Skip to content
Security at HaulGuardPro

How we protect your fleet's data

Driver licenses, medical cards, registrations and load paperwork are sensitive. This page explains, in plain language, what we do to keep them safe - and what we ask you to do on your side.

Last reviewed: October 2026

Protecting your data

The basics, done properly.

Encrypted connections

All traffic between your browser or mobile device and HaulGuardPro uses HTTPS (TLS). Certificates renew automatically and our servers tell browsers to always use the secure connection (HSTS).

Private document storage

Driver, vehicle, load, company and contact documents - and driver photos - are stored in a private area that is not reachable from the internet. There is no public link to a file; every view or download is checked by the application first.

Controlled sharing

When you share a driver, vehicle, load or document, the recipient gets a long, unguessable link. You choose what is included, links can expire, and you can protect a link with a password. Links to shared company documents stop working after 30 days.

Passwords

Passwords are stored only as salted hashes - never in plain text. Repeated failed sign-in attempts are rate-limited.

Who can see what

Your company's data belongs to your company. Access is limited by role.

Company isolation

Every account sees only its own drivers, vehicles, loads and documents. Document access is verified against the owning company on every request.

Roles for your team

Team members such as dispatchers and compliance agents get role-based access to the areas their job needs. Drivers sign in to their own portal and see only their own loads and the documents shared with them.

Change history

Changes to drivers, vehicles, documents and loads are recorded, so you can see what changed and when.

Payments

Subscriptions are processed by our payment partners, Stripe and Lemon Squeezy. Your card details are entered in their secure payment forms and are never stored on HaulGuardPro's servers. Stripe is certified to PCI DSS Service Provider Level 1, and Lemon Squeezy acts as merchant of record and processes card payments on its own platform.

Infrastructure

HaulGuardPro runs on a dedicated virtual server in a United States data center operated by Contabo.

Locked-down network

A firewall allows only web traffic. The database is not reachable from the internet, and administrative access to the server is limited to key-based sign-in.

Patched and monitored

Security updates are applied automatically, and repeated sign-in attacks against the server are detected and blocked.

Backups

The server is backed up automatically so your data can be restored after a failure.

What you can do

  • Use a long, unique password for your account and for each team member and driver.
  • Remove team members and disable driver portal access as soon as someone leaves.
  • Set an expiry date, and a password for sensitive documents, when you share a link.
  • Tell us right away if you think an account has been accessed by someone else.

Your data

You can update or delete information from your account settings. To request an export of your data or deletion of your account, email privacy@haulguardpro.com. See our Privacy Policy and Terms of Service for how we handle and retain data.

Report a vulnerability

If you believe you have found a security problem in HaulGuardPro, please email security@haulguardpro.com. We will acknowledge your report within 3 business days and keep you updated while we investigate.

  • Describe what you found, where, and the steps to reproduce it.
  • Only test against your own account and data. Do not access, change or delete other people's information.
  • Do not run denial-of-service or social-engineering attacks.
  • Give us reasonable time to fix the problem before you share details publicly.

Machine-readable contact details: /.well-known/security.txt