Certifications & Compliance
Through independent management system certifications, applicable data protection requirements, and layered technical controls, Sand Studio continuously manages security, privacy, and AI governance risks related to its enterprise products and services.
Sand Studio's information security management system is certified to ISO/IEC 27001:2022. The management system supports the company in identifying, assessing, and managing information security risks across people, processes, and technology, and in continuously maintaining appropriate information security controls.
Sand Studio's artificial intelligence management system is certified to ISO/IEC 42001:2023. The management system provides a structured framework for identifying, assessing, and managing AI-related risks and opportunities, and supports Sand Studio in continuously improving its approach to responsible AI management.
Sand Studio is committed to privacy and data protection. In handling personal data, we follow relevant privacy and data protection principles, including where the GDPR applies. We implement technical and organizational measures to protect personal data. For more information about Sand Studio's processing of personal data, data subject rights, and other privacy practices, please refer to our Privacy Policy.
AirDroid Business is an enterprise device management solution that provides centralized device management, device security policies, and data protection controls. These capabilities can help customers subject to HIPAA strengthen the management and security of their endpoint devices and support the implementation of certain safeguards under the HIPAA Security Rule.
Using AirDroid Business does not, by itself, ensure that a customer complies with all applicable HIPAA requirements. Customers should also assess how to meet the HIPAA requirements that apply to their organization and specific use cases, configure and use AirDroid Business appropriately, and implement any additional safeguards that may be necessary.
Security Controls
We maintain user trust through layered controls spanning cloud infrastructure, communications, data processing, application development, and network security. The following is a high-level summary of our security practices. For more product-specific technical information, please refer to the Security Center.
Hosted on the AWS public cloud
Infrastructure redundancy, load balancing, and high-availability design
Network access controls and continuous monitoring
Backup and recovery measures
Appropriate safeguards for customer data at rest and in transit
TLS 1.2 or later for web and API communications
WSS for WebSocket communications
Authentication, access control, and secure key management measures
Pre-release testing and code review
Security checks for applications, dependencies, and infrastructure
Network protection and continuous monitoring
Annual third-party penetration testing
We welcome users and security researchers to responsibly report security issues that may affect AirDroid products or services. Please email Security@airdroid.com and include the affected product, a description of the issue, steps to reproduce, and any necessary supporting materials to help the security team analyze and follow up.
