Security & deployment

Your stack. Your database. Your building, if you want.

Each operator gets an isolated, dedicated environment — application server, database and identity bridge. Never a shared multi-tenant database — and never one KestrelWorks can read. We hold no access to your operational data in any deployment, encrypted or otherwise. The keys and credentials are yours alone.

Three deployment shapes

Same application, same behaviour in all three. The only thing that changes is where the database sits — and you can move between them later without changing how you work.

Single PC

Database: on that PC

One workstation holds the application and the database together. Nothing to configure, nothing else to run. The right shape for a solo operator or a single office machine, with field tablets pairing directly to it.

Local network

Database: on a machine in your network

The database moves to a server or a designated PC inside your own network; every workstation connects to it. Several roles work on the same records at once, and nothing leaves the building or depends on an internet connection.

Cloud

Database: hosted, isolated per operator

The same dedicated database, hosted rather than on your premises. Managed backups and access from more than one location — still isolated to you, still closed to us, and the application behaves identically.

Access control in three independent layers

Application

Each of the seven roles sees only its own screens and actions. Work Orders present Flight Directors and Remote Pilots with entirely distinct views, not one screen with buttons hidden.

Session

JWT sessions with argon2 password hashing. No third-party identity provider and no cloud dependency — and an admin-recovery path straight against the database, so you are never locked out of your own system.

Database

PostgreSQL Row-Level Security makes “only the assigned pilot writes their own mission” an unbypassable guarantee rather than a convention.

Licensing

Owned, not rented

Three perpetual local licence tiers — Local Solo, Local Team and Regulated Enterprise — with an optional annual support and update plan. A Hosted SaaS tier can sit on top for operators who want managed infrastructure, but nothing in the core product depends on an ongoing subscription.

Pricing is quoted per operator against fleet size, crew count and deployment shape. Design partners lock in a launch discount on the perpetual licence.

Licence tiers

Local Solo

Single operator-pilot, one workstation, one tablet.

Local Team

Multi-role office, several pilots, shared database.

Regulated Enterprise

Full SMS and governance suite, audit programme, portal, LUC-scale operations.

Request a quotation