Trust Center
Security and privacy, engineered into every layer
Location data is sensitive and vehicles are safety-critical. We design, test and operate SyncVelo accordingly, and we are precise about what we claim.
Threats & controls
How we protect your fleet, your data and your people
Tenant data isolation
Tenant ID checked at the API, in the database and in Copilot's lookups, with automated isolation tests.
Sensitive command safety
Permissions plus named approval and audit. No engine immobilisation while a vehicle is moving.
Credential & secret protection
Vault-managed keys, rotated secrets, scoped tokens and hashed credentials.
GPS spoofing & malformed payloads
Protocol fuzzing, impossible-motion checks, GPS quality scoring and signal anomaly flags.
Tracking privacy
Lawful processing purpose, consent and workforce notices where required, retention and export controls.
Third-party AI protection
Data minimisation, configurable processors, redaction and no cross-tenant prompts or caches.
Operational resilience
Backups, disaster-recovery drills, incident response, SLOs and restore tests.
Partner access
MFA, SSO where needed, device trust, audit and just-in-time scopes.
Cross-border readiness
Applicability reviews for EU GDPR and connected-vehicle guidance, India's DPDP Act and local laws.
Honest certification claims
We make no regulatory compliance claims, such as ELD or AIS-140, until regulations, hardware and testing are verified.
Quality engineering
Acceptance gates before anything ships
- 01
Protocol fidelity
Golden packet fixtures per certified device and firmware; decoder regression and command round-trips.
- 02
Real-time map
Latency distributions measured on real networks; reconnect state recovery.
- 03
GPS accuracy
Trips and stops compared with field traces; drift and invalid coordinates detected.
- 04
Billing integrity
Idempotent metering, proration tests, invoice reconciliation and tax configuration.
- 05
Tenant safety
Automated cross-tenant authorisation, event fan-out and cache isolation tests.
- 06
AI quality
Evaluation sets with sourced answers, hallucination rate, refusal and tool-policy tests.
- 07
Phones and browsers
The consoles run in phone and desktop browsers today; native apps will get their own release gates when they are built.
- 08
Resilience
Restarts, queue backlog, regional failure drills, backups and DR rehearsals.
This website
We practise what we preach, here too
- TLS everywhere with HSTS, and automatic certificate management
- Strict Content Security Policy with per-request nonces
- No third-party trackers, ads or analytics cookies
- Forms protected with validation, rate limiting and bot traps
- Country-level language detection without storing your IP address
- Hardened, non-root containers with a read-only file system
Responsible disclosure
Found a vulnerability? Please report it to our security team. We investigate every report, keep you informed and never pursue good-faith research.
security@syncvelo.com/.well-known/security.txt
Privacy requests
To access, correct, export or delete your personal data, contact our privacy team.
privacy@syncvelo.comGet started
Ready to move your world smarter?
See how SyncVelo can power your fleet, your partner business or your next integration. Personal walkthrough, real devices, your use case.