Privacy and security

Your logbook, your Vault and your training history belong to you. Nothing is shared by default.

A school or instructor can only reach your records after you ask to connect and they approve. Nobody attaches themselves to your logbook.

A connection lets an instructor post lessons and write endorsements. It does not open your Vault, your flying elsewhere, or anything that happened before or after the connection.

Insuring the school you fly at does not give an insurer your logbook. Access is granted by you, for a stated purpose, with an expiry date, and you can withdraw it. A one-time report gives exactly the report ordered and nothing more.

Certificates, medicals, signatures, logbooks and reports are held in private storage with controlled access. They are not on public web addresses and cannot be reached by guessing a link.

Every permission is enforced in the database itself, not by hiding buttons. A request for something you are not entitled to is refused regardless of how it is made.

We archive rather than delete. Anything referenced by a logbook, endorsement, report or audit trail is preserved.

Significant actions — access granted, reports generated and downloaded, memberships changed, administrative edits — record who, what, when and why.

We may review a small random sample of finished Go/No-Go reports, by an automated reviewer and by staff, to check accuracy. The review sees only what was saved with that report — the flight details entered and the weather, notice and terrain data used — never your logbook or Vault. It never changes a report you received, and results are seen only by Log Scan Pro administrators.

An insurer's Integrity Screening runs only when you approve it on the report request, uses the same frozen snapshot as the report, and you can view your own result.