FleetProHQ is built so every client sees only their own fleet, every action is accountable, and nothing is ever lost. Here's exactly how.
All traffic runs over HTTPS/TLS with HSTS preload — connections are encrypted end to end and can never silently downgrade to an insecure link.
Enterprise security headers on every response — Content-Security-Policy, clickjacking protection, MIME-sniffing off, and locked-down browser permissions.
Row-level security enforces separation at the database itself. A client account returns zero rows for any fleet that isn't theirs — verified by penetration testing, not just policy.
Access is scoped by role (admin, advisor, writer, client-admin, approver, viewer). Estimate approvals honor per-person spend limits enforced on the server.
Approvals capture a typed signature, amount, and timestamp as a read-only record. Sensitive actions are written to an append-only audit trail that can't be edited or deleted.
The database is dumped to private storage every day and kept long-term, and deploys are atomic with instant rollback — so data is never lost and the site can revert in seconds.
Served from a global CDN with built-in DDoS mitigation, so the site stays fast and available under load.
A live heartbeat surfaces sync health — if data is delayed, clients see "delayed," never stale information presented as live.
We use only essential sign-in storage. No advertising cookies, no third-party trackers, and we never sell your data. See our Privacy Policy.
Security is layered and continuously reviewed. To report a security concern, contact us via our contact page — we take responsible disclosure seriously.