Introduction

In an era where data privacy is paramount, DJI reinforces its commitment to safeguarding user information. A recent independent audit conducted by FTI Consulting, a team of seasoned cybersecurity experts, has confirmed the strength of DJI's privacy controls for drone operators, particularly regarding the DJI Mavic 3 Enterprise Series Thermal (DJI Mavic 3T), the DJI RC Pro controller, and the DJI Pilot 2 software.

DJI has prioritized transparency and security by subjecting its products to rigorous certifications and regular audits by industry experts and federal agencies. These audits are comprehensive, with each organization procuring DJI products off the shelf for a thorough, independent technical investigation. The latest findings from FTI Consulting provide further validation of DJI’s robust data privacy practices, building on previous assessments by reputable third-party security experts.

Key Findings from the FTI Audit

The audit focused on evaluating the network activity associated with DJI's products and yielded several significant conclusions:

1. Implementation of Security Best Practices: FTI observed that DJI employed several industry best practices, including certificate pinning and Transport Layer Security (TLS) encryption for network communications. These measures help ensure that data transmitted over networks remains secure and protected against unauthorized access.
2. U.S.-Based Data Storage: The assessment, conducted on the East Coast of the United States, concluded that all first-party data transmissions—those directed to DJI's infrastructure—resided within U.S. borders. Importantly, data is not transmitted to servers in China, alleviating concerns regarding international data transfer.
3. Reduced Network Traffic: FTI noted that the use of Remote Network Management (RNM) on the DJI Pilot 2 application effectively minimized traffic generation to both first-party Application Programming Interface (API) services and third-party services integrated within the application.
4. No Outbound Traffic with LDM: The audit also found that the implementation of Local Data Management (LDM) on the DJI Pilot 2 resulted in no outbound traffic to either first-party or third-party services. This feature appears to disable all network requests, thereby enhancing data privacy.
5. User Control Over Data Sharing: Importantly, the “Data and Privacy” options within the DJI Pilot 2 application empower users to manage their data-sharing preferences actively. Users can opt out of cloud data storage and sharing, ensuring that they have control over their personal information.

Conclusion

The results of the FTI Consulting audit further assure drone operators that DJI is committed to upholding the highest data privacy and security standards. We encourage our customers to visit the DJI Trust Center to fully understand and optimize the extensive range of privacy controls and security information available. Staying informed about the latest DJI security and privacy announcements is crucial for all users.

DJI remains steadfast in its commitment to addressing security concerns and providing our customers with reliable and innovative drone platforms. We will continue to collaborate with our partners and the broader industry to maintain the trust and confidence of our users. As the drone industry evolves, DJI’s proactive measures set a benchmark for privacy controls, ensuring that operators can confidently utilize our products while prioritizing their data security.