Security
Trust is a product surface — not a brochure claim.
OilFlow holds operational, financial, and waste records. Here is how we isolate tenants, encrypt data, and keep audits attached to every litre.
Tenant isolation
Every company is a hard boundary. Roles, invites, jobs, documents, and billing are scoped to your tenant — never shared across customers.
Encryption
TLS in transit. Encrypted storage for sensitive records. Secrets managed outside application code.
Role-based access
Owner, dispatcher, driver, and client roles see only what their job requires. Seats revoke cleanly when people leave.
Audit-ready proof
Signatures, photos, and waste transfer notes stay bound to the litre so inspections become a search — not a filing cabinet weekend.
SOC 2 Type II
In progress. Controls map to security, availability, and confidentiality. Request the current posture letter from sales.
Backups & RPO
Database failover drills target RPO under 5 minutes for operational records. See /status for incident history.
Procurement pack
Downloadable artifacts buyers ask for.
Self-serve overviews below. Signed DPA and SOC 2 posture letter are issued to your legal entity after a demo or Enterprise request — we do not publish forged certificates.
Ready when you are
Start free. Prove it on real routes.
Fourteen days with your own drivers and clients. Invite your team, run collections, and see if it fits before you pay.
14-day trial · Cancel anytime
