Security & Compliance
Your data is yours. We protect it accordingly.
Loady handles sensitive freight and business data. We treat security as infrastructure, not an afterthought.
Encryption
- All data in transit encrypted via TLS 1.3
- Data at rest encrypted via AES-256 (Supabase managed)
- Voice call audio processed in memory, never stored long-term
- API keys hashed with bcrypt before storage
Infrastructure
- Application hosted on Vercel (US-East, US-West regions)
- Database hosted on Supabase (AWS us-east-1)
- All infrastructure US-based — no offshore data processing
- Automated daily backups with point-in-time recovery
- DDoS protection via Vercel Edge Network
Authentication
- Supabase Auth with email/password and OAuth (Google, GitHub)
- Multi-factor authentication (MFA) available for all accounts
- Session tokens with automatic expiration
- Row-level security (RLS) on all database tables
- API access requires scoped Bearer tokens
FMCSA Broker Verification
When you go to book a load, Loady checks the broker against the Federal Motor Carrier Safety Administration (FMCSA) database using the broker's MC number. We check operating authority status and whether the broker is out of service.
If a broker's authority is suspended or the broker is out of service, the booking is stopped and flagged. If FMCSA data can't be reached, or the load has no broker MC number, Loady warns you instead of guessing, and the decision stays yours.
Compliance Roadmap
In Progress
SOC 2 Type I
Target completion: Q4 2026. Controls documentation and audit preparation underway.
Available Now
Data Processing Agreement
DPA available on request for enterprise customers. Contact legal@aiventureholdings.com
Data Ownership
Your data belongs to you. Period. Load history, driver preferences, route data, and account information are retained and exportable at any time by contacting support.
If you cancel your account, we delete your data within 30 days. No lock-in, no hostage data, no dark patterns.