Security & Compliance
Your data is yours
Enterprise-grade security built into every layer. From encryption to access control to infrastructure — Riven Logistics protects your brokerage, your carriers, and your shippers.
Security at every layer
From data ownership to infrastructure. Built secure by default.
Data Ownership
Your data is yours. Always. Riven Logistics never sells, shares, or trains on your brokerage data. You can export everything — shipments, carriers, customers, invoices — at any time in standard formats. Delete your account and we remove your data completely.
- Full data export in standard formats (JSON, CSV)
- Account deletion removes all data permanently
- No data sold or shared with third parties
- No model training on your operational data
- Data residency options on Platform tier
Encryption
All data is encrypted in transit and at rest. TLS 1.3 for every connection. AES-256 encryption for stored data. Database backups are encrypted with separate key management. Your carriers, shippers, and shipment data are protected end to end.
- TLS 1.3 encryption in transit
- AES-256 encryption at rest
- Encrypted database backups
- Separate key management (KMS)
- Encrypted document storage (BOL, POD, insurance)
Access Control
Six built-in role types with granular permissions. Admins see everything. Carriers see their loads. Shippers see their shipments. Every action is logged in an immutable audit trail. SSO, SAML, and SCIM available on the Platform tier for enterprise governance.
- Six role types: admin, agent, dispatcher, leadership, carrier, shipper
- Granular per-record visibility scoping
- Immutable audit log of every action
- SSO / SAML / SCIM on Platform tier
- Session management and forced logouts
- IP allowlisting on enterprise tiers
Compliance
Built to meet industry standards. Riven Logistics aligns with SOC 2 Type II controls, GDPR, and CCPA requirements. Carrier compliance verification includes MC/DOT authority checks and insurance validation. Your brokerage stays audit-ready.
- SOC 2 Type II aligned controls
- GDPR and CCPA compliant
- MC/DOT carrier authority verification
- Insurance document validation
- Data processing agreements available
- Regular third-party security audits
Infrastructure
Enterprise-grade infrastructure powered by Cloudflare, MongoDB, and Docker. Global CDN with DDoS protection. Every portal runs on the same hardened Docker image with runtime branding. Platform tier offers dedicated or on-premise deployment options.
- Cloudflare global CDN with DDoS protection
- MongoDB with automated failover and backups
- Docker containerization for consistent deployments
- 99.9% uptime SLA on Platform tier
- Dedicated Azure infrastructure option
- On-premise deployment for regulated industries
Need a security review?
Our team can provide documentation, DPAs, and answer your security questions. Enterprise customers get dedicated infrastructure and compliance support.