New Independent Audit of Select DJI Products Successfully Tests Against National Cybersecurity and Privacy Protection Standards
Germany’s TÜV SÜD Finds DJI Drones and Apps For Consumer Market Fulfill Key Cybersecurity and Privacy Protection Requirements
November 30, 2022 – DJI, the world’s leader in civilian drones and aerial imaging technology, has strong protections in place for customer data in its drones and apps for the consumer market, according to a new independent audit of DJI product cybersecurity features. Multiple private firms and government agencies have validated the security of DJI’s products made for professionals, and this new assessment audit from the German testing and certification firm TÜV SÜD focused on similar implementations of security features for people who use DJI products for fun and entertainment.
TÜV SÜD analyzed the DJI Mavic 3, Mini 2, and Air 2S drones, as well as the DJI Fly app for iOS and Android, which are all aimed at the consumer market. It follows other independent reviews by Booz Allen Hamilton, FTI Consulting, the U.S. National Oceanic and Atmospheric Administration, U.S. cybersecurity firm Kivu Consulting, U.S. Department of Interior, U.S. Department of Homeland Security, and others, which reviewed cybersecurity protocols for DJI drones used in sensitive government and business operations.
“DJI builds strong data protections into all our products, and our Enterprise customers know their professional drones and apps are built from the ground up to protect their photos, videos and flight logs,” said Christina Zhang, Senior Director of Corporate Strategy at DJI. “With this new TÜV SÜD audit, DJI can offer the same assurance to people around the world who use our consumer products as well. From a small drone in a backyard to a large drone in a life-or-death public safety operation, a broad array of independent experts have shown that DJI products give their users full control over their data.”
TÜV SÜD’s assessment process involved the firm purchasing DJI Mavic 3, Mini 2, and Air 2S drones independently through open commercial channels and downloading the DJI Fly app for both iOS and Android. For testing, they adopted select provisions from the cybersecurity standards of the US National Institute of Standards and Technology (NIST) and European Telecommunications Standards Institute (ETSI), as well as the industry-recognized Open Web Application Security Project (OWASP) Mobile Application Security and The Penetration Testing Execution Standard.
“DJI Drones have comprehensive security features based on standards of practice, and the sensitive information in communication process of App DJI Fly v1.5.10 (iOS & Android), as well as cloud flight data synchronization process of DJI Drones, are both encrypted and transmitted through SSL, which can avoid most common security risks,” the report concludes. “The cybersecurity capabilities and privacy protection aspects of DJI Drone meet the requirements of NIST IR 8259 and ETSI EN 303645 standards covered by this test.”
TÜV SÜD also performed a separate independent assessment of the DJI Matrice 300 drone, DJI Pilot flight control app, and DJI Assistant 2 computer app, which are Enterprise products designed for professional users. That assessment also confirmed that the products have comprehensive security features to protect sensitive information, and that the drone ensures compliance with the select NIST and ETSI cybersecurity standards in that respect.
To access the executive summary of the assessment , please find the consumer product summary here and enterprise product summary here.
DJI continues to emphasize its efforts to create best-in-class data security standards, and to assure customers they can continue to rely on DJI products as the most stable, reliable and innovative drone platforms.
For additional information, please contact: pr@dji.com
