Your TMS knows more about your business than your accountant does. Every rate you negotiated, every customer you haul for, every driver's pay setup, every invoice waiting on payment. If that data leaks, your competitors learn your rates. If it disappears, you cannot bill for the loads you already ran. Security is not an enterprise problem. It is a small carrier problem, because a small carrier has no IT department to catch it and no cushion to absorb it.
Most TMS marketing does not talk about security at all, and when it does, it is a padlock icon and the word "secure." That is not information. Here are the questions worth asking any TMS vendor, and how HaulerPro answers each one, with the receipts published where you can check them.
Question 1: Is my company's data separated from everyone else's?
Modern software runs many companies on shared infrastructure. That is normal and it is how the pricing stays reasonable. What matters is whether the software enforces a wall between your data and every other company's data, on every request, on the server, where a user cannot get around it. This is called multi-tenant isolation. Ask the vendor how they enforce it and how they verify it keeps working.
HaulerPro enforces per-company isolation server-side, and it is one of the controls verified by automated checks that run against production on a schedule. Not tested once and forgotten. Checked continuously.
Question 2: Who at my company can see and do what?
Your driver should see their loads and their settlement statements. They should not see another driver's pay, your customer list, or your rates. Role-based access control is the difference between software built for a real fleet and software that hands everyone the keys. Ask what each role can see, and whether those limits are enforced on the server or just hidden in the interface.
HaulerPro's roles are enforced server-side: managers run the business, dispatchers run