Airstudio Security Commitment

Here's a snapshot of the security posture at Airstudio. These measures are part of a broader, layered security strategy that includes additional confidential safeguards.

Code change management

• All code changes are reviewed by engineers and multiple AI models to identify security issues, with findings addressed promptly.

• All infrastructure is defined as version infrastructure as code (IaC) and deployed through an automated pipeline, so every change is reviewed and repeatable.

Monitoring and threat detection

• Amazon GuardDuty threat detection runs in every region we use.

• AWS Security Hub is enabled.

• AWS CloudTrail records account activity in all regions.

• Centralized application logging and error monitoring are in place, with security alerts sent to our engineering team in real time.

• AI agents scan public forums for emerging security vulnerabilities that could impact Airstudio services and automatically recommend code changes for engineering review.

Encryption

• Databases are encrypted at rest with AES-256.

• All traffic is HTTPS only, and plain HTTP is redirected. Our API requires TLS 1.2 or newer and supports TLS 1.3.

• Application secrets are stored in AWS Secrets Manager.

Network protection

• AWS WAF sits in front of our API, with AWS-managed threat rule sets, rate monitoring, alerting, and an IP blocklist.

• Database access is restricted by network rules within private subnets.

Access control

• Multi-factor authentication is required for all AWS administrator access.

• Each engineer has their own least-privilege access, and each environment has its own service credentials.

• In the application, access is role-based, and studios can require MFA for staff accounts.

• Application users can only access records they are authorized to view, with access rules enforced server-side on every request.

• Login and password endpoints are rate-limited, and repeated failures trigger temporary lockouts.

Backups and recovery

• Automated database backups allow point-in-time recovery for the last 5 days, and database snapshots are taken hourly.

As technology and cybersecurity threats continue to evolve, our focus on security and the protection of your data remains an ongoing priority. We are committed to continually improving our safeguards, staying ahead of emerging threats and providing a secure, reliable platform you can trust to run your business.

The Airstudio Team