Security & Data Protection

Infrastructure

MoonTrip runs entirely on Amazon Web Services in the Asia-Pacific (Mumbai) region. The application is served by ECS Fargate (auto-scaling, no shared hosts) and persisted in Amazon Aurora PostgreSQL. There are no servers under desks, no shared hosting accounts, and no third-party data centres in the path.

Encryption

Data at rest

All data — database rows, file uploads, backups, logs — is encrypted at rest using AES-256 via AWS-managed keys (KMS). This includes customer PII, GSTINs, passport numbers, payment ledger entries, and vendor invoices.

Data in transit

Every connection to MoonTrip is HTTPS over TLS 1.3 with HSTS preload. We do not accept downgraded TLS or unencrypted HTTP. A strict Content-Security-Policy, X-Frame-Options DENY, and standard hardening response headers (Referrer-Policy, X-Content-Type-Options, Permissions-Policy) are set globally.

Authentication & access

• •Authentication via Firebase Authentication — battle-tested by Google's identity platform.
• •Multi-tenancy isolation — every row in the database is scoped to a tenant_id; cross-tenant reads are impossible at the query layer.
• •Role-based permissions on Pro — admin, manager, support, view-only — with per-module access (Quotes, Bookings, Accounts, Reports).
• •Session management with revocable tokens; users can sign out of all devices from settings.
• •Password policy enforces minimum length and rejects compromised passwords.

Backups

We run on Amazon Aurora PostgreSQL, which keeps a continuous transaction log for point-in-time recovery within the active retention window. Backup data is encrypted at rest with AWS KMS, same as the live database.

Auditing & monitoring

• •Every write to the database carries created_by / updated_by and a timestamp.
• •Sensitive actions (invoice deletion, void, journal reversal, refund) are logged with the operator's user id.
• •Infrastructure access is logged via AWS CloudTrail.

Application security

• •SQL injection is precluded by ORM-mediated queries; no raw string concatenation.
• •XSS is mitigated by React's automatic output escaping and a strict Content-Security-Policy.
• •CSRF is mitigated by SameSite cookies and origin checks on state-changing endpoints.
• •Dependencies are monitored for CVEs and patched promptly in critical libraries.

Compliance & data residency

MoonTrip stores data in India (AWS Mumbai). We are preparing for India's Digital Personal Data Protection Act (DPDP) obligations and treat customer data as a fiduciary in practice — minimal collection, no sale of data, deletion on request. We do not use customer data to train any third-party AI model.

For tenants with specific compliance needs (export of records for an audit, data-processing agreements), email support@moontrip.app.

Responsible disclosure