Third Party Index

Snapshot 27367

Document
Trust center
URL
https://www.skydio.com/security-trust-center
Fetched
HTTP status
200
Content type
text/html; charset=utf-8
Fetch mode
static
Size
514617 bytes
SHA-256 (raw)
d051a15b31195f2a1d03593b63ce3471fb8069cab0a3e51c9d6f245685a8208a
SHA-256 (normalized text)
c9e32f855a1bc95606274a1a25dfeffe4acf2e32c44f62fb6395f34a31ed959c

Normalized text

Scripts and page chrome removed; this is what change detection compares.

The toughest jobs need the tightest security.
Security from end-to-end
Skydio products are secure by design, safeguarding each layer of the UAS stack against external threats. From the way we source parts to the way we develop software, security is integrated from end-to-end to ensure the confidentiality, integrity, and availability of your data.
The most demanding organizations in the world trust Skydio because:
FIPS 140-3 validated encryption protects data in transit and at rest.
U.S.-based secure cloud with enterprise access controls — All customer data resides in the U.S. (AWS), with Single Sign On (SSO) support for SAML, OIDC, and Axon Connect.
Evidence Integrity — Each capture is hashed with SHA256 at the point of capture and verified in Skydio Cloud, ensuring a courtroom-defensible chain of custody.
Hardware-based key security — The Skydio Dock uses a Trusted Platform Module (TPM) to securely store encryption keys, meeting CJIS 6.0 key management requirements.
Independent review & secure updates — Skydio’s CJIS workflows have been reviewed by a FedRamp-accredited 3PAO, and all firmware/software updates are digitally signed and verified before installation.
Hardware Security
Designed, assembled, and supported in the U.S
We work with manufacturing partners to prioritize security from the start, ensuring we protect our critical systems that store data from external threats.
Manufacturing Partners
Skydio sources components from manufacturers that adhere to stringent security policies, just as we do. This helps us prioritize components sourced from companies that meet or exceed U.S. government and regulatory agency security requirements.
Secure Development
Skydio products integrate security practices and considerations throughout the entire software development process. Our secure development practices identify and remediate security vulnerabilities and risks early in the development process, making our products secure, robust, and reliable.
Secure Connectivity
Skydio’s hardware communicates using secure AES-encrypted wireless links. SkydioLink utilizes AES-256 bit encryption for both Skydio Dock and Controller operations.
Secure Updates
Software and firmware updates are digitally signed and verified to protect against unauthorized or malicious updates and enhance security and integrity.
Cloud
Hosted on secure infrastructure in the U.S.
We protect your data in transit and at rest within Skydio Cloud where our customers manage their fleet, sync media from flights, view and share live streams from current flights, and remotely control Skydio drones through teleoperation.
Hosting & Security
Skydio Cloud is SOC2 Type II certified and is hosted in the United States on Amazon Web Services infrastructure. Skydio Cloud operates out of AWS US-West and customer data is encrypted with AES-256 encryption and continually backed up. Customer data is our most protected information at Skydio, all access is carefully monitored and controlled.
Data Encryption
Data is protected in transit with TLS 1.2/1.3 encryption (non-weak ciphers). Data uploaded to Skydio Cloud is encrypted at rest with AES-256 encryption.
API Integration
Skydio offers a RESTful Skydio Cloud API, which allows customers to programmatically interact with Skydio Cloud securely. Amongst a wide range of functions, Skydio Cloud API allows customers to download and delete data from Skydio Cloud through our Skydio Cloud API.
Enterprise Single Sign-On
Skydio's enterprise SSO solution enhances security and simplifies user access with support for SAML and OIDC protocols, enabling seamless integration with identity providers like Axon Connect, Okta, and Microsoft Entra. These protocols ensure efficient identity management, authentication, and robust security for drone operations.
Compliance
Meeting the highest security standards
Skydio is committed to earning best-in-class security compliance certifications from industry-standard evaluators. Our customers can rest assured that their data is protected by security measures that meet or exceed the highest standards.
SOC2 Compliance
Skydio renewed SOC2 Type II certification in 2023. If you wish to view the report, please request a copy from your account representative.
ISO Certification
Skydio completed ISO 27001:2022 certification audit in 2023. If you wish to view the certificate, please request a copy from your account representative.Dedicated expert support from installation to daily operation.
Penetration Testing
Skydio Drones, Dock, and Cloud undergo regular penetration tests by independent security firms according to industry-standard processes. Results are shared with senior management and any discovered vulnerabilities are prioritized, tracked, and remediated. Customer data is never exposed through penetration testing.
Vulnerability Management
We regularly scan our network and cloud systems, promptly addressing and resolving any identified vulnerabilities or threats.
CJIS Security Policy v6.0 Compliant
Skydio exceeds FBI CJIS 6.0 standards with FIPS 140-3 validated encryption in transit, at rest, and during processing; hardware TPM key storage; SHA256 hashing and integrity verification for evidentiary workflows; and independent review by a FedRamp-accredited 3PAO.
AS9100D Certified
Skydio’s quality management system is certified to AS9100D, the aerospace and defense industry’s gold standard for manufacturing process control, traceability, and quality assurance.
NDAA Section 889 Compliant
Skydio does not use telecommunications or video surveillance equipment from prohibited entities identified in Section 889 of the National Defense Authorization Act, ensuring alignment with U.S. federal procurement requirements.
Texas RAMP Level 2 Certified
Skydio Cloud is TX-RAMP Level 2 certified, meeting Texas’ strict cybersecurity standards for cloud services. This certification gives government customers confidence that Skydio Cloud protects sensitive data while streamlining procurement. TX-RAMP certification ID: TX1251430
Have a security question or concern? Please contact us at [email protected].
Articles
Keep reading
Privacy, surveillance, intelligence, and transparency in public safety technology
View article
Skydio drone solutions the first and only Blue UAS-cleared DFR solution
View article
Skydio ReadyLink security update
View article
How Skydio exceeds CJIS 6.0 compliance for public safety drone operations
View article
Transparency is foundational to drone-as-first-responder success
View article
What team would you like to contact today?
Support