Data Management & Security

Privacy

Transaction data on Aeroxchange is maintained with strict adherence to contractual obligations in place with network participants.

Transaction data is private to the bilateral transacting parties and may not be shared with any other party.  Pricing information, order volume, supplier performance and other information is private to only the parties involved.

Data encryption and security between the Aeroxchange platform and participant systems is maintained to highest industry standards.

Compute and Network Infrastructure

Security measures for protecting and defending mission critical information consist of both physical and data security.

Physical Security

Production systems are located at a separate facility managed and operated by our strategic hosting partner, Hewlett-Packard Enterprise Services (HPES).

The Systems Management Center (SMC) is located on a campus operated by HPES in Plano, Texas, USA.  A perimeter barrier topped with barbed wire surrounds the campus, with six controlled access gates on the property. The SMC itself is secured with proximity detector systems, key locks and video cameras at all building entrances and exits.

Physical access to the facility is strictly controlled by barriers activated and monitored by full-time security staff.

Data Security

Participant data is protected by encryption during transmission and by a series of firewalls at the data center. All data exchanged between Aeroxchange systems and users is encrypted by 256-bit Secure Socket Layer (SSL). In addition to encryption, data exchanged between participant systems and Aeroxchange is authenticated by means of digital certificates and limited by IP-based firewall restrictions. All systems and processes are SAE70/ISAE3402 compliant.

System Availability

Systems and network infrastructure are configured for high availability.  Redundant fiber optic internet backbone connections, redundant monitored firewalls with fail-over backup, server capacity scaling, load balancing and fail-over support is enabled.  All systems and processes are SSAE16 SOC1 compliant.

Disaster Recovery

Aeroxchange maintains a fully enabled disaster recovery facility in Tulsa, Oklahoma, USA. This facility provides complete restoration of all mission critical activities within six hours of a catastrophic event at the primary location.