Skip to main content
TRUST & SECURITY

Your compliance data, handled straight.

You're trusting us with driver records, medical certificates, and test results. Here is exactly how that data is isolated, protected, and grounded — in plain language.

Your data is isolated to your carrier

Every record — drivers, documents, inspections, tests — is scoped to your carrier and enforced at the database layer with row-level security. A signed-in user can only ever read or write the carrier they belong to. There is no shared tenant table you could be accidentally shown.

Encrypted in transit and at rest

All traffic runs over TLS. Uploaded documents are stored in object storage encrypted at rest, behind short-lived, carrier-scoped signed URLs — a link to one carrier's file can't be reused for another's.

Grounded in the real CFR

Compass answers cite the regulation they're based on, round-tripped against the eCFR text rather than paraphrased from memory. When there isn't a high-confidence, CFR-rooted answer, Compass says so and points you to an X3 advisor or to FMCSA directly.

You can leave with your data

Your source records live in your database, not locked inside a report. Audit Export produces a single indexed bundle of your DQ files, inspections, accidents, D&A tests, and training certs whenever you want it.

SUBPROCESSORS

The third parties we rely on to run the service. We share only what each one needs to do its job, and never sell your data.

Cloudflare
Edge hosting, WAF, and encrypted object storage (R2)
Supabase
Application database and authentication (row-level security enforced)
Stripe
Subscription billing (we never see or store full card numbers)
Checkr
Background checks, when you order them
SambaSafety
Motor vehicle record (MVR) pulls, when you order them
Resend
Transactional and compliance-reminder email
Twilio
SMS alerts, where enabled
Anthropic
The AI model behind Compass answers
HONEST BOUNDARIES

Compass cites regulation and surfaces best practices. It is decision support — not legal advice and not a substitute for an attorney or for FMCSA's own published interpretations.

We tell you when an answer isn't confidently rooted in the CFR rather than guessing. Final compliance decisions — and the driver, vehicle, and audit records behind them — remain yours.

Found a security concern? Email joshua@x3fleetsafety.com and we'll respond quickly.

Read our Privacy Policy and Terms, or see the FAQ.