You're trusting Haul Router with customer payment methods, 450,000-record customer books and the financial system of record for your business. Here's how that data is protected at every layer.
Credit cards are tokenized through Authorize.net. Card numbers never touch — and are never stored in — Haul Router, keeping your PCI scope to a minimum.
Row-level scoping isolates every tenant's data automatically on every query. One operating company can never see another's accounts, routes or financials.
Every model change is recorded — who changed what, and when — alongside a high-level activity log of business events. Nothing happens off the record.
Role- and permission-based access control governs view, create, edit, delete, export and print per resource — with temporary, time-boxed role assignments.
All traffic is served over TLS and data is encrypted at rest in managed PostgreSQL and S3-compatible object storage.
Optional SAML/OIDC single sign-on (Azure AD), plus session management, password reset and account-lockout protection for every internal user.
Security isn't a page — it's how the platform is built, deployed and reviewed. A few of the practices we hold ourselves to.
We work with procurement and IT teams at municipalities and enterprise haulers regularly. Reach out and we'll walk your security and compliance requirements through with you — including data-processing agreements, access reviews and deployment details.