HomeSecurity
TransportOne Enterprise Security and Compliance
Security, compliance, and control from day one.
Your systems stay yours
What TransportOne Doesn't Touch
The #1 concern at every company: an outside platform will change things you don't want changed. TransportOne doesn't.
Your TMS
Your transportation management system stays your execution rail. TransportOne augments it via API. It never replaces it.
Your ERP
Your ERP stays the single source of truth for demand and master data. TransportOne gets read-only access. Nothing is written back.
Your carrier contracts
No renegotiation required. TransportOne enforces your existing routing guides. It doesn't rewrite them.
Your team hierarchy
TransportOne AI agents report to humans. Escalations go to Microsoft Teams, Slack, and email.
Your data ownership
Your data stays in the US, on AWS us-east-1. TransportOne fully deletes your data when the contract ends.
Certifications
TransportOne Security and Compliance Certifications
SOC 2 Type II
TransportOne is SOC 2 Type II audited under AICPA standards. The full report is available under NDA.
ISO 27001 and ISO 27701
TransportOne is certified for information security management (ISO/IEC 27001) and privacy information management (ISO/IEC 27701).
FSMA 204, USMCA, and FMCSA compliance
Compliance with FDA FSMA 204 food traceability, USMCA cross-border trade, and FMCSA carrier requirements is built in.
GDPR and CCPA ready
TransportOne automates Data Subject Access Requests. A Data Processing Agreement (DPA) is available.
AES-256 and TLS 1.3 encryption
Data is encrypted at rest with AES-256 and in transit with TLS 1.3. There is zero cross-tenant data sharing.
Annual penetration testing
A certified third-party firm runs penetration tests on TransportOne every year. Results are shared on NDA request.
Data rights
Your Data Stays Yours. In Writing.
- Role-based access control (RBAC)
- US data residency
- Right to deletion, with a deletion certificate
- Zero offshore data transfer without your consent