Built in Sweden. Designed with data control in mind.
Security and data control, stated precisely.
Flymetry is a private-beta product. This page lists the mechanisms that exist in the current MVP, what is still pending, and what we don't claim.
In the product today
Implemented- Organisations and roles
- Data is scoped to an organisation. Admins manage systems and members; pilots import and review flights.
- Original files kept
- Uploaded TXT files are stored byte-exact and can be downloaded again.
- SHA-256 fingerprint
- Each file is hashed; the same file can't be imported twice in one organisation. A fingerprint, not a signature.
- DJI key requests blocked by default
- Encrypted telemetry stays locked unless keys are already available locally.
- Per-organisation opt-in
- An admin can allow automatic key retrieval. It runs only at import or explicit retry.
- Strict server mode
- A server-level block that an organisation setting cannot override.
- Traceable to the source
- Flight records, exports and battery observations point back to the original file they came from.
- Key cache
- AES-256-GCM, bound to organisation and file hash. The master key lives in the same server environment.
When key retrieval is allowed, a restricted key request is sent to DJI — not the TXT file or explicit coordinate fields. DJI still receives the server's IP address and the request time.
Still pending
Planned- Offsite backups
- Production monitoring
- A production restore drill (a local restore has been tested)
- Invitations, password reset and account lockout
Not claimed
Not claimed- Security certifications or audits
- Production-hardened security
- Full network isolation — strict-local mode blocks DJI key requests, but optional Mapbox map tiles make external requests
- A specific hosting country or region (including Sweden)
- That passing CI proves behaviour on real hardware or production readiness
This website
Early-access requests are stored in a database that only the server can write to; the browser cannot read submissions back. To limit abuse, the server keeps a short-lived keyed hash of the requester's IP address and the date (never the raw IP) for up to 48 hours. The site uses no advertising pixels or tracking cookies. See privacy information.
Found a problem? Email info@felixdronarfoto.se.
See it with synthetic data
Click through the demo, or request a place in the private beta.