# Ensuring Enterprise-Grade Data Security with FlytBase Shield

- Event: NestGen ’25
- Published: March 7, 2025
- Length: 31:04
- Watch: https://nestgen.org/library/watch/iE4IyLerq3A/

> The transcript of a recorded NestGen session, for reading or for use with an AI tool. It comes from the video's
> captions; automatic captions can mishear names and terms.

## Transcript

**[0:20]** hello and welcome to nden 2025 I'm PR your host for the day and today we're diving into a very critical topic ensuring Enterprise grade data security in autonomous drone operations as drones become an integral part of security infrastructure infrastructure monitoring Logistics and emergency response the amount of sensitive data being captured processed and transmitted has skyrocketed with this Surge and data organizations face growing challenges to related to cyber security risk Regulatory compliances and operational Integrity but but but before we start I would like to go over some housekeeping rules have any questions for us drop them in the Q box anytime and we'll tackle them towards the end of the session the session is being recorded so you can revisit these insights later engage with us share your thoughts in the chat how does your organization currently handle drone security we'd love to know them all and last but not the least join the conversation online use the hashtag NES genen on LinkedIn and Twitter to share your to share and tag our

**[1:23]** speakers also a huge thank you to our nesg 2025 sponsors who helped make this event possible now let me ask you how do you ensure that drone fleets are protected from cyber threats data breaches and unauthorized access without compromising on operational efficiency in this session we'll introduce FlytBase's Advanced security framework designed to provide endtoend encryption secure communication and Enterprise grade data protection for fully autonomous drone operations and to walk us through this uh session we'll have we have D dulle the director of product at FlytBase will share insights into flight based Shield safeguards Enterprise drone operations against evolving security threats welcome D it's good to have you here hey thanks pish hello hello everyone welcome to n25 excited to be here and uh let me take over pra with my presentation if it's not right yes definitely D let's start thank you

**[2:30]** uh PR can you confirm if you can see my screen yes yeah so the the topic of discussion today is ensuring Enterprise grade data security with flight based Shield so uh let me first walk you through like a brief background about FlytBase and what we do the idea is that uh FlytBase is all about autonomous drone operations and to enable this drone autonomy we bring together a lot of components for example uh these are the common key components that you would need for autonomous Zone operations you would need data processing and analytic software this could be a software like drone deploy or pix 4D something that does the postflight uh data processing in terms of photogrametry or in terms of rest detection Etc that's post flight it could also be detect and avoid sensors that are required during flight to make sure that the plane or the Drone keeps away from

**[3:33]** keeps off from the man Aviation or the crude Aviation you would also need parachutes to make sure that the Drone is sa uh if in case of an emergency the Drone would land safely and not Drop Like a Stone from the sky uh you would need adsp you would need UTM systems you need Team Management drones alarms payloads the list keeps going on now to build this autonomous drone like a solution for autonomous drone operations one would need multiple such components and bring them together and lot of times there are also variations of these components for example what the kind of sensors that you need for fail safe in one geography are different from the other geography there are specific certifications that you need with your parachutes in US versus in Europe and then of course those models would be different so it's not just that these components are a lot there are variations Within These components that would would be needed based on the geography as well so solution integrators who would

**[4:34]** want to put those put these components together and build a solution that is where FlytBase comes in that is where we help you with FlytBase acts as a glue where you can put all of this to components together some of these components are built by FlytBase some are built by our ecosystem Partners many of whom are at this event today either participating or uh showcasing their products and that is how we are enabling the autonomous drone operation uh the aous Drone autonomous drone solution ecosystem so this is how uh you know uh for Enterprises we bring all those components together and uh enable the uh autonomous drone solution so FlytBase is a Enterprise Zone autonomy platform so where we put in all of these components together and the solution and the solution Partners they are able to use these components like pick and place whatever they need put depit together and they are able to create solutions for individual verticals verticals

