Security & Data Protection
Enterprise-Grade Security for
Transportation Operations
Your fleet data, driver records, and compliance documents are protected by the same infrastructure standards used by enterprise SaaS companies — built for operators who can't afford downtime or data exposure.
AES-256 EncryptedTLS 1.3 in TransitUS-Based InfrastructureSOC 2 In Progress
Data Encryption
- AES-256 encryption at rest for all stored data
- TLS 1.3 in transit — all API and web traffic
- Encrypted document storage and retrieval
- Secrets managed via environment-level key vaults
Infrastructure
- Hosted on Vercel + Convex cloud infrastructure
- US-based cloud data residency (us-east-1)
- Automatic failover and horizontal scaling
- Zero-downtime deployment pipeline
Access Controls
- Role-based permissions (owner, admin, dispatcher, viewer)
- Workspace-level data isolation — no cross-tenant access
- Full audit logging for all data mutations
- Session timeout and re-authentication enforcement
Backup & Recovery
- Automated daily backups with point-in-time restore
- Convex platform provides real-time data replication
- Multi-region redundancy for critical data
- Recovery time objective (RTO): under 4 hours
Compliance Standards
- SOC 2 Type II — audit in progress
- CCPA compliant — California Consumer Privacy Act
- GDPR-aligned data handling practices
- FMCSA data security guidelines followed
Monitoring & Response
- 24/7 automated infrastructure monitoring
- Real-time anomaly detection and alerting
- Incident response SLA: acknowledgment within 4 hours
- Security patches deployed within 24 hours of disclosure
Found a Security Issue?
We take vulnerability reports seriously. Please disclose responsibly — we respond to all reports within 72 hours.
Last updated: June 2026 · Questions? security@bridgeworksone.com