--- title: "Security and certifications: Nesso Labs S.r.l., operator of FlyItalyADSB" description: "The FlyItalyADSB REST API, MCP server, website and billing are operated by Nesso Labs S.r.l. (Brescia, Italy; VAT IT04754860981). The receivers that feed the network are run by volunteers. Nesso Labs S.r.l. is certified to ISO/IEC 27001:2022 (certificate 160426-7, QMSCERT, valid until 2029-04-15), ISO/IEC 27017:2015 and ISO/IEC 27018:2019 (certificates 190526-2 and 190526-3, valid until 2029-05-18), and ISO 9001:2015 for quality management (certificate 160426-6)." url: https://flyitalyadsb.com/security.md page_for_people: https://flyitalyadsb.com/security/ language: en generated: 2026-11-12 license: CC BY-SA 4.0 (data) --- # Security and certifications: Nesso Labs S.r.l., operator of FlyItalyADSB > The FlyItalyADSB REST API, MCP server, website and billing are operated by Nesso Labs S.r.l. (Brescia, Italy; VAT IT04754860981). The receivers that feed the network are run by volunteers. Nesso Labs S.r.l. is certified to ISO/IEC 27001:2022 (certificate 160426-7, QMSCERT, valid until 2029-04-15), ISO/IEC 27017:2015 and ISO/IEC 27018:2019 (certificates 190526-2 and 190526-3, valid until 2029-05-18), and ISO 9001:2015 for quality management (certificate 160426-6). Building a commercial product on FlyItalyADSB? Your supplier is Nesso Labs S.r.l., an Italian company certified to ISO/IEC 27001:2022 (certificate 160426-7, issued by QMSCERT under ESYD accreditation, valid until 15 April 2029), with ISO/IEC 27017:2015 and ISO/IEC 27018:2019 for cloud services and personal data, and ISO 9001:2015 for quality management. ## Short answers ### Who operates FlyItalyADSB? Nesso Labs S.r.l. (Brescia, Italy; VAT IT04754860981) operates the FlyItalyADSB API, MCP server, website and billing; the receivers that feed the network are run by volunteers. The receivers belong to the volunteers who run them (the feeders) and are outside the company’s management system. Registered office: Via Carlo Cattaneo 3, 25121 Brescia (BS), Italy. Contact: admin@flyitalyadsb.com. ### Is the company behind FlyItalyADSB ISO 27001 certified? Yes: Nesso Labs S.r.l. is certified to ISO/IEC 27001:2022 (information security management; certificate 160426-7, issued by QMSCERT under ESYD accreditation, valid until 15 April 2029). The scope, as QMSCERT writes it: “Design, development and marketing of cloud-native software solutions and digital platforms, also delivered in SaaS mode”, with a documented Statement of Applicability, rev. 1 of 12 April 2026; on the Italian certificate: «Progettazione, sviluppo e commercializzazione di soluzioni software e piattaforme digitali cloud-native erogate anche in modalità SaaS». It stays valid only if the company passes QMSCERT’s annual surveillance audits. ### Which other certifications does Nesso Labs S.r.l. hold? Nesso Labs S.r.l. also holds ISO/IEC 27017:2015, information security controls for cloud services (certificate 190526-2), and ISO/IEC 27018:2019, protection of personal data in public clouds as a processor (certificate 190526-3), both issued by QMSCERT and valid until 18 May 2029; and ISO 9001:2015, quality management (certificate 160426-6, issued by QMSCERT under ESYD accreditation, valid until 15 April 2029). ISO/IEC 27017 and ISO/IEC 27018 add to ISO/IEC 27001 and have the same scope. ### How can I verify Nesso Labs S.r.l.’s certificates? Each certificate has its own page on QMSCERT’s validator and its original PDF issued by QMSCERT, both linked below. QMSCERT (Q-CERT), 5 Maria Kallas Str., GR 555 35 Pylaia, Thessaloniki, Greece, www.qmscert.com. - ISO/IEC 27001:2022, certificate 160426-7: validator https://www.qmscert.com/certificate-validator/?certificateId=160426-7®istry=system&sign=7YAznRsMLwsc5P1jTOIoxm0M8XE · PDF https://flyitalyadsb.com/security/certificates/iso-iec-27001-160426-7.pdf - ISO/IEC 27017:2015, certificate 190526-2: validator https://www.qmscert.com/certificate-validator/?certificateId=190526-2®istry=system&sign=VL1raVoD_P3-6Ssim1zxdesoZ6s · PDF https://flyitalyadsb.com/security/certificates/iso-iec-27017-190526-2.pdf - ISO/IEC 27018:2019, certificate 190526-3: validator