Security & trust
Your operation’s data, handled like it matters.
Here is exactly what Haulbeam does to protect your company, your customers and your drivers — stated plainly, with no certifications we don’t have.
Protections at a glance
Company-isolated data
Each company’s data is kept separate from every other company’s, and a dedicated automated test suite checks that isolation.
Encrypted in transit
Traffic between the apps and Haulbeam is encrypted, and requests are rate-limited to blunt abuse.
Malware-scanned uploads
Files you and your drivers upload — exports, BOLs, PODs, receipts — are scanned for malware.
Append-only audit log
A tamper-evident record of what happened in your account. Entries are added, never edited or removed.
You own your data
Your data is yours. Export it at any time, and for 30 days after you leave.
No selling. No training.
We don’t sell your data and don’t use it to train AI models offered to anyone else.
In the product
Built in, not bolted on.
Company isolation, tested
Every company’s workspace is separated from every other’s. A dedicated automated test suite checks that one company can’t read another company’s records.
Encryption in transit
Connections between the apps, your browser and Haulbeam are encrypted.
Malware scanning of uploads
Exports, bills of lading, proof-of-delivery photos and receipts are scanned for malware.
Append-only audit log
Actions in your account are recorded in a log that is only ever added to — never edited.
Rate limits and access controls
Requests are rate-limited, and administrators decide which roles see which parts of the operation.
Approval before anything leaves
E-mails, EDI messages and webhooks drafted by Haulbeam are never sent until a person in your company approves them.
Your data
Yours to keep. Yours to take.
You own your data
The data you and your connected systems send to Haulbeam belongs to your company. Export it any time — and for 30 days after you close your account, after which we delete it unless the law requires us to keep it.
No selling. No training.
We don’t sell your data, don’t use it for advertising, and don’t use it to train AI models offered to others.
Network data is opt-in and de-identified
Lane benchmarks on the load board network use only aggregated, de-identified figures, and only for companies that enroll.
Payments through Stripe
Card payments are handled by Stripe. We receive plan and payment status — not full card numbers.
Processed in the United States
Haulbeam is operated from the United States, and data is stored and processed in the United States.
Drivers
Tracking only on duty. Always visible.
Drivers are more likely to use an app they trust. Haulbeam Driver is built so they can.
- Location only while on duty and on a trip. Tracking stops when the driver pauses, goes off duty or ends the trip.
- Always visible. The app shows whether tracking is on at all times.
- “What my company sees.” Drivers can check exactly what their office can see.
- Motion stays on the phone. Motion data used to lock the screen while driving is processed on the device and not sent to us.
- Delete my account. Drivers and office users can delete their own accounts in the app.
What we don’t claim
Haulbeam has not completed a SOC 2 audit and does not hold SOC 2, ISO 27001 or HIPAA certifications. We won’t say otherwise until an independent auditor does. Our Terms and Privacy Policy are drafts pending attorney review.
Found a security issue? E-mail support@haulbeam.info with the details. Please don’t test against other companies’ data.