How MmowW Protects Your Data — Security & Privacy

Encryption everywhere

All data is encrypted in transit (TLS 1.3) and at rest (AES-256). Your compliance records, flight logs, client information, and safety checks are protected by the same encryption standards used by banks and hospitals.

HTTPS/TLS enforced on every connection
HSTS (HTTP Strict Transport Security) enabled
AES-256 encryption at rest
Database hosted in Tokyo, Japan (AP-Northeast-1)

Access control — your data, your rules

Row-Level Security (RLS) ensures you can only see your own data. Not even MmowW staff can access your records without explicit authorization. Every database query is filtered by your authenticated identity.

Row-Level Security on every table
Authentication required for all data access
No shared accounts — your identity, your data
Session tokens expire automatically

Infrastructure hardened

Our servers are protected by multiple security layers. We follow industry best practices for server hardening, access management, and monitoring.

SSH key-only authentication (passwords disabled)
Firewall with minimal open ports (HTTPS only)
Intrusion detection (fail2ban — auto-blocks attackers)
Automatic security updates enabled
Security headers: X-Frame-Options, CSP, Referrer-Policy

AI privacy — your conversations stay private

MmowW AI assists you with compliance questions. Your conversations with MmowW AI are not used to train AI models. Your business data never leaves our secure infrastructure.

AI conversations are not used for model training
No customer data shared with third-party AI providers
AI responses include safety disclaimers
AI cannot access other users' data

Payment security

We never store your credit card information. All payments are processed by Stripe, a PCI DSS Level 1 certified payment processor trusted by millions of businesses worldwide.

Stripe handles all payment data (PCI DSS Level 1)
Webhook signature verification prevents tampering
No credit card numbers stored on our servers
Cancel anytime — no lock-in, no penalties

Your rights

You own your data. You can export or delete your information at any time. We believe transparency builds trust — and trust is what MmowW is built on.

Right to access — view all your stored data
Right to delete — request full data removal
Right to export — download your records anytime
No data selling — ever