Security and your data

Route Impact reads sensitive business records: settlement statements, contracts, payroll and books. This page explains in plain terms how we protect them. The Privacy Policy is the binding version.

Where your data is stored

On Google Cloud Platform, in the United States. It is encrypted in transit (TLS) and at rest (Google Cloud default encryption).

Who can see it

• Access is limited by role-based permissions and by organization: one account can't see another's data. That isolation is enforced in our application code and in the security rules of the database and file storage.
• Staff administrative actions are audit-logged.

Your FedEx and portal logins

The Route Impact browser extension collects your records from the FedEx and dispatch portals you're signed into, from your own browser, at your direction. It never receives, sees or stores your FedEx or other portal passwords. You can disconnect it at any time, which stops all further collection.

QuickBooks

• The connection is read-only: we never create, change or delete anything in your books, and we never receive your Intuit username or password.
• Only the account owner can connect or disconnect it, and both actions are audit-logged.
• The authorization token is encrypted again with a dedicated, automatically rotated key in Google Cloud Key Management Service, and bound to your organization so it can't be used under another.
• Disconnecting revokes our access immediately and deletes the stored token.

AI processing

Parts of the service send relevant data to our AI provider, Anthropic, to produce analyses and answers. Under our commercial agreement with Anthropic, that data is not used to train their models. Voice conversations also use Google Cloud Speech-to-Text and ElevenLabs; the no-training commitment is specific to Anthropic. The Privacy Policy lists every provider involved.

What we never do

We never use your settlements, payroll, documents or anything else you upload for advertising.

Deleting your data

• You can delete individual analyses and documents at any time in the app.
• When you close your account or ask us to, we delete your data within 30 days, except billing and tax records, minimal legal compliance records, and anonymized aggregated data. Backups that contain deleted data roll off within a further 30 days.

If something goes wrong

No system is perfectly secure. If we become aware of unauthorized access to or disclosure of your data, we will notify affected customers without undue delay, in addition to any notice the law requires.

Questions

Email support@routeimpact.ai.