**[5:34]** such as construction security uh drone as a first responder mining Railways solar oil and gas Etc so this is at in a nutshell I'll just give a brief overview of how this diagram looks like so at the bottom you will see Hardware which is there are a lot of drone manufacturers like DJI U and uh skyio there are many more U drone manufacturers and even some people who build their own drones so drones dogs payloads these are from third party manufacturers FlytBase is agnostic to the hardware so any solution that you create on top of FlytBase is agnostic to the underlying Hardware U and the flight based platform takes care of major four things flight automation Fleet Management flight safety and data security flight automation being ensuring that the remote flight or the fully autonomous flight is safe and making sure that uh there is no need of anybody who is holding a remote in their hand that is of course the

**[6:37]** Crux of drone the basics of drone autonomy then there is Fleet Management where you are managing multiple drones uh operating together and flight safety is of course making sure that those flights are safe uh and operators don't need to worry about flight safety uh and they can focus on their operations and then finally data security today's highlight of this uh conversation is going to be more about data security aspect on top of this flight based platform layer we provide lot of Enterprise Integrations so for example alarm data processing live streaming all of these capabilities exposed by flight Bas platform can also integrate third party systems with the flight based platform so we have lot of flinks so flinks is a term uh flight based links with thirdparty softwares like drone deploy pix 4D uh above stos Milestone uh genetic uion so these are from so these are some of these uh where the components that we just saw earlier U they could be either third party dat processing platforms they could be B uh sensors required for Boss operations uh

**[7:41]** could be Safety Systems Etc and then on top of that the operators can use any or uh rather than operators I would use the word solution U Partners what they can do is they can use any drone dock payload that they want use effective and whatever modules that they need in Flight based platform pick and choose what kind of third party systems that they want and lot of these are our ecosystem partners and then create a solution for a unique off like a unique offering for a particular industry and that is all what flight Bas does now like moving on to the data security aspect so so this is like what flight Bas brings to the table Enterprise Integrations flight safety data security we'll double down into data security today so let's understand how what are the concerns around data security and compliance today for everybody who is adopting docking stations for their Enterprise use cases

**[8:42]** uh not only the end users but also the solution Partners who are going and selling the doc solutions to Enterprises government customers Etc what are the primary concerns the end users are raising and where are things that are where are the hurdles for that process so one of the key concerns that we have seen is data thre so that is one there is a lot of uh of course there's a lot of geopolitics around data security these days but apart from that uh the docking stations are right now being deployed in lot of critical infrastructure places for example power grids uh sometimes military installations U like nuclear power plants or oil and gas refineries and some of these actually are quite critical to the Enterprise and they want to make sure that they whatever they are capturing that data is safe and it is not susceptible to any hacking attack Etc and data thre is like a very big concern there apart from this there is another important consideration these days which is

**[9:43]** uh due to the geopolitical concerns the ensuring business continuity aspect so docking station we have what we have identified uh like lot of docking stations from manufacturers they make uh uh two-way communication with other talking station uh the manufacturers or some kind of third party servers and since it is a two-way communication some third party might leverage that two-way communication and you know some push some kind of updates or uh maybe uh like U make some changes that will render the doc useless and uh you would not have that resource uh when you need it the most and those kind of concerns are also primary concerns for lot of government uh as well as uh some Enterprise customers so these are the concerns that are around mostly around data security I'll also talk about about some of these concerns around compliance so uh the data security and compliance concerns mostly the the security concerns are mostly around these two items but from the compliance perspective what customers are

**[10:43]** seeing is okay so uh there is like a lot of slowdown due to it compliance the I the problem is that like customers have brought one or five dogs for proof of concept but they're not unable they're not ble to go to production due to lack of it compliance there are multiple issues here why they are getting stuck in compliance one of them is they're asking the it admins when they operate these uh docs for POC they're looking at the network logs and they're asking why this Doc is communicating with n number of servers and like what are your data security practices uh like do you have soft for your software Etc so they have n number of questions some of those questions are stemming from the communication that the doc has with third party servers and that is where they are that is raising their eyebrows and then they're looking for more explanation so without this it clearance the docs are not deployed yet on company Network and those questions are some of those questions are tough to answer uh

