Security

Freight data is sensitive. We treat it that way.

LogAI.ai encrypts data at rest and in transit, authenticates through the erp.io shell with Ed25519 tokens, and retains customer data only for the duration of the agreement. SOC 2 Type II is in progress.

Data Security

Encryption at rest and in transit

Encryption at rest

AES-256

Customer data is encrypted at rest in all storage systems.

Encryption in transit

TLS 1.3

All connections between client, server, and subprocessors use TLS 1.3. TLS 1.2 is supported for legacy clients; earlier versions are rejected.

Authentication

SSO + Ed25519 tokens

Authentication flows through the erp.io shell. Session tokens use Ed25519 key pairs. Passwords are never stored in LogAI.

SOC 2 posture

Type II in progress

LogAI is working toward SOC 2 Type II certification. The audit is in progress. We do not claim certification is complete.

Data Retention

How long we keep your data

Customer data — load records, documents, events, carrier data — is retained for the duration of the agreement. We do not retain data beyond what is required for providing the service.

Upon contract termination, customer data is deleted within 30 days. A deletion confirmation is provided upon request. Document archives can be exported in bulk before termination; contact us to arrange an export.

Subprocessors

Third-party services we use

The following subprocessors handle or may process customer data on behalf of LogAI.ai. A complete and up-to-date list is maintained at logai.ai/legal/sub-processors.

SubprocessorPurposeLocation
Hetzner CloudCompute infrastructureEU / Germany
CloudflareCDN and DDoS protectionGlobal
PostgreSQL (managed)Primary data storageEU / Germany
SendGridTransactional emailUSA
Telnyx / TwilioVoice calls via Phony moduleUSA

Reporting a vulnerability

If you discover a security issue in LogAI.ai or the erp.io suite, please report it to [email protected]. We respond to all security reports within 48 hours.

Please do not disclose vulnerabilities publicly until we have had an opportunity to review and remediate.