Clauses.

Incident response

We maintain an incident-response process and will notify affected customers of a confirmed breach of their data without undue delay, consistent with our obligations under applicable law and our contracts.

Responsible disclosure

If you believe you have found a security vulnerability, email security@useradar.com. We investigate every report and will not pursue good-faith researchers who follow responsible-disclosure practices.

Helping you stay compliant

Radar is built to keep your fleet audit-ready:

• Airworthiness Directive (AD), Service Bulletin (SB), inspection, and STC status tracked for every tail.

• Every record traceable to its source document, so what you export is defensible, not retyped.

• One-click packages for a pre-buy, an annual, or an examiner request: AD and SB status, parts and inspection history, and full aircraft record sets.

• Original documents preserved alongside the structured data we extract.

Radar supports your recordkeeping but does not replace your legal obligations as an operator or owner (for example under FAA 14 CFR Parts 43, 91, and 135). You remain responsible for creating and retaining required records.

Contact

Security and compliance questions: security@useradar.com. Privacy requests: privacy@useradar.com. Or contact us.