How we keep your logbook safe
Your logbook is the record of your career. The Pilot Log is designed around one promise: whatever happens, you do not lose your flights.
Encrypted before it is stored
Every logbook line, your profile, your signatures and even your email address are encrypted by the application with authenticated encryption (XChaCha20-Poly1305, libsodium) before they reach the database. Each value has its own random nonce and is bound to your account, so it cannot be read or moved to another account. Your password is never stored — only an Argon2id hash.
Nothing is ever silently overwritten
Every time you add, change or delete a flight, the previous version is kept in an encrypted history. A deleted line can be restored. Signed pages are locked and sealed with a SHA-256 fingerprint of their contents, so you can prove that a page has not changed since you signed it.
Stamps you can verify
An airline, an aviation authority, a training department or a flight school can sign and stamp the pages you have signed. A stamp link is a one-time key that expires: the organisation sees only the pages you chose, read-only, and nothing else in your logbook. Each stamp keeps the SHA-256 fingerprint of every page it certifies, so it only applies while the page is unchanged. Every stamp has a code printed on your PDF; anyone can check it at thepilotlog.com/verify to see who stamped which pages and when, without seeing a single flight. Read how stamping works.
Backups every day, kept off-site
- The complete database is backed up automatically every day.
- Backups are compressed and encrypted, then decrypted again to verify they are complete before they are accepted.
- Each backup is copied to independent off-site storage, so a problem with one server cannot take your data with it.
- We keep 30 daily and 24 monthly backups.
You always keep a copy
You can download your entire logbook at any moment as a signed-page PDF, a CSV file for Excel, or a complete JSON archive. Export always works, whatever the state of your account. We will never hold your flight history hostage.
Secure access
- HTTPS everywhere with HSTS, strict Content Security Policy and secure, HTTP-only cookies.
- Optional two-step verification with any authenticator app.
- Rate-limited sign-in, and changing your password signs out every other device.
- Card payments are handled by Stripe (PCI-DSS Level 1). We never see your card number.
Questions?
Write to info@thepilotlog.com. If you believe you found a security issue, please tell us privately and we will respond quickly.