Trust & Security
LoadControl is built around one rule: the AI prepares, the broker approves. Nothing reaches a customer, a carrier, or a driver without human sign-off.
Approval, not blind automation
Every recommendation shows its work: why it was made, what information it considered — the offers it compared, the history it checked, the reason it flagged a load — and what alternatives it set aside. Your broker is judging a prepared case, never trusting a black box. Trust comes from transparency, not automation.
LoadControl never independently:
- ✕Commit pricing
- ✕Award freight
- ✕Dispatch a carrier
- ✕Approve detention
- ✕Approve a transload
- ✕Release a driver
Pricing stays human
Every client rate is a broker decision. LoadControl suggests a rate from live offers and your margin — your broker makes the call.
Carrier awards stay human
No carrier is awarded freight without a broker reviewing the vetting packet and clicking approve.
Driver release stays human
The client confirms release before any driver is told they're good to go.
Security: what is true today
Plain facts about how LoadControl is built and run, each one something you can ask us to show you. Nothing here is a certification claim.
Hosting
The application runs on Vercel; the database is a managed Postgres service (Neon). Traffic is encrypted in transit with TLS.
Credentials encrypted at rest
Load board, email and accounting credentials, and authenticator secrets, are sealed with AES-256-GCM under a server-side key that can be rotated without re-connecting anything.
One workspace, one tenant
Every record belongs to exactly one workspace, directly or through its load or quote, and every query is scoped to that workspace. One brokerage can never read another's loads, carriers or rates.
Sign-in
Two-step sign-in with an authenticator app or an emailed code, recovery codes, and sessions that expire after seven days.
Rate confidentiality
Carrier-facing documents never show the customer rate; customer-facing documents never show carrier pay.
Logs and monitoring
Server logs are structured and redacted before they are written; errors go to Sentry. Credentials are never logged.
Your data, your call
Disconnecting a mailbox deletes our copy of its token and the mail that was not linked to a quote or load. An owner can delete the whole workspace from Settings; after a seven-day grace period the next daily purge erases it.
No SOC 2 yet
LoadControl has not completed a SOC 2 or ISO 27001 audit. We will say so until we have, and we will answer any security questionnaire line by line.
Security questions or a questionnaire to fill in: write to nicholas@loadcontrol.ai.
Your team doesn't get smaller. It gets stronger.
LoadControl is not replacing brokers — it is removing repetitive work. Relationships, negotiation, pricing, operational judgment, and customer trust all remain human. LoadControl exists to make experienced brokers even better.