Skip to content

Security

Last updated June 2026

An honest account of how this site is built and what that means for security. No badges we haven't earned — just what's true today.

There's almost nothing to breach

This website stores no customer data and no personal information. There is no login for the public site, no customer database, and no payment processing. The demo runs on fictional sample data. That's the strongest security posture there is for a marketing site: the safest data is the data you never hold.

How it's served

  • Served over HTTPS everywhere, with certificates managed automatically by our host (Vercel).
  • It's a static / server-rendered site — most pages are pre-built files, which keeps the attack surface small.
  • No secrets live in the codebase. The one passcode for the internal team tool is stored only as a host environment variable, never in the repository.

The internal team tool

The staff Sales Desk sits behind a passcode gate and is excluded from search engines. The data it shows is public FMCSA business-registration record — not private information — so the gate keeps the tool and our branding off the open web, which is what it's for.

What we don't claim

We're a young company. We do not claim SOC 2, ISO 27001, or any certification we haven't completed. When the product handles real fleet data under contract, we'll publish the specific controls that apply — and they'll be real.

Reporting an issue

Found something? Email hello@cleartruckingtech.com and we'll respond quickly.