Polaris Aero uses Microsoft Azure – a certified, monitored, and audited cloud-based system that provides high up-time and maximum security.

The Azure environment is protected using multiple layers of security controls. All traffic to the environment passes through next-generation firewalls which provide advanced threat analysis, and Azure Network Security Groups are used to limit access between internal network units.

Azure Active Directory is used to authenticate Polaris Aero system administrators who need access to the environment. An Azure Managed Domain functions as a secure proxy that only allows select Polaris Aero users to access the environment, thus isolating this group of users from the rest of Azure Active Directory.

Access to virtual servers requires a Virtual Private Network (VPN) connection that requires multiple levels of authentication before providing access: VPN credentials, VPN certificate, Azure Active Directory credentials. 

Data Storage and Encryption

All data is stored in a Microsoft-managed SQL Server Managed Instance (SQL MI), a high-performance, scalable, redundant database platform with strong security boundaries. Data backups are continuous and geographically redundant.

All data is encrypted at rest, in transit inside the application network, and between Polaris servers and user devices. 

The Azure environment is setup with automated scans for security and other best practices. Polaris Aero reviews the scan results regularly and selectively implements the recommendations.