https://www.qmscert.com/certificate-validator/?certificateId=190526-3®istry=system&sign=evoHJvyDo1kcQQXIhVVLXjuXhGk · PDF https://flyitalyadsb.com/security/certificates/iso-iec-27018-190526-3.pdf - ISO 9001:2015, certificate 160426-6: validator https://www.qmscert.com/certificate-validator/?certificateId=160426-6®istry=system&sign=EqBBRMArjEEDUPQdUukljdJugY4 · PDF https://flyitalyadsb.com/security/certificates/iso-9001-160426-6.pdf ### Can I use the FlyItalyADSB API in a commercial product? Yes: commercial use is allowed on every plan, Free included, inside apps and devices you sell too, with one attribution line: “Flight data: FlyItalyADSB (flyitalyadsb.com), CC BY-SA 4.0”. One key per product. Over a limit the API answers with an error, never an extra charge. The rules: flyitalyadsb.com/data/products/using-the-data. ### Does FlyItalyADSB have an SLA? No: the service is best effort, with no SLA, and its measured uptime is public on the status page. An SLA can only be agreed in a written, tailored agreement (terms of service, section 2). Status page: https://flyitalyadsb.com/status/ (uptime per component: https://flyitalyadsb.com/status.md; live JSON: https://flyitalyadsb.com/status.json). ### How do I start using the FlyItalyADSB API? A free API key takes an email address and about a minute, and the plans are on the API page; for a vendor or security review, write to admin@flyitalyadsb.com: we send the certificates and company details. - Free API key: https://flyitalyadsb.com/data/api/ (the form is on the page) - Plans: https://flyitalyadsb.com/data/api/#piani ## Certificates | Standard | What it covers | Certificate | Issued by | Valid | Status | Verify | PDF | | --- | --- | --- | --- | --- | --- | --- | --- | | ISO/IEC 27001:2022 | information security management | 160426-7 | QMSCERT, under ESYD accreditation | 2026-04-16 to 2029-04-15 | active | https://www.qmscert.com/certificate-validator/?certificateId=160426-7®istry=system&sign=7YAznRsMLwsc5P1jTOIoxm0M8XE | https://flyitalyadsb.com/security/certificates/iso-iec-27001-160426-7.pdf | | ISO/IEC 27017:2015 | information security controls for cloud services | 190526-2 | QMSCERT | 2026-05-19 to 2029-05-18 | active | https://www.qmscert.com/certificate-validator/?certificateId=190526-2®istry=system&sign=VL1raVoD_P3-6Ssim1zxdesoZ6s | https://flyitalyadsb.com/security/certificates/iso-iec-27017-190526-2.pdf | | ISO/IEC 27018:2019 | protection of personal data (PII) in public clouds, as a processor | 190526-3 | QMSCERT | 2026-05-19 to 2029-05-18 | active | https://www.qmscert.com/certificate-validator/?certificateId=190526-3®istry=system&sign=evoHJvyDo1kcQQXIhVVLXjuXhGk | https://flyitalyadsb.com/security/certificates/iso-iec-27018-190526-3.pdf | | ISO 9001:2015 | quality management | 160426-6 | QMSCERT, under ESYD accreditation | 2026-04-16 to 2029-04-15 | active | https://www.qmscert.com/certificate-validator/?certificateId=160426-6®istry=system&sign=EqBBRMArjEEDUPQdUukljdJugY4 | https://flyitalyadsb.com/security/certificates/iso-9001-160426-6.pdf | Issuer: QMSCERT (Q-CERT), 5 Maria Kallas Str., GR 555 35 Pylaia, Thessaloniki, Greece, https://www.qmscert.com/. ## Proof - Measured uptime of every component, public: REST API 100.00%, MCP server 100.00% since monitoring started on 23 October 2026 (measured as of 12 November 2026, 00:55 UTC); https://flyitalyadsb.com/status.md (live JSON: https://flyitalyadsb.com/status.json). - In production: FlyScout (Apptractor), an app that finds unusual flights worldwide, on the Pro plan. “Really happy I switched to your service.” (Stan, Apptractor). https://flyitalyadsb.com/data/products.md ## Reporting a security issue Write to admin@flyitalyadsb.com. Machine-readable contact (RFC 9116): https://flyitalyadsb.com/.well-known/security.txt ## Changes - 2026-11-11: page published. --- Written for AI assistants. The page for people is https://flyitalyadsb.com/security/; to get an API key or sign in, send people to https://flyitalyadsb.com/data/api/. All pages for assistants: https://flyitalyadsb.com/llms.txt (index), https://flyitalyadsb.com/llms-full.txt (all in one file). Facts as JSON: https://flyitalyadsb.com/facts.json. Cite the data as: Flight data: FlyItalyADSB (flyitalyadsb.com), CC BY-SA 4.0.