SECURITY & DELIVERY
Where it runs, who operates it, and what that means for your data.
The same product in all three cases. What changes is where it sits, who keeps it running, and which parts of it your own perimeter contains.
Delivery models
Three delivery models
The descriptions here match the ones on the pricing page. Choosing here changes nothing; it is the same choice, described in more detail.
-
SaaS
Fully managed. Nothing to install.
- Data residency
- Maestranza-operated environment
- Who operates it
- Maestranza
- Updates
- Continuous, managed for you
- Integration
- Over the network, through the GIS plugin or the API
- Typical fit
- Airports without an appetite to run another platform
-
Mixed-Mode
Application managed by us, sensitive data stays with you.
- Data residency
- Application with Maestranza, sensitive data in your estate
- Who operates it
- Maestranza operates the application; you hold the data
- Updates
- Managed, coordinated with your change process
- Integration
- Direct to systems inside your perimeter
- Typical fit
- Airports with data residency constraints but no wish to operate the app
-
On-Premise
Entirely inside your perimeter. Your infrastructure, your control.
- Data residency
- Entirely within your infrastructure
- Who operates it
- Your team, with our assurance agreement
- Updates
- Scheduled, on your terms
- Integration
- Internal, without egress
- Typical fit
- Airports where nothing leaves the perimeter
Posture
Security posture
The sections below are the questions a security review asks. None of them is answered on this page until the answer is confirmed in writing — a plausible answer here would be worse than no answer.
- Data residency
- To confirm where data is stored per delivery model, and in which jurisdictions
- Access control
- To confirm authentication, SSO, role model and privilege separation
- Audit logging
- To confirm what is logged, retention period, and who can read it
- Backup and recovery
- To confirm backup frequency, retention, and tested recovery objectives
- Vulnerability disclosure
- To confirm disclosure contact and response commitment
- Certifications
- To confirm certification status — none is claimed until confirmed
No certification badge, compliance logo or attestation appears anywhere on this site. When one is earned and confirmed, it will appear here with the scope and date it was issued under.
Commercial
How it is bought
Licensing and warranty terms are flexible. AWM is available on a subscription basis or under a perpetual licence with an ongoing assurance agreement, structured to fit your capital and operating budget cycles.
-
Subscription
Operating budget, renewed for the term.
-
Perpetual licence
Capital purchase, with an ongoing assurance agreement.