Security
Your lanes, rates and carriers stay yours.
Review encryption, tenant isolation, access control and recovery. Visit our trust center for available reports and security documents.
Your data
What matters most goes first.
Never shared with another customer
Your rates, lanes, customers and carrier history are learned from your loads and used on your loads. No other brokerage sees them.
Your carriers aren't for rent
Chain doesn't run a marketplace on both sides of your freight. Autopilot works for your brokerage, inside rates you set.
No training on your data
Chain doesn't train foundation models. We use commercial model providers under agreements that exclude training on customer content.
One exception, for safety
When a carrier trips a fraud signal on one load, other brokerages with that carrier on an active load get warned. That alert carries a safety signal, never anything commercial.
Posture
Where we stand, stated plainly.
We won't describe our status more favorably than it is, and we'd encourage the same scrutiny of every vendor you evaluate.
| Area | Status |
|---|---|
| SOC 2 | SOC 2 Type I completed. SOC 2 Type II in progress. |
| Penetration testing | Third-party test planned. Summary available on request once complete. |
| Security documents | Request available reports and security policies through our trust center. |
| Your questionnaire | Send it over. We'll fill it in and join a call with your IT team if that's faster. |
| Data in transit and at rest | TLS 1.2+ on every connection; AES-256 at rest with keys managed in AWS KMS |
| Network | Private VPCs on AWS, with no public IPs on internal services or data stores |
| Access | Least-privilege, role-scoped access, and logical tenant isolation with no cross-tenant path |
| Sign-in | Google SSO and MFA |
| Recovery | 99.9% uptime target, 35-day point-in-time recovery, 24/7 on-call, SEV-1 escalation to senior engineering within 15 minutes |
Product controls
Questionnaires rarely ask this. They should.
- Pickup numbers are gated.Released only with tracking confirmed and the truck inside your distance threshold. Never guessed.
- Load details can wait for identity.In booking, stops stay hidden until the carrier's MC or DOT resolves, unless you choose otherwise.
- Vetting runs before a rate con.Through your vetting platform (Highway, MyCarrierPortal and others) with your policy, so a failing carrier gets a clean decline.
- Quiet hours are enforced at send time.Nothing goes out after hours just because a message arrived earlier.
- It says it's AI when asked.It signs as your rep, and answers honestly if a carrier asks who they're talking to.
- Silence is a valid outcome.With no safe answer, it says nothing and leaves the thread for a person.
Location integrity
We see the device, not just the ping.
Because tracking runs on Chain's own driver app, location integrity is a security control as much as a feature. These signals need the Chain app as the tracking source; a pasted third-party link gives you a location, not a device.
- Rooted and jailbroken devices, and device attestation at login
- Emulators fingerprinted server-side
- Impossible movement and IP-to-GPS mismatches
- Mid-shipment device swaps
- Disagreement between the app, the ELD and the TMS
- Carrier-wide warnings: a signal on one load flags every active load with that carrier
Questions
What IT teams ask
Do you train AI models on our data?
No. Chain doesn't train foundation models. Inference runs through commercial providers listed on our subprocessor page, under agreements that exclude training on customer content.
Do other brokerages see our carriers, lanes or rates?
No. The only platform-level signal that crosses customers is a carrier fraud warning, which contains nothing commercial.
How long do you keep messages and documents?
Message content stays on the load's thread, which is what makes a six-month-old claim reconstructable. Verification documents follow a retention policy you set per workspace. Deletion and export requests go through your delivery manager, with the timeline in writing.
Who at Chain can see our loads?
Your delivery manager and the Solutions engineers configuring your workspace, on a least-privilege basis. That's what makes same-day tuning possible.