DJI NEWS: Report on DJI Data Security Released

Last updated on

2nd May

Contents

    Last week, DJI released a report from a third-party investigation into DJI data practices. DJI’s storage, collection and use of data from their drones, software and services were under the microscope. This concluded in DJI having full control of these areas.

    The third-party was Kivu Consulting, based in San Francisco, and they focussed on DJI’s USA data. Keep reading to find out more about Kivu’s report.

    What data did they collect?

    Kivu wasn’t provided directly by DJI, instead, they independently acquired the DJI Spark, DJI Mavic, DJI Phantom 4 Pro and the DJI Inspire 2. Kivu also obtained copies of DJI’s GO 4 mobile app directly from Apple and Android stores.

    Whilst Kivu operated the drones, they captured data transmitted from the DJI GO 4 app. They additionally analysed servers utilisedย by the DJI to store transmitted user data.

    Kivu was also provided access to DJI engineers and managers, as well as spending several days with the team discussing the products, software development, and information security practices.

    What’s the diagnosis?

    • Data Storage and Transmission

    DJI’s drones and the flight control system have the abilityย to capture data such as videos. flight logs and photos. DJI cannot automatically create multimedia files. Users have to physically film and capture the data themselves, this includes video, photos and flight logs.

    • Audio

    DJI’s drones do not have onboard audio recording capabilities, therefore users must capture audio data using the microphone on their mobile device.

    • Flight Logs

    The DJI drones record flight logs and store them on the drones themselves, as well as within the GO 4 application. Customers can choose to upload the files to the DJI servers if they choose.

    • Diagnostics and the “No Fly Zone” Data

    By default, the drones transmitย diagnostics and location check data to DJI servers. If flying near a “no-fly zone”, data is transmitted to avoid use in restricted areas. Users may prevent these transmissions by deactivating them within the GO 4 app as well as by disablingย the internet connection.

    • Identifiable Data

    The only identifiable information used by DJI is email addresses and phone numbers. If desired by the user, details can be made anonymous. The AWS servers have also been confirmed to be designed to block unauthorised access.

    Drone Detection Service

    • DJI Servers

    Data transmitted by the GO 4 app sends to secure DJI servers. DJI use serves by Amazon Web Services, as well as Alibaba Cloud. Kivu have confirmed the AWS servers prevent unauthorised access.

    • Facial Recognition

    Kivu have ascertained DJI drones don’t have the ability to facially recognise users, and also don’t use facial recognition software.

    Summary

    It’s easy to see from the report that DJI’s data is secure and safe, and therefore welcome news for DJI users. Given recent media controversies elsewhere, it was a good move by DJI to conduct the external investigation and will allow them to maintain their position at the top of the commercial drone market.

    Download Our FREE RPC-L1 Guide

    Understand everything you need to know about moving towards commercial drone operations with our RPC-L1 guide.

    • Understand what RPC-L1 is and who it is for
    • Learn how the CAA transition impacts operators and training routes
    • Get a clear breakdown of requirements, costs and next steps

    Written by:
    Simon Harris

    Recognised for excellence. Explore the industry certifications that validate our commitment to quality, compliance, and continuous improvement.

    ISO 9001 UKAS quality management certification logo

    ISO 9001 Certified

    Certified quality management systems for consistent service and customer satisfaction.

    ISO 14001 UKAS environmental management certification logo

    ISO 14001 Certified

    Internationally recognised standard for environmental management and commitment to sustainable operations.

    CE Plus accreditation logo

    Cyber Essentials & Cyber Essential Plus

    Government-backed certification demonstrating the highest level of commitment to robust cyber security.

    The Equality Register Member

    Committed to promoting equality, diversity, and inclusive practices across our entire organisation.

    TQUK Recognised Centre

    An officially recognised centre for Training Qualifications UK, delivering high-standard regulated qualifications

    Elcas Logo

    Registered with Elcas

    Approved by the Enhanced Learning Credits Administration Service to provide funded training for Armed Forces personnel.

    UK CAA Recognised Assessment Entity: RAE15510

    CAA-approved to deliver drone training and assessment for RPC-L1, GVC and A2 CofC qualifications.

    FCA Registered

    Authorised and regulated by the FCA for consumer finance activities.

    UK SORA & BVLOS Operations: SORA-28947, SORA-29134

    Helping organisations obtain Operational Authorisations for BVLOS and other complex drone operations using the UK SORA framework.

    OFQUAL Gov UK Logo

    Ofqual Regulated Training

    Delivering prestigious, government-regulated training programmes that guarantee educational excellence and industry recognition.

    Latest From Coptrz

    30th September

    Transforming UK Agriculture & Forestry with Advanced Drone Solutions

    29th September

    Elevating Public Safety: How Drones Are Transforming Emergency Response

    NEW

    DJI Matrice 400

    Become a Drone Pilot

    Unlock your business potential with drone technology