Security, privacy & accessibility

Your security and privacy are crucial. Read on to learn more about how we keep you and your data safe.

Platform architecture 📐

Goodwings combines AWS and Vercel to deliver a fast, secure, and scalable platform for managing corporate travel and carbon accountability. While AWS powers the back-end services, Vercel's globally distributed edge network ensures reliable and efficient front-end performance. 

Goodwings' platform architecture leverages AWS infrastructure and industry-best practices to ensure availability, scalability, and robust data protection.

Two-Factor Authentication (2FA) 🔑

Goodwings provides 2-step verification to add an extra layer of protection to you and your travelers' accounts. This feature is available to all plan types and can be set up easily in your account settings. 

Single Sign-on (SSO)  🎫

Goodwings provides Single Sign-On (SSO) functionality for all clients, independently of your plan, to access the platform through a single authentication source.

Data protection 🛡️

Goodwings employs multiple layers of security to protect user data and ensure system integrity. We use AES-256-CBC encryption for sensitive data, Bcrypt hashing mechanisms for secure password storage, and implement API rate limiting to prevent abuse. Access control is enforced through a role-permission-based system, and advanced fraud and bot detection mechanisms are in place to safeguard against unauthorized activities. These measures collectively provide a secure and reliable environment for our users. 

Accessibility 👥

A good booking experience is a must - and that includes making sure everyone can use Goodwings, in whatever way suits them best. We’re therefore very happy to be able to say that our booking platform is WCAG 2.2 compliant.