Last updated August 30, 2026
Data processing addendum
Status of this document
This page describes our processing model for customers. A signed DPA, if required, is executed with the order form. This web page is not a countersigned contract by itself.
Roles
For customer tenant data, the customer is the controller (or processor for their shippers). Trucktorie is a processor. For marketing-site contact mail, Trucktorie is the controller.
Isolation
Tenant access uses Row Level Security. Brokers and warehouses read column-limited views. Privileged operations run in guarded server functions. Client applications use least-privilege keys. Staff access changes revoke sessions.
Subprocessors (current product)
HERE (routing and maps). Twilio (SMS when enabled). Email delivery for product messages. Hosting for the application and this website. We will not list ELD, factoring, or fuel-card processors — we do not offer those.
Security measures (summary)
Private object storage with signed URLs. No public document bucket. Soft delete and immutable load-event history. Public tender and gate lookup endpoints are designed to stay PII-safe.
International and certifications
We market to US freight operations. We do not claim SOC 2, ISO 27001, or FMCSA certification on this site. Ask sales for the current audit posture before you rely on it in a questionnaire.