Trucking software security

Your fleet's data stays yours. Checked on every request.

Every office user proves who they are, each company sees only its own records, and the most sensitive details are encrypted before they're saved. Here is exactly what TruckTA does today.

Two-step sign-in and roles

Only the right people get in. Only to what they need.

  • Two-step sign-in is required for every office user: Owner, Admin, Manager, Dispatcher and Accountant.
  • The second step is a code from an authenticator app, or a one-time code by email. Remember a computer for 30 days, or never on a shared one.
  • The Owner, and anyone the company allows to edit roles, decides what each role can see and do in Roles & Permissions. Changes apply to everyone in that role within about a minute.
  • Lost phone? Use an email code instead, or ask someone in your company who manages users to reset your two-step sign-in. Owners can contact TruckTA support.
  • Choosing Sign out on the web signs that account out everywhere.
Private records

Sensitive details are locked away, even on screen.

  • Database rules keep every company's records separate, and the server checks who you are, your company and your role on every request.
  • Driver and owner-operator Social Security and tax ID numbers, driver bank details and connected-app sign-in tokens are encrypted with AES-256-GCM before they're saved.
  • The Drivers list shows only the last four digits of an SSN or tax ID.
  • Documents are private files. Opening one creates a link that expires within minutes.
  • Activity history shows who changed driver and equipment records, for people allowed to see it.
Payments and hosting

Your card goes to Stripe. Your records are hosted in the US.

  • Subscription payments use Stripe's hosted checkout. Your card number goes to Stripe, a PCI Level 1 payment provider, and never reaches TruckTA.
  • TruckTA's database runs on Supabase in Ohio and its servers on Vercel in Cleveland.
  • TruckTA uses encrypted HTTPS connections. Plain web addresses redirect to HTTPS, and browsers are told to connect to TruckTA only over HTTPS from then on.
  • Other websites can't show TruckTA's pages inside their own, a trick used to capture your clicks.
  • In browsers that support it, TruckTA's pages switch off several browser features they don't need, including payment, USB and Bluetooth device access.
Card paymentsPowered by Stripe

TruckTA never sees or stores your card number.

Infrastructure

TruckTA runs on Supabase and Vercel, whose infrastructure is independently audited (SOC 2 Type 2) and encrypts stored data with AES-256. Those audits cover our providers, not TruckTA itself.

Our promises

Plain promises you can hold us to.

Each of these is written into how TruckTA works today, our Privacy Policy or our Terms of Use.

  • Your data stays yours

    Your company keeps the rights to what it puts in TruckTA. We don't sell personal information, and we never delete company data for billing reasons.

  • Take it with you

    Export loads, drivers and more to CSV or Excel. Ask us to delete an account from the Driver App or the website.

  • Tested before it reaches you

    Changes go to a separate staging system first, and production database changes require a verified backup from the last 36 hours.

  • Drivers stay in control

    Location sharing starts only after the driver sees a disclosure and allows it. An Owner or Admin can revoke a phone at once, and location history is kept no more than 30 days.

  • Messages you can stop

    Operational texts TruckTA sends include STOP and HELP, and opt-outs are honored. Marketing emails carry a one-click unsubscribe.

  • Our providers, listed

    The services that process data for TruckTA, and what each one does, are on our Subprocessors page.

See the Subprocessors list, our location privacy notice and account deletion.

Report a security issue

Found a problem? Tell us first.

Email security@truckta.com. Our disclosure policy explains what to include, what is in scope and how we treat good-faith research.

FAQ

Security questions.

See also pricing and the Privacy Center.

TruckTA requires two-step sign-in for every office user, keeps each company's records separate with database rules, checks your company and role on the server for every request, encrypts driver Social Security and tax ID numbers, bank details and connected-app sign-in tokens with AES-256-GCM, and leaves card payments to Stripe. Your data runs on Supabase and Vercel in US data centers.
Not yet. TruckTA runs on Supabase and Vercel, whose infrastructure is independently audited (SOC 2 Type 2), but TruckTA itself has no SOC 2 report today. If your company needs security answers for a vendor review, contact us and we'll answer your questionnaire.
Every office user does: Owner, Admin, Manager, Dispatcher and Accountant. After your password, enter a code from an authenticator app such as Google Authenticator, Microsoft Authenticator, 1Password or Apple Passwords, or a one-time code we email you. Drivers who only use the Driver App don't need it unless their company gives the Driver role office permissions.
Inside TruckTA, your company's records are visible to your own users, limited by their role, and to people you choose to share them with, such as Owner Portal users or an insurance agent. Every request is checked on the server against your company and your role, and database rules keep each company's records separate. The services that process data for TruckTA are listed on our Subprocessors page.
No. Subscription payments go through Stripe's hosted checkout. Your card number goes to Stripe, a PCI Level 1 payment provider, and never reaches TruckTA's servers or database.
TruckTA's database runs on Supabase in Ohio and its servers run on Vercel in Cleveland, both in the United States. Some optional services, such as AI features, maps and messaging, are run by providers listed on our Subprocessors page and may process data elsewhere.
No. TruckTA does not sell personal information. Your company keeps the rights to the loads, documents and other content it puts in TruckTA.
Yes. Export loads, drivers and more to CSV or Excel from TruckTA. To delete an account, use Delete account in the Driver App's Account screen or the account deletion form on our website. Deletion has a short safety hold you can cancel, and some records may be kept where the law requires.
Email security@truckta.com. Our disclosure policy explains what to include, what is in scope and how we handle good-faith research.