**[11:47]** without uh proper understanding and without that it clearance then docs are not deployed yet on company Network which means that they're doing some kind of temporary uh network setup Etc just to show to customer how it works Etc but they are not able to scale and uh leverage it uh to fully actually solve the customer problem and then of course not able to scale so being stuck at it compliance stage they're not able to deploy at full scale so dog deployments are not moving beyond proof of concept u in in most of the cases in some cases they are but in most of the cases that is where the the whole thing is getting delayed so how does flight Bas help overcome this bottle link so this is what I'm here to talk about today so from FlytBase perspective I'll talk about few things that we are doing so one of the things is certifications and compliance we understand that uh with flight base and with docking stations uh at drones with docking stations and fully autonomous Solutions we can solve really interesting and really important problems

**[12:48]** that industry wants to solve but all of these problems are at the Cornerstone or at the heart of that industry or the heart of that Enterprise and the data that we are capturing that data is really critical to the company to the Enterprise and they want to make sure they have absolute Safeguard um safety around that data um and then in that case they want to evaluate what are the software practices that the software providers with the do are following and to make sure that we are compliant FlytBase has done all the industry standard compliances the SO2 uh Soto type 2 that is the Cornerstone of security in uh software industry and and that is the most important one and then we have ISO 270001 as well we have been maintaining these for last couple of years and we are we also are compliant with gdpr so these are three major compliances and if you have any specific requirement for a fourth compliance that would be required in your industry or to one of your particular customers feel

**[13:51]** free to let us know and we'll be happy to look into that so these are from the certification and compliance point of view what this solves is is one piece of the puzzle one piece of what the concerns the um it admins have which is from the data from the documentation perspective that what processes you follow Etc but also they have concerns in terms of what the doc is communicating or the what the Drone and dog systems are communicating to which servers and why are they communicating Etc so those are also real questions to solve these so like compliance is not enough so compliance is not are is enough compliance is not enough because they have seen that because all of Enterprises they're quite sensitive about drones and all of that while it is very powerful uh they also understand it is very risky if they uh lose their data or if the data was to go to wrong hands so compliance is not just enough what we need is we are active U deterence so what if there are tools for it teams

**[14:54]** that could provide a way for S to sandbox the draw and drone Hardware at Network level so they have seen all the communication and what if we provide a way to sandbox the dock and drone Hardware what that means is uh if we could use the dock and drone Hardware which is really great for example DJ doc uh these days uh has really mastered the art of uh uh completely autonomous operations safe uh flights Etc so if we could use such a great Hardware sandbox it make sure that it only communicates with the external servers which are approved already and does not communicate with any other server if you're able to get that assurance that would be amazing because it is not just the documentation aspect but also in practice the data would make you you would be able to make sure that data doesn't leave a particular Enterprise Network and if it is leaving that Network it is only going to intended servers and not going to any other servers and if they could Monitor and

**[15:54]** display in real time how this system is working not only that like we have compliance but we have a system which will actively sandbox the dock and drone hardware and they would also be able to see how the system works and in real time see that it is working if they were to get that that would be pretty much convincing to the end users to the it admins and also to any other governing bodies that are uh for example if you're going to the government customers so this is what we have seen is very helpful if you have concerns around particularly around DJ docs uh around the hardware any data security concerns this solution using the great Hardware that DJ has provided but at the same time sandboxing it with FlytBase uh flight Bas shield and then offering that uh uh compliance compliant plus actually secure solution to the end user we would say I would say that would be the best solution that you could have and to convince the customer and also to unlock this compliance

**[16:56]** and data security Log Jam and actually take the proof of concept to a level where the customer start scaling them so these tools will incredibly announce data security and short and time to get it compliance to solve this what we have done is we are bringing this device called air so air is a program and there's a device uh airh that we just launched and so this is called aial intelligence for robots so air is a device that sits between the doc and your internet or the Enterprise Network what that means is Doc cannot communicate with your Enterprise Network or with internet without going through air and air has a Enterprise grade firewall inside it that makes sure that the doc cannot communicate to any servers apart from intended servers that are already preconfigured so this network level sandboxing will make sure that you're able to use the great Hardware but without any data security

