Skip to main content

Security Architecture

How Army Flight Logbook Protects Your Data

Army Flight Logbook is designed using a layered security architecture that combines modern cloud infrastructure, secure application design, managed services, and operational safeguards.

Rather than relying on a single security mechanism, multiple independent controls work together to help protect user information throughout its lifecycle.

Our architecture is designed around three primary objectives:

  • Protect user information.

  • Ensure reliable access to services.

  • Minimize operational risk.

This page provides an overview of how Army Flight Logbook is structured without exposing confidential implementation details that could increase security risk.


Architecture Overview

Army Flight Logbook consists of several interconnected systems working together to provide a secure experience across mobile applications, web applications, and organizational management tools.

High-level components include:

  • Mobile Applications (iOS & Android)

  • Web Application

  • Company Management Dashboard

  • Authentication Services

  • Cloud Database

  • Secure File Storage

  • Serverless Processing

  • Payment Providers

  • Customer Support Platform

  • Email Delivery Platform

  • Monitoring & Logging

  • Administrative Systems

Each component performs a dedicated function while minimizing unnecessary access to customer information.


High-Level Data Flow

A simplified view of how information moves through the platform:

User Device


HTTPS / TLS


Authentication (Firebase)


Application Services

┌─────┼──────────────────────┐
▼ ▼ ▼
Database File Storage Background Services
│ │ │
└───────────┼────────────────┘

Company Management / Reports / Notifications

All communication between supported clients and Army Flight Logbook occurs over encrypted HTTPS connections.


Authentication Layer

Before a user can access protected information, their identity must be verified.

Authentication is provided through Firebase Authentication.

Authentication services include:

  • Secure sign-in

  • Password management

  • Email verification

  • Password reset

  • Session management

  • Identity validation

Authentication credentials are never stored in plain text.


Authorization Layer

Authentication identifies who a user is.

Authorization determines what they are allowed to access.

Army Flight Logbook implements authorization controls designed to ensure users can access only the information necessary for their role.

Examples include:

Individual Users

May access:

  • Their own account

  • Personal flight records

  • Personal settings

  • Reports generated from their information


Organization Administrators

May access organizational information according to permissions assigned by their organization.

Examples include:

  • Pilot rosters

  • Organizational reports

  • Currency tracking

  • Company Management features

Administrative capabilities vary depending on organizational configuration.


Frameworks Holdings Personnel

Internal access is restricted according to operational responsibilities.

Administrative access follows the principle of least privilege and is limited to personnel with a legitimate business need.


Data Layer

Army Flight Logbook stores information using managed cloud database services.

Examples of stored information include:

  • User accounts

  • Flight records

  • Aircraft

  • Company Management

  • Flight currency

  • Reports

  • User preferences

Application-level security rules help restrict access to authorized users.


File Storage Layer

Uploaded files are stored separately from application records.

Examples include:

  • DA Form uploads

  • PDF documents

  • Images

  • Profile pictures

  • Attachments

Files are accessed through authenticated requests and are protected by application-level permissions.


Background Processing

Certain operations are performed outside of the user interface using managed cloud services.

Examples include:

  • Report generation

  • Notification scheduling

  • Synchronization tasks

  • Maintenance operations

  • Automated processing

Separating background processing improves application responsiveness and operational reliability.


Payment Architecture

Payments are intentionally separated from Army Flight Logbook's core systems.

Purchases are processed by trusted payment providers, including:

  • Apple

  • Google Play

  • Stripe

Army Flight Logbook does not store complete payment card numbers.

This architecture reduces the amount of sensitive financial information processed directly by our platform.


Customer Support Architecture

Customer support is provided through Intercom.

Support interactions may include:

  • Live chat

  • Help Center articles

  • Product announcements

  • Knowledge Base

  • Customer conversations

Support personnel access only the information reasonably necessary to assist users and resolve support requests.


Email Architecture

Email communications are managed through trusted email platforms.

Communications may include:

  • Account verification

  • Password reset

  • Billing notifications

  • Product announcements

  • Security notices

  • Maintenance updates

Marketing communications are managed separately from essential service communications whenever reasonably possible.


Monitoring & Observability

Operational monitoring helps us identify issues before they become widespread.

Examples include:

  • Infrastructure monitoring

  • Application health

  • Performance monitoring

  • Error reporting

  • Availability monitoring

  • Authentication monitoring

  • Database monitoring

  • Background task monitoring

Monitoring data helps our engineering team investigate issues, improve performance, and maintain platform reliability.


Logging

Army Flight Logbook maintains operational logs to support troubleshooting, security investigations, and platform maintenance.

Examples may include:

  • Authentication events

  • Error logs

  • System events

  • Deployment logs

  • Infrastructure events

  • Administrative actions

Logs are retained according to operational and legal requirements and are protected using appropriate access controls.


Administrative Security

Administrative systems are protected using multiple safeguards.

Examples include:

  • Role-based access

  • Least privilege

  • Administrative authentication

  • Access reviews

  • Logging

  • Change management

  • Controlled deployment processes

Only authorized personnel may perform administrative functions.


Business Continuity

Army Flight Logbook is designed with operational resilience in mind.

Our continuity objectives include:

  • Maintaining platform availability

  • Protecting customer information

  • Supporting disaster recovery

  • Recovering services efficiently

  • Minimizing operational disruption

Specific recovery procedures may evolve over time as the platform grows.


Security by Design

Security is considered throughout the lifecycle of Army Flight Logbook.

Examples include:

  • Secure software design

  • Managed cloud infrastructure

  • Encryption

  • Authentication

  • Authorization

  • Monitoring

  • Vendor evaluation

  • Continuous maintenance

Rather than relying on a single security feature, Army Flight Logbook uses multiple layers of protection working together to reduce risk.


Continuous Improvement

Technology and cybersecurity evolve continuously.

Frameworks Holdings LLC regularly reviews:

  • Infrastructure

  • Authentication

  • Cloud services

  • Software dependencies

  • Operational procedures

  • Vendor relationships

  • Security practices

This ongoing evaluation helps ensure Army Flight Logbook continues to improve as new technologies and best practices emerge.

Did this answer your question?