Security & Compliance
Your data is yours. We protect it accordingly.
Loady handles sensitive freight and business data. We treat security as infrastructure, not an afterthought.
Encryption
- All data in transit encrypted via TLS 1.3
- Data at rest encrypted via AES-256 (Supabase managed)
- Voice call audio processed in memory, never stored long-term
- API keys hashed with bcrypt before storage
Infrastructure
- Application hosted on Vercel (US-East, US-West regions)
- Database hosted on Supabase (AWS us-east-1)
- All infrastructure US-based — no offshore data processing
- Automated daily backups with point-in-time recovery
- DDoS protection via Vercel Edge Network
Authentication
- Supabase Auth with email/password and OAuth (Google, GitHub)
- Multi-factor authentication (MFA) available for all accounts
- Session tokens with automatic expiration
- Row-level security (RLS) on all database tables
- API access requires scoped Bearer tokens
FMCSA Broker Verification
Every broker that enters the Loady system is verified against the Federal Motor Carrier Safety Administration (FMCSA) database. We check MC number validity, operating authority status, insurance coverage, and complaint history before any load is presented to a driver.
This verification runs in real-time during every dispatch call. If a broker's authority has lapsed, their insurance has expired, or they've accumulated significant complaints, the load is flagged or excluded entirely. Drivers should never have to wonder if a broker is legitimate.
Compliance Roadmap
In Progress
SOC 2 Type I
Target completion: Q4 2026. Controls documentation and audit preparation underway.
Available Now
Data Processing Agreement
DPA available on request for enterprise customers. Contact legal@aiventureholdings.com
Data Ownership
Your data belongs to you. Period. Load history, driver preferences, route data, and account information are exportable at any time via your dashboard or by contacting support.
If you cancel your account, we delete your data within 30 days. No lock-in, no hostage data, no dark patterns.