Trust is foundational at Fleet. Our security program protects your data across Fleeto, your connected systems, and the partners you collaborate with every day.
Fleet was built for regulated logistics teams. You decide where data resides, who can access it, and how long it is retained.
All inputs, outputs, and fine-tuned models remain yours.
Enterprise controls dictate retention windows and redaction.
Dedicated virtual private cloud and encrypted storage per tenant.
SSO and granular permissions align with your org structure.
Every action is tracked and exportable for compliance review.
We never commingle customer prompts or outputs across tenants.
Security reviews are not a checkbox. We integrate best practices into our engineering playbooks and partner with third-party assessors to validate our controls.
Need to run a deep dive? security@fleet.ke can share documentation and walkthroughs.
Data is encrypted end-to-end. We use AES-256 for data at rest and TLS 1.2+ for data in transit, with automatic key rotation via AWS KMS.
Fleeto runs inside private AWS VPCs with locked-down subnets and NAT gateways, exposing only the endpoints required for secure integrations.
Physical security and infrastructure hardening leverage Amazon Web Services' shared responsibility model, with all workloads deployed in hardened regions.
Every Fleet-managed laptop and mobile device is enrolled in MDM with enforced disk encryption, automatic patching, and remote wipe capabilities.
Our security and reliability teams maintain round-the-clock coverage with on-call rotations, automated alerting, and documented response playbooks.
Fleet maintains a SOC 2 Type II program with external auditors who validate our controls over security, availability, and confidentiality.
Answers to security due diligence topics we receive from shippers, brokers, and carriers migrating to Fleeto.
Yes. Data is encrypted end-to-end. We use AES-256 for data at rest and TLS 1.2+ for data in transit. Keys are rotated on an automated schedule managed via AWS KMS.
Access requires SSO with enforced MFA. Administrative actions are constrained by role-based permissions and require peer review in our change management workflow.
Enterprise plans support private cloud deployment with customer managed keys, VPC peering, and data localization to meet regional requirements.
We maintain a vendor management program that includes security reviews, contractual data processing agreements, and continuous monitoring of critical providers.
Absolutely. We provide audit guides, walkthroughs, and access to logs so your team can validate controls and satisfy regulator or customer requests.
Book a security review
Schedule time with our security team to walk through controls, documentation, and any custom requirements for your operation.