Security and data

How we protect customer data

• Encryption in transit. The website and app are served only over HTTPS, and browsers are told never to connect without it.
• Passwords. Stored only as one-way Argon2 hashes, never in readable form. We never ask for your password by email.
• Sign-in sessions. Held in secure cookies that page scripts cannot read, and checked against cross-site requests.
• Separation between customers. Every agency’s data is kept apart from every other’s, and we test that separation with automated checks.
• Access. Only the people who run Haulprint can reach production systems, and only when needed.
• No pooling. We don’t sell customer data, share it between customers, or combine it into shared datasets.

If something goes wrong

If we confirm that customer data was accessed without authorisation, we tell the affected customers within 72 hours, share what we know, and keep them updated. To report a security issue, email [email protected]. Please don’t test our systems without written permission.

Leaving Haulprint

Customers can export their data at no charge during their subscription and for 30 days after it ends. We then delete it within a further 30 days, backups expire within 90 days after that, and we confirm the deletion in writing on request.

Service providers

These companies help us run Haulprint. Each handles data only to provide its service to us. We update this list, and email customer administrators, at least 30 days before a new provider handles customer data.

Haulprint does not currently use any AI provider.

Certifications and questionnaires

Haulprint does not yet hold a SOC 2 report. We complete customers’ security questionnaires on request; email [email protected].