Security

How Your Records Are Protected

Your compliance records are sensitive. This page describes how TruckFlow stores them, who can reach them, and what we do and don't claim about it.

Encrypted, access-controlled storage

Driver and vehicle records are encrypted in transit (TLS) and at rest, and are reachable only through authenticated requests. Document downloads use short-lived, signed links rather than public URLs.

Per-company data isolation

Each company's data is separated at the database level using row-level security. Those rules are enforced by the database on every query, so one company's users cannot read or write another company's records.

Role-based access control

Your administrators decide who can view or manage records. Permissions are enforced by role across the platform, so staff only have the access their job requires.

Record retention

Records are archived rather than permanently deleted, so document history stays retrievable for the retention periods your operation needs, including the multi-year retention DOT records require.

See How TruckFlow Handles Your Records

Walk through how driver and vehicle records are stored, isolated, and access-controlled in the platform.