Encryption
Customer data is encrypted at rest and in transit.
Security and privacy at Indemni
How we handle your data, protect access, and prepare for incidents.
Visit our security centerOn this page
What happens to your data
Information we receive
Indemni receives shipment and verification information from customers, drivers, and connected TMS systems. This can include shipment details, driver information, documents, images, location data, and biometric information used in verification.
How we use it
We use this information to support the workflows your team requests, including verification, tracking, and evidence review. Service providers help us operate the platform and deliver these services.
Hosting and support
Production data is hosted in the United States. We do not use production data for development or testing. Some production information may be used in support tools to help resolve customer issues.
Image processing
Some image-recognition tools process submitted images. Indemni does not use customer data to train models.
How we protect your data
Data protection
Data management
Our data-management and retention policy guides how information is handled throughout its lifecycle.
Access and system security
Controlled access
Employee access is based on responsibilities. We review access at least annually and remove access through our offboarding process.
Strong authentication
We require multi-factor authentication for critical services and infrastructure, with documented exceptions where it is unsupported.
Infrastructure and device safeguards
We use infrastructure scanning, firewalls, and cloud-storage controls to restrict unintended exposure. Employee devices use encryption, anti-malware protection, firewalls, and device management.
Reviewed software changes
Our development process includes documented change management, pull request reviews, and monitoring of software supply-chain risks.
Response and recovery
Incident response
We maintain procedures for detecting, responding to, and recovering from security incidents.
Backups and continuity
Automated backups support high-risk data and critical systems. Business-continuity and disaster-recovery policies guide our response to disruption.
Vulnerability management
We scan for vulnerabilities, conduct penetration testing, and track findings through remediation.
Your data requirements
Your team’s access, sharing, retention, and deletion requirements are part of the security conversation.
Contact us to discuss how Indemni handles these requirements for your use of the platform, including data access, export, and deletion requests.
Security evidence
SOC 2 audit in progress
Indemni is currently in its SOC 2 audit period. Once the final report is available, we will make it available to qualified customers and prospects through the appropriate access process.
View our security centerIndependent penetration testing
Indemni has completed third-party penetration testing. Qualified customers can request supporting information through the applicable NDA and access process.
Request security documentsFrequently asked questions
What is Indemni’s SOC 2 status?
Our SOC 2 audit period is in progress. A final SOC 2 report is not yet available.
Where is production data hosted?
Production data is hosted in the United States.
Does Indemni use customer data to train AI models?
No. Indemni does not use customer data for model training. Some image-recognition tools process submitted images as part of the requested workflow.
How does Indemni manage service providers?
We maintain a vendor inventory and a vendor-management program to assess and manage third-party risk, including services provided and scope of access.
Can we review security documents?
Yes. Visit our security center to request restricted documents. Access is subject to the applicable approval and NDA process.
Can we discuss our data-handling requirements?
Yes. Book a demo to discuss your workflows, data requirements, and security questions with our team.
Review security with our team. See Indemni in action.
Walk through Indemni, discuss your data and access requirements, and ask the security questions that matter to your team.
Bring your data and access requirements.
Book a demo