CDL Smart App is designed to handle sensitive driver and recruiting information. We use administrative, technical, and organizational safeguards intended to reduce the risk of unauthorized access, disclosure, alteration, or loss.
Security controls
Depending on the feature and data involved, safeguards may include authenticated access, role-based permissions, row-level database controls, separate protection for sensitive identity fields, private file storage, server-side secret management, audit logging, restricted administrative access, and provider-level security controls.
We review access and application architecture with the goal of limiting users to the organizations, drivers, and functions they are authorized to access. No internet service can guarantee absolute security.
Sensitive driver information
CDL Smart App applies additional safeguards to certain identity information such as Social Security numbers and driver-license numbers. Organization access to sensitive information is permission-controlled, and certain access may be logged. Uploaded document files can themselves contain sensitive information, so organizations and drivers should upload only records reasonably necessary for the intended workflow.
Security incident response
We maintain a written incident-response process for suspected or confirmed security events. The process is designed to support containment, evidence preservation, investigation, legal review, required notification, remediation, recovery, and post-incident improvement.
If customer-controlled personal information is affected, we evaluate customer notification and other legal obligations based on the facts, applicable law, contractual requirements, and the affected jurisdictions. Notification requirements and deadlines can vary by state and circumstance.
Third-party providers
CDL Smart App relies on third-party providers for functions such as hosting, databases, authentication, payments, messaging, and AI-assisted features. We limit provider access to what is reasonably necessary for the service and evaluate provider incidents for their potential impact on CDL Smart App data and users.
Report a security concern
If you believe you found a vulnerability, unauthorized access, exposed data, or another security issue involving CDL Smart App, email support@cdlsmartapp.com with the subject Security Incident. Please do not include Social Security numbers, passwords, full driver-license numbers, payment-card numbers, or other unnecessary sensitive data in the initial email.
Include enough information for us to understand the issue, such as the affected page or feature, approximate time observed, steps to reproduce when safe, and a way to contact you. Do not exploit a vulnerability beyond what is reasonably necessary to demonstrate it, access other users' data, disrupt the service, or publicly disclose sensitive information while the issue is being investigated.
Business customer responsibilities
Organizations using CDL Smart App are responsible for protecting their own login credentials, limiting team access, removing access that is no longer needed, using the service lawfully, and promptly reporting suspected compromise. Customers remain responsible for security and legal obligations that apply to systems, records, exports, or copies they control outside CDL Smart App.
Related policies
Additional information is available in our Privacy Policy, Data Processing Addendum, Data Retention Schedule, and Terms of Service.