Photo © DJI
IT & Security
Where the data lives, how access works, and what your network must allow.
Where the data lives
DJI’s cloud
Outside mainland China, data sits on AWS in the U.S. (Virginia) or Europe (Frankfurt). The region is fixed per account.
Your network
Data stays on the unit’s mirrored disks, or on your NFS, SMB or iSCSI storage.
Your servers
Your data center, private cloud or cloud tenant. DJI: it can run in a fully isolated intranet.
Access and protection
Air-gapped operation
AIO and On-Premises need internet once, to activate. After that they run without it. Cloud always needs internet.
HTTPS
AIO and On-Premises support HTTPS with your own certificate or a self-signed one. Use it beyond the LAN: browsers block the microphone and speaker features over plain HTTP.
Sign-in, SSO and roles
- Cloud: DJI account with multi-factor sign-in; SSO (third-party account login) on the Enterprise tier only.
- AIO, On-Premises: local admin, or SSO with your identity system over OAuth 2.0.
- Custom project roles and permissions; organization admin, project admin and members.
- Custom login page: AIO and On-Premises.
DJI support access
On the AIO, DJI remote maintenance is a switch you control. It is off until you turn it on, and needs internet while in use.
Certifications
DJI states FlightHub 2 holds ISO/IEC 27001 and ISO 27701. Ask us for DJI’s Data Security documentation.
Network requirements
Cloud edition
- Outbound only: encrypted web (HTTPS) and device messaging (MQTT over TLS).
- At least 50 Mbps for operators (DJI FAQ). At each dock, at least 20 Mbps up and down recommended.
- Docks need time sync (NTP) and IPv4.
- We work with your IT team on network requirements before install.
AIO and On-Premises
- Docks, controllers and operator browsers reach the server on your network.
- Web over HTTPS; device messaging over MQTT; livestream needs UDP (WebRTC) or RTMP.
- About 5 Mbps per dock for two livestreams; 100 Mbps LAN per dock.
- Public-facing servers: fixed IP and 100 Mbps symmetric.
- The server uses an internal address range of its own; we check it against your LAN before install.
- We hand your network team the full port list at kickoff.
Operator computers
- Chrome browser (On-Premises supports Chrome only).
- Minimum: Intel i5 8th gen, 8 GB RAM, discrete GPU, 1920×1080.
- Recommended: i5 12th gen, RTX 3060 class graphics, 16 GB+ RAM.
4G links
- DJI Cellular Dongle 2 with a carrier SIM.
- Size the data plan for media uploads; 4G-only docks show more video lag. Wire docks where you can.
If something breaks
AIO
System and data disks are separate, with data mirrored (RAID 1). Add external storage, and recover the system in one step. Faulty disks are swapped with a guided rebuild.
On-Premises
Back up the data directory to a NAS or object store on a schedule. DJI recommends RAID on the host plus a copy to NAS. Recovery is a reinstall plus a data restore. Moving to a new server needs a DJI license migration.
Updates
Cloud updates itself. AIO and On-Premises updates are planned: back up first, and keep FlightHub 2, Terra and 4G modules on matching versions.
Photo © DJI
Questions from IT or security?
We’ll answer them before you buy.
First Responder Owned · Veteran LedPublic safety: gov@ohiodronerepair.com · Sales: Sales@ohiodronerepair.com