ISO/IEC 27001:2022
information security management
- Certificate
- 160426-7
- Issued by
- QMSCERT, under ESYD accreditation
- Valid
- 16 April 2026 to 15 April 2029
About / Security
Security and certifications: Nesso Labs S.r.l., operator of FlyItalyADSB
Building a commercial product on FlyItalyADSB? Your supplier is Nesso Labs S.r.l., an Italian company certified to ISO/IEC 27001:2022 (certificate 160426-7, issued by QMSCERT under ESYD accreditation, valid until 15 April 2029), with ISO/IEC 27017:2015 and ISO/IEC 27018:2019 for cloud services and personal data, and ISO 9001:2015 for quality management.
The certificates
| Standard | What it covers | Certificate | Issued by | Valid | Verify |
|---|---|---|---|---|---|
| ISO/IEC 27001:2022 | information security management | 160426-7 | QMSCERT, under ESYD accreditation | 16 April 2026 to 15 April 2029 | QMSCERT validator ↗ Original PDF |
| ISO/IEC 27017:2015 | information security controls for cloud services | 190526-2 | QMSCERT | 19 May 2026 to 18 May 2029 | QMSCERT validator ↗ Original PDF |
| ISO/IEC 27018:2019 | protection of personal data (PII) in public clouds, as a processor | 190526-3 | QMSCERT | 19 May 2026 to 18 May 2029 | QMSCERT validator ↗ Original PDF |
| ISO 9001:2015 | quality management | 160426-6 | QMSCERT, under ESYD accreditation | 16 April 2026 to 15 April 2029 | QMSCERT validator ↗ Original PDF |
ISO/IEC 27017:2015
information security controls for cloud services
- Certificate
- 190526-2
- Issued by
- QMSCERT
- Valid
- 19 May 2026 to 18 May 2029
ISO/IEC 27018:2019
protection of personal data (PII) in public clouds, as a processor
- Certificate
- 190526-3
- Issued by
- QMSCERT
- Valid
- 19 May 2026 to 18 May 2029
ISO 9001:2015
quality management
- Certificate
- 160426-6
- Issued by
- QMSCERT, under ESYD accreditation
- Valid
- 16 April 2026 to 15 April 2029
Measured uptime
Our probes check every component of the service, and the results are public.
In production
FlyScout (Apptractor), an app that finds unusual flights worldwide, on the Pro plan. “Really happy I switched to your service.” (Stan, Apptractor).
Who builds on it →Who operates FlyItalyADSB?
Nesso Labs S.r.l. (Brescia, Italy; VAT IT04754860981) operates the FlyItalyADSB API, MCP server, website and billing; the receivers that feed the network are run by volunteers.
The receivers belong to the volunteers who run them (the feeders) and are outside the company’s management system. Registered office: Via Carlo Cattaneo 3, 25121 Brescia (BS), Italy. Contact: [email protected].
Is the company behind FlyItalyADSB ISO 27001 certified?
Yes: Nesso Labs S.r.l. is certified to ISO/IEC 27001:2022 (information security management; certificate 160426-7, issued by QMSCERT under ESYD accreditation, valid until 15 April 2029).
The scope, as QMSCERT writes it: “Design, development and marketing of cloud-native software solutions and digital platforms, also delivered in SaaS mode”, with a documented Statement of Applicability, rev. 1 of 12 April 2026; on the Italian certificate: «Progettazione, sviluppo e commercializzazione di soluzioni software e piattaforme digitali cloud-native erogate anche in modalità SaaS». It stays valid only if the company passes QMSCERT’s annual surveillance audits.
Which other certifications does Nesso Labs S.r.l. hold?
Nesso Labs S.r.l. also holds ISO/IEC 27017:2015, information security controls for cloud services (certificate 190526-2), and ISO/IEC 27018:2019, protection of personal data in public clouds as a processor (certificate 190526-3), both issued by QMSCERT and valid until 18 May 2029; and ISO 9001:2015, quality management (certificate 160426-6, issued by QMSCERT under ESYD accreditation, valid until 15 April 2029).
ISO/IEC 27017 and ISO/IEC 27018 add to ISO/IEC 27001 and have the same scope.
How can I verify Nesso Labs S.r.l.’s certificates?
Each certificate has its own page on QMSCERT’s validator and its original PDF issued by QMSCERT, both linked below.
QMSCERT (Q-CERT), 5 Maria Kallas Str., GR 555 35 Pylaia, Thessaloniki, Greece, www.qmscert.com.
- ISO/IEC 27001:2022, 160426-7: QMSCERT validator ↗ · Original PDF
- ISO/IEC 27017:2015, 190526-2: QMSCERT validator ↗ · Original PDF
- ISO/IEC 27018:2019, 190526-3: QMSCERT validator ↗ · Original PDF
- ISO 9001:2015, 160426-6: QMSCERT validator ↗ · Original PDF
Can I use the FlyItalyADSB API in a commercial product?
Yes: commercial use is allowed on every plan, Free included, inside apps and devices you sell too, with one attribution line: “Flight data: FlyItalyADSB (flyitalyadsb.com), CC BY-SA 4.0”.
One key per product. Over a limit the API answers with an error, never an extra charge. The rules: flyitalyadsb.com/data/products/using-the-data.
Does FlyItalyADSB have an SLA?
No: the service is best effort, with no SLA, and its measured uptime is public on the status page.
An SLA can only be agreed in a written, tailored agreement (terms of service, section 2).
How do I start using the FlyItalyADSB API?
A free API key takes an email address and about a minute, and the plans are on the API page; for a vendor or security review, write to [email protected]: we send the certificates and company details.
Reporting a security issue
Write to [email protected]. The same address is in /.well-known/security.txt.
Changes
- : page published.