Trust & Security

Trust is the product. X3 Drug & Alcohol handles compliance-critical data for motor carriers, and X3 Fleet Safety LLC is committed to protecting it. This page summarizes how we keep the Service secure and reliable.

Data protection

• Encryption in transit — all traffic is served over HTTPS/TLS.
• Encryption at rest — stored data is encrypted by our infrastructure providers.
• Access controls — least-privilege access; your data is scoped to your account and carrier.
• Isolation — identity and business records are separated so a breach of one does not expose the other.

Infrastructure

The Service runs on hardened, industry-leading providers: Cloudflare (edge hosting, DDoS protection, WAF), Supabase/Cloudflare D1 (managed databases), Stripe (PCI-DSS Level 1 payments), and Anthropic (AI processing). We do not run payment card storage ourselves.

AI, honestly

Our AI is grounded in verified, published regulations and a curated compliance corpus — it cites the controlling section rather than guessing. It is decision support, not a legal or regulatory determination, and every output should be verified against the current CFR. We never guarantee an audit rating, DataQ removal, or determination outcome.

Reliability

We deploy on globally distributed edge infrastructure for speed and uptime, with security headers (HSTS, CSP, no-sniff) enforced across our sites and rate-limiting on sensitive endpoints.

Your data, your control

You own the documents and records you upload. You can request a copy or deletion at any time. See our Privacy Policy and Terms of Service.

Responsible disclosure

Found a security issue? We want to hear from you. Email joshua@x3fleetsafety.com with details and we'll respond promptly. Please don't publicly disclose until we've had a chance to fix it.