**[18:00]** concerns so FlytBase Air1 this is the first Hardware that we have released so this is a u basically a hard temperature hardened box uh a ruged box that you can deploy in field that goes next to the docking station and the ethernet cable from docking station would plug into air and then the internet connection to your internet or Enterprise Network would connect again plug into air Air1 so benefits of some of the benefits of air is from data security it does AI detection and uh it also of course helps with data residency and faster data transfers wherever you need that uh in lower internet connectivity scenarios you can do simless operations because of the uh having a edge module at uh at the edge U and then U if you are uh if your viewers if your command center is deployed on the same local Enterprise Network or same Enterprise Network then you can also increase the video View minutes quota by 400% because then you're not transmitting over internet

**[19:02]** but through your own local network the air also acts as a media server for the uh docking station or flight based platform so these are some of the benefits of Air1 I let me quickly show you uh how flightway shield looks like so this is when you deploy Air1 next to the doc and how we actually sandbox the hardware how how do we make sure that it doesn't send your data anywhere else apart from inter servers and then how can it admins see that working in life so this is air uh One dashboard for example you'll see drones and docks in flag base you'll also see airs listed so one air one unit goes with one dock um they are M it together and then this is how you deploy it you can look at the live maintenance dashboard of Air1 CPU usage and like temperature and all other uh data points so that you can do a remote maintenance a remote heal check and then when you go to Shield uh you'll

**[20:06]** see this dashboard where we show all current firewall blocked events so these are actively blocked events that firewall has been blocking as we um uh when the video was recorded So this dashboard is live and this dashboard helps you see wherever those blocked events are which geography are they from where the doc was trying to send your data and where how they were blocked and whatever data is being led through that is also shown on the map and you can go and filter and take a look at where all the doc is trying to communicate to and whether it is being blocked or whether it is being allowed and this gives it admins the absolute visibility into where the doc is communicating where the data is going Etc so we believe this solution would be GameChanger to making sure that uh to address all the concerns that customers have around data security so there are some of course additional a use cases AI detection so I will just show a brief video of

**[21:11]** What air can do and uh so this is how air can help with uh automatic detection of vehicle people counting them um u in live video so this is when you enable air it will uh start the object detection and now it is able to detect all the vehicles uh you can also see the live count here uh whatever number of vehicle or people that you see in the screen so we have a uh huge road map in terms of AI features that will get loaded on the Air1 unit Air1 unit comes with the state-ofthe-art Nvidia A200 U GPU and it's a commercial uh Rec commercial GPU uh the entire system is temperature hardened that gives lot of Firepower uh comp power in terms of doing Advanced AI down the line so uh we would be sharing lot of interesting updates later on so while this live detection was going on after the flight uh all the uh AI detection uh logs are uploaded here so that you have all those videos uh so that you

**[22:16]** can take a look at this later on so this is about uh Air1 and then of course apart from so we talked about to address the data security concerns we talked about first the compliance so sock to uh ISO gdpr Etc then we talked about how we are create how we created this uh flight Bas Shield program and air and A1 Hardware that actually gives you security and also lets your it admin see how the security is being enforced in real-time basis apart from these we take care of uh within our software stack we make sure that from the data security side and from the operation and access control site we provide or 2.0 role based Access Control to make sure that users are able to within their organization uh uh segregate access and uh uh control uh and access to data relevant data uh from a network security point of view uh all communication um

**[23:19]** is firewalled so that uh from the network security perspective uh also even from a u taking that data from docking station to Cloud we make sure that is all this SSL encrypted and we use as 256 which is uh standard uh in software industry for such data and we take care of data backups Etc so all everything that uh uh that we need to take care from our side so that our platform is secure we take care of those we uh do frequent third party VP assessments uh vulnerability and assessment uh vulnerability and uh uh penetration testings of our platform using third parties and if you want to look at some of those reports uh you can reach out to us and we'll be uh in one-onone basis we can share those as well so this is all we do from the uh uh data security perspective uh even after all of this uh there are some scenarios and some situations uh where customers cannot just work with you know uh what we already

