Security
Security designed in, not bolted on
Operational data is valuable and sensitive. BIXAero was designed from the start so that your data is protected, isolated and only ever shared with the partners you approve.
Your identity, your sign-in
Your people sign in with single sign-on through your own organisation's identity provider, using OpenID Connect and OAuth 2.0. BIXAero never asks for or stores their passwords.
Consent before data moves
No data flows between two organisations until the owner of the data accepts a request. Agreements can be narrowed, time-limited and revoked at any time.
Isolated by design
Each organisation has its own dedicated service and message broker for each kind of data, separate from every other organisation's. Baggage and flight data never share a service.
Encrypted everywhere
Everything travels encrypted. System connections use mutual TLS with certificates issued by the platform, webhooks are signed, and API access uses OAuth 2.0 client credentials.
Secrets handled properly
Passwords and secrets for your systems are shown to you once and stored only as hashes. Platform secrets are held in a managed key vault, never in code.
A full audit trail
Every registration, request, decision and configuration change is recorded, so you can always see who did what, and when.
Privacy protected
Personal data such as email addresses and phone numbers is masked in the platform's logs, and the directory of organisations contains no personal information.
Built to recognised practice
BIXAero is engineered against the OWASP Top 10, with strict input validation, rate limiting, security headers and the least privilege for every component.
Always in control
You decide who receives your data
Requests arrive by email and are decided in the portal by the people responsible for your data. A denial must carry an explanation, and every decision is emailed to both organisations. If circumstances change, you can revoke an agreement immediately and data stops flowing.
How requests and approvals work
Questions about security?
Request a trial and our team will walk your security and IT colleagues through the design in detail.