Refresh 31 is live. Mass Mod A909 mandatory for all MAS contractors. Join the waitlist
Security

How we protect contractor data.

MAS Pilot processes government contractor data. We take that seriously. Here's what we do to protect it.

Encryption

In transit and at rest

All data transmitted to MAS Pilot is encrypted in transit. All data stored is encrypted at rest. Transactional pricing data is validated in-memory and never written to disk.

Access Controls

Least-privilege by default

Role-based access controls ensure team members only access data relevant to their role. Administrative access requires multi-factor authentication. All access is logged.

Pricing Data

Zero persistence for sensitive data

Transactional pricing data is validated in-memory only. It is never transmitted beyond the validation session or stored on MAS Pilot servers.

Reporting a vulnerability

If you've found a security issue, please report it responsibly before public disclosure. We aim to respond to security reports quickly and to resolve confirmed vulnerabilities as a priority.

[email protected]