How does Exspeedite protect proprietary carrier lane rates and shipper tariffs?

All rate tariffs, margin models, and contract matrices are isolated at the database level and encrypted with AES-256 at rest. Exspeedite never aggregates or anonymizes carrier rate data for resale to third-party freight indices or brokers.

What encryption standards are enforced for data in transit and at rest?

Exspeedite enforces TLS 1.3 with strict HTTP Strict Transport Security (HSTS) for all web traffic, REST APIs, and EDI AS2 connections. Data at rest—including database files, document images, and transaction logs—is encrypted using FIPS 140-2 validated AES-256 encryption.

What role-based access controls (RBAC) are supported?

Exspeedite provides granular role-based permissions allowing carriers to restrict access by operational role (Dispatcher, Safety Director, Billing Clerk, Shop Mechanic, Executive). Specific capabilities, such as viewing customer profit margins or approving rate confirmations, require explicit administrative authorization.

How frequently are database backups performed and tested?

Continuous write-ahead transaction logging allows point-in-time recovery, supplemented by automated daily encrypted snapshots replicated across multiple geographically distinct data centers with automated monthly integrity verification.

Enterprise Defense Architecture • Carrier Data Sovereignty

Built for Freight. Hardened for Enterprise Security.

Transportation operations generate mission-critical rate matrices, driver personally identifiable information (PII), and commercial lane volumes. Exspeedite secures your business with zero data-broker monetization, military-grade encryption, and multi-region resilience.

Encryption at Rest

AES-256

FIPS 140-2 Validated

Encryption in Transit

TLS 1.3

Strict HSTS Enforced

Data Sovereignty

100% Private

Never Sold to Brokers

Backup Cadence

Continuous

Point-in-Time Recovery

The 6 Pillars of Exspeedite Data Defense

Engineered to exceed corporate IT compliance standards while delivering sub-200ms dispatch velocity.

Complete Tenant Data Isolation

Unlike generic multi-tenant SaaS tools that co-mingle carrier records in single monolithic tables, Exspeedite enforces logical and architectural tenant isolation, ensuring zero possibility of cross-carrier data leakage.

• Strict tenant-scoped database contexts
• Partitioned storage vaults for document imaging
• Dedicated API authorization tokens

Carrier Data Sovereignty Guarantee

Your rate contracts, shipper relationships, and capacity numbers belong solely to you. Exspeedite does not scrape, pool, or sell freight market indices to venture capital firms, digital brokerages, or competitors.

• Zero rate-scraping or benchmarking resale
• Unconditional data ownership clause
• Complete automated database export at any time

Granular Role-Based Access (RBAC)

Control exactly what dispatchers, safety managers, accounting staff, mechanics, and drivers see. Mask load profitability from dispatchers and lock rate adjustments to authorized billing executives.

• Margin masking on dispatch screens
• Two-factor authentication (2FA) enforcement
• IP address whitelisting per office terminal

Immutable Operational Audit Trails

Every rate change, dispatch reassignment, driver pay modification, and document deletion is logged in an append-only cryptographic audit ledger with user ID, IP address, and millisecond timestamps.

• Non-repudiation on rate confirmation approvals
• Full historical change logs per shipment
• Compliance-ready audit exports for forensic review

Point-in-Time Disaster Recovery

Continuous transaction log streaming ensures RPO (Recovery Point Objective) under 60 seconds and RTO (Recovery Time Objective) under 15 minutes across multi-region high-availability server clusters.

• Multi-region geographic database replication
• Automated daily snapshots with 30-day retention
• Quarterly simulated DR failover rehearsals

Continuous Edge DDoS & Threat Shield

Exspeedite's web tier is protected by Cloudflare Enterprise edge security with unmetered DDoS mitigation, Web Application Firewall (WAF) rule sets, and intelligent bot filtering blocking automated scraping attacks.

• Layer 3, 4 & 7 DDoS mitigation
• Managed WAF with OWASP Core Ruleset
• Zero exposure of internal database IP addresses

Security & Data Sovereignty FAQs

Can our IT team review Exspeedite's SOC 2 compliance documentation?

Yes. Enterprise motor carriers conducting security reviews can request our security architecture packet, penetration test executive summaries, and compliance controls documentation under standard mutual non-disclosure agreements (NDA).

How are driver social security numbers and banking direct deposit records handled?

Driver social security numbers (SSNs) and direct deposit ACH routing/account numbers are stored using field-level cryptographic salting and AES-256 encryption. Only authorized payroll administrators can view unmasked banking information when processing settlement runs.