Security

Verifiable controls for sensitive passenger operations.

PaxRelay combines tenant isolation, least privilege, controlled integrations, data minimization and a traceable record of operational actions.

Controls in place

Controls applied at the data and application boundaries.

Organization boundaries, role permissions and sensitive internal actions are enforced where data is stored and where people act.

Passenger and operational data is limited by purpose, retained according to the operating need and excluded from unrelated systems.

Tenant isolation: Separate operator data and enforce access boundaries at the application and data layers.
Least privilege: Limit people, services and integrations to the permissions required for their role.
Auditability: Record operational events, decisions, approvals and communication outcomes.
Encrypted transport: Use secure transport for browser, service and integration traffic.
Secret handling: Keep privileged credentials server-side and outside source control and browser bundles.
Controlled integrations: Authenticate sources, validate payloads and scope each connection to its purpose.

Walk through data flows, access boundaries, integration authentication and the evidence required for your technical review.