How DotReady protects your data
DotReady holds sensitive driver information, including Social Security numbers, dates of birth and license numbers. This page says what we do to protect it and what we have not done yet.
What we do
- Your data is stored on US servers.
- Driver SSNs and license numbers are encrypted individually, on top of disk encryption.
- Owners and managers sign in with multi-factor authentication.
- Every change to a credential is logged with who made it and when.
- You can export all of your records at any time.
Where your data lives
[Hosting provider, US region]. Backups are encrypted and stored in the same country.
Who can see what
- Fleet Owner: everything in the fleet, plus billing and team management.
- Safety Manager: all fleet records, with no access to billing or account deletion.
- Driver: their own documents, their own status and their own DVIRs. Nothing else.
- DotReady staff: access to customer data is limited to support and debugging, and is logged.
Your data, your control
- Export every record at any time as PDF or CSV.
- Delete your account and we delete your data, subject to the retention periods in our privacy policy.
- If we ever close, you get at least 90 days notice and a full export.
What we have not done
DotReady has not completed a SOC 2 audit. We say so plainly so you can decide what that means for your business. If your insurer or a customer needs a security questionnaire, emailsecurity@dotready.io and we will answer it.
Report a vulnerability
Email security@dotready.io with the details. We will acknowledge your message within two business days.