generated: '2026-08-26'
method: searched
source: https://percepto.co/your-drone-inspection-data-is-secure/
note: 'Percepto publishes no machine-readable contract, so no standard could be derived from a
  specification. The entries below are read from Percepto''s own published statements and from
  live probes of its hosts. domain_standard_conformance is NOT asserted: the AIM API schema is
  behind a customer login, so there is no contract in which a domain-standard signature could be
  observed. Percepto''s market (industrial inspection / UAS telemetry) does have candidate
  standards — MAVLink, ASTM F3411 Remote ID, MQTT/Sparkplug B — and the perceptoDrones GitHub
  organization carries a fork of the upstream MAVLink library, but a fork is not a declaration by
  the AIM contract and is deliberately not scored as conformance.'
standards:
- id: iso-27001
  conforms: true
  evidence: 'Percepto states it received ISO 27001 certification; published on its own site,
    2023-07-31: https://percepto.co/your-drone-inspection-data-is-secure/'
- id: soc2-type-ii
  conforms: true
  evidence: 'Percepto states it "successfully passed a SOC 2 Type II audit" performed by Ernst &
    Young, covering access controls and reviews, software development, network and platform
    monitoring, vendor risk management, and security and compliance monitoring; published
    2023-07-31: https://percepto.co/your-drone-inspection-data-is-secure/'
- id: tls-1-3
  conforms: true
  evidence: 'Probed 2026-08-26 — percepto.co and drones.percepto.co both negotiate TLSv1.3
    (security/percepto-domain-security.yml).'
- id: hsts
  conforms: true
  evidence: 'Probed 2026-08-26 — HSTS present on both hosts (percepto.co max-age=63072000;
    drones.percepto.co max-age=8640000, includeSubDomains, preload).'
- id: dmarc
  conforms: true
  evidence: 'Probed 2026-08-26 — DMARC published for percepto.co with policy quarantine.'
- id: dnssec
  conforms: false
  evidence: Probed 2026-08-26 — no DNSSEC on percepto.co.
- id: rfc9116-security-txt
  conforms: false
  evidence: /.well-known/security.txt returns HTTP 404 on percepto.co and drones.percepto.co.
- id: oauth2
  conforms: unknown
  evidence: 'Not determinable — /.well-known/oauth-authorization-server and
    /.well-known/openid-configuration both 404, and the AIM login is a first-party form at
    /loginview/. No published auth contract.'
- id: rfc9457-problem-details
  conforms: unknown
  evidence: No public contract or error reference to read.
certifications:
- ISO 27001
- SOC 2 Type II
compliance_page: https://percepto.co/your-drone-inspection-data-is-secure/