Security & Compliance

Your moving logistics deserve enterprise-grade data protection. We meet industry standards and exceed expectations for regulatory compliance.

Data Protection & Encryption

All customer data in transit and at rest is encrypted using industry-standard AES-256 encryption. API communication uses TLS 1.3 to ensure end-to-end security.

Encryption

In-Transit Security

All data transmitted between your systems and Moving AI is protected with TLS 1.3 encryption, preventing interception and unauthorized access.

Storage

At-Rest Encryption

Customer data is encrypted at rest using AES-256. Encryption keys are managed separately and never exposed in logs or backups.

Keys

Key Management

All encryption keys are rotated quarterly. We employ hardware security modules (HSM) for key storage and management.

Compliance & Certifications

We maintain certifications and compliance with major regulatory frameworks to ensure your business stays audit-ready:

Standard	Status	Details
SOC 2 Type II	✓ Compliant	Annual third-party audit covering security, availability, and data integrity controls.
GDPR	✓ Compliant	Full GDPR compliance including data subject rights, DPA in place, and breach notification procedures.
CCPA	✓ Compliant	California Consumer Privacy Act compliance with opt-out mechanisms and data portability support.
HIPAA	✓ Available	BAA available for healthcare customers. Contact sales for dedicated HIPAA-compliant deployment.

Access Control & Authentication

We enforce strict access controls to ensure only authorized personnel can access customer data:

Multi-factor authentication (MFA) required for all admin accounts
Role-based access control (RBAC) with granular permission sets
API key rotation recommended every 90 days; enforced expiration available
Session timeouts automatically end inactive sessions after 30 minutes
Audit logging captures all data access and modifications with 90-day retention

Infrastructure & Uptime

Uptime

99.9% SLA

We maintain a 99.9% uptime SLA backed by redundant infrastructure, automatic failover, and real-time monitoring.

Backup

Automated Backups

Daily automated backups across geographically distributed data centers. RPO: 1 hour. RTO: 30 minutes.

Monitoring

24/7 Monitoring

Continuous health monitoring with automated alerts. Security team on-call for incidents with <4-hour response SLA.

Data Privacy & Retention

Your data is yours. We provide complete control over data retention, export, and deletion:

Data export in standard formats (CSV, JSON) available at any time
Custom retention policies: delete data automatically after configurable periods
GDPR right-to-be-forgotten support: complete data deletion within 30 days
No data sharing with third parties without explicit consent
No ads, no tracking, no selling of aggregated insights derived from your data

Vulnerability Management

We take security vulnerabilities seriously and maintain a proactive vulnerability management program:

Regular penetration testing by independent third-party security firms (bi-annual)
Bug bounty program with responsible disclosure guidelines at security@movingai.com
Dependency scanning with automated alerts for vulnerable libraries
Security patches deployed within 48 hours of critical vulnerability discovery
Incident response plan tested quarterly with documented procedures and timelines

Vendor & Third-Party Security

We vet all third-party services and maintain security agreements:

All vendors must maintain SOC 2 Type II or equivalent certification
Data Processing Agreements (DPA) in place for all subprocessors
Quarterly vendor security reviews and attestation requirements
Right to audit vendor controls as part of customer agreements

Security Questions?

Our security team is available to discuss your specific compliance and data protection requirements. We provide detailed security documentation, attestation letters, and can accommodate custom audit requirements for enterprise customers.

Contact Security Team