Security & Compliance
Your data, handled with care.
You trust FeatureFlight with your projects, clients, and invoices. Here's a plain-language look at how we protect that data, and where we are on formal compliance.
Built on AWS
FeatureFlight is hosted on Amazon Web Services (AWS). AWS maintains independently audited security and compliance programs, including SOC 2, for the data centers, hardware, and network that FeatureFlight runs on.
Cloud security works on what AWS calls the shared responsibility model. In simple terms: AWS is responsible for securing the underlying cloud infrastructure, and FeatureFlight is responsible for securing everything we build on top of it, including the application itself, who can access it, and your data.
How we protect your data
Our side of the shared responsibility model.
-
Hosted on AWS
FeatureFlight runs on Amazon Web Services, one of the most widely used and heavily audited cloud platforms in the world.
-
Isolated tenant databases
Every organization gets its own dedicated tenant database. Your application data is never stored alongside other customers' data in a shared database.
-
Encrypted in transit
All traffic between your browser and FeatureFlight is encrypted with HTTPS/TLS.
-
Restricted production access
Access to production systems is limited to the people who need it to operate the service.
-
Two-factor authentication
Every user can turn on 2FA with an authenticator app, and admins can see who on their team has it enabled.
-
Monitoring
We monitor our infrastructure and application for errors, availability, and unusual activity.
-
Backups
Customer data is backed up regularly so it can be restored if something goes wrong.
-
Ongoing vulnerability monitoring
We keep dependencies patched and watch for newly disclosed vulnerabilities that affect our stack.
Our approach to compliance
Our security program is designed around SOC 2 principles and industry best practices, and it's built into how we develop and operate FeatureFlight from day one.
Formal certifications, like an independent SOC 2 audit, are on our roadmap as the company grows. AWS's certifications apply to the infrastructure we run on rather than to FeatureFlight itself, so if your organization has specific requirements, such as SOC 2 reports or HIPAA, reach out and we'll walk you through exactly how we handle your data.
Questions or a security concern?
If you're completing a vendor review, have a question about how we handle data, or think you've found a vulnerability, email us at support@featureflight.io or use our contact page. You can also read our privacy policy.
Stop running your business across seven apps.
Get the full Pro plan free through Dec 31, 2026. Set up your first project in under five minutes.
Founding Customer Program · Free through Dec 31, 2026 · No credit card required