Platform security
- ✓ SOC 2-aligned controls (Type II certification in progress)
- ✓ SSO / SAML 2.0 & OIDC
- ✓ Role-based access control (RBAC)
- ✓ TLS 1.2+ in transit, AES-256 at rest
- ✓ Per-tenant data isolation
- ✓ Full audit logging
- ✓ Customer data excluded from third-party AI model training
Helps you comply with
- ✓ DOT
- ✓ FMCSA / ELD mandate
- ✓ EPA emissions & idling
- ✓ State waste manifests
- ✓ PCI DSS (payments)
- ✓ TCPA (customer messaging)
Deployment
Multi-tenant workspaces, isolated by design.
Single operators get one secure workspace; franchise, multi-location, and regional operators get a workspace per site with centralized roll-up and access control. The operator console and driver app run on the Haultro platform, separate from this marketing site.
Request pipeline
Five checks before data is touched.
Layer 1
TLS / HTTPS
API endpoints, WebSockets, client portal access, and IoT ingestion run over encrypted transport.
Layer 2
JWT authentication
Signed tokens carry role, organization, and expiration claims and are validated on every request.
Layer 3
Role check
Admin, Manager, Driver, Client, and Enterprise Admin permissions are enforced server-side.
Layer 4
Organization scope
Every data query is scoped by organization, so one tenant cannot read another tenant record.
Layer 5
Audit log
Actions are logged with timestamp, user, action type, and affected resources for compliance review.
FAQ
Security, answered.
How is my data isolated?
Haultro is multi-tenant with per-tenant data isolation. Each operator (and each location for multi-site accounts) has its own workspace, with role-based access control governing who sees what.
What compliance does Haultro help with?
Haultro is built to help waste and fleet operators meet DOT, FMCSA / ELD mandate, EPA emissions & idling, State waste manifests, PCI DSS (payments), TCPA (customer messaging). ELD logs, emissions and idling reports, waste manifests, and audit trails are generated from live operating data.
Is the platform SOC 2 certified?
Haultro operates SOC 2-aligned controls, with Type II certification in progress. Confirm current certification or report availability with our team for your procurement requirements.
Is customer data used to train third-party AI models?
No. Haultro uses commercial AI provider tiers with data-from-training exclusions. Operational data is processed for the specific request only, not used to train third-party models.
What happens to my data if I cancel?
Customer data is retained for 30 days for export or reactivation, then deleted after the retention window unless an Enterprise or Portfolio retention term says otherwise.
Where does the app live?
The Haultro operator console and driver app are hosted separately from this marketing site, at https://platform-haultro.com/login. App and login routes are kept out of the public index.
Get started
Talk to us about your security needs.
We'll walk your team through isolation, access, and compliance.