**[24:22]** have and they need even um larger kind of uh even um I would say uh concrete measures to tackle data security in such cases what we do is we provide them flexible deployment options we provide on premise completely air gapped as well so um what that means is uh some server hosted either in customers data center or on their uh uh infrastructure uh maybe a computer that they host uh and run on their site which is completely air gapped which means it doesn't talk to internet at all everything is local of course it doesn't give any advantage in terms of remote operations but anybody who is next to that system and on that same network would be able to leverage such a system so uh deploying such airgap and on premise system on Enterprise networks means that such a system would be available on the Enterprise Network wholly but not to the outside internet so that gives that Assurance also in some cases it's not more about data security but more about uh data residency Norms

**[25:26]** or the data residency rules for example in UK or in EU EU if you have a government customers it is very likely they would want you to host their host your data uh host the flight based data and flight Bas servers in that same geography um so in such cases we provide in country Cloud offering as well so that customers can go and um U they can have their entire data hosted in their country uh to meet with the data residency laws so so with all of these options the compliance actually security monitoring that the the monitoring dashboard so that you can see that security working flight bases internal security uh uh initiatives and also these flexible deployment options all of these options put together FlytBase provides solution providers and also to the end users like a good solution that they can adopt they can pick what they want and they have enough options to choose from and to meet their internal security concerns internal data security data residency or compliance

**[26:28]** concern and to make sure that finally they're able to scale so with this solution we have already worked with lot of U uh major government customers in Europe in Us in uh other geographies as well as well as uh oil and gas companies energy companies and we have helped them through their compliance so we have deep expertise into this now so uh uh if you have any questions any concerns around how to work with your customer and how to move the nle on the um uh data compliance data security and compliance will be happy to help you out so that's it from my side and I'll be happy to take uh any questions wow uh thank you D that was really an insightful discussion and after this session I'm sure I'm clear that data security is no longer just an IT concern it's a mission critical requirement for scaling drone operations in Enterprise environments and uh huge thank you for uh to you the for walking us through flight Bas shield and how it protects uh uh drone deployments from cyber

**[27:31]** threats and in the interest of time we do have a few questions so if you could just U take one I'll uh read it out so uh D what security risks exist when integrating drone data with third party Cloud platforms and how can they be mitigated so the major risk is looking at the data so that's always about the data that you're actually sharing and if you're sharing uh data with a third party Cloud platform the what needs to be seen is is it the postflight data or is it a live communication is there a risk for the third party platform to leverage that and actually be able to control the dog and drone that would be like one of the top risks then the risk is actually if you're just sending data and if they would just have access to data and use it in a uh like a manner that you don't want to then in that case that is just the data that is at risk and um so apart from this uh the communication if the third party platform is of course not will uh not a bad actor here but are they

**[28:35]** ensuring that whatever data transport that they're using to take the data from the Drone or the dog to their platform is that reliable is that com is that channel secure are they using encryption so those are some of the concerns um those are some of the factors that I would look at yeah okay um thank you DJ one last question how does FlytBase shield ensure compliance with gdpr ISO 27001 and other data privacy regulations so flight based Shield uh provides you with so by default flight based platform is uh uh compliance compliant with all these standards and uh under flight based Shield program we help you with answering any questions that your end customers or if you are the end user in that case your it team whatever questions they have uh we our support team helps you answer those uh any it questioner we like now have filled a ton of them so uh we can help you accelerate that process um and from a compliance point of view we have everything so uh it what remains is just uh

**[29:41]** accelerating that process and we just you know help you that help you with that I can also see one more question how does flight based Shield protect against GPS poofing signal jamming and remote hacking so GPS poofing signal jamming those are not something that flight Bas Shield covers at this point of time at least uh that's more for drone or dock manufacturers to like you know uh work upon because U that's not something we have expertise into or even Direct Control on so I'm assuming DJI skyo and a lot of other drone manufacturers are working every day on solving this problem we are more about remote hacking attempts through Network that's like most of our FTE and that's where that's where we protect uh yeah that's about it all right so thank you everyone thank you everyone for joining today's session and uh I hope it was informative uh and again uh sit back and uh enjoy rest of the

**[30:46]** show y