Security

Protecting your data and payments is core to Flitura. We employ defense-in-depth controls across infrastructure, application, and operational layers.

Payment Security

• PCI-DSS Level 1 compliant payment processors; card data tokenized at entry.
• 3-D Secure (Verified by Visa, Mastercard Identity Check) on eligible transactions.
• No storage of full primary account numbers on Flitura servers.

Platform Security

• TLS 1.2+ encryption for all web and API traffic.
• Regular penetration testing and vulnerability scanning.
• Role-based access control and audit logs for staff systems.
• Secrets managed via encrypted vaults; production access requires MFA.

Fraud Prevention

Machine learning models and manual review flag suspicious bookings. We may request identity verification before ticketing high-risk itineraries. Chargeback abuse results in account closure and industry reporting where applicable.

Responsible Disclosure

Report security vulnerabilities to security@flitura.com. We acknowledge reports within 72 hours and coordinate fixes before public disclosure when possible.