Security
How Vanroster keeps crew, customer and job data. Each control names the plans it applies to.
Controls
Six controls, stated plainly.
Encryption
TLS 1.3 in transit and AES-256 at rest, on every plan.
One region
Data stays in the EU or the US, chosen at sign-up. It never moves between them.
Roles
Owner, dispatcher and crew roles. A crew sees only its own jobs for the day.
Single sign-on
SAML sign-on on Region. Crews sign in by text code on every plan.
The change log
Every change on the board, kept 1, 3 or 7 years by plan.
Deletion
A closed account is deleted within 30 days, backups included.
{"at":"2026-10-13T07:41:02Z","by":"dispatcher:north-1","do":"crew.out","crew":"B-2"}
{"at":"2026-10-13T07:41:03Z","by":"board","do":"job.reassigned","job":"J-1182","to":"C-3"}
{"at":"2026-10-13T07:41:03Z","by":"board","do":"job.reassigned","job":"J-1190","to":"D-4"}
{"at":"2026-10-13T07:52:40Z","by":"crew:C-3","do":"job.started","job":"J-1182"}
For your review
- Data regions
- EU or US, chosen at sign-up
- In transit
- TLS 1.3
- At rest
- AES-256
- Backups
- Hourly, kept 35 days
- Sign-on
- SAML on Region
- Security contact
- security@vanroster.example
Questionnaires
Send your questionnaire.
A named contact answers security questionnaires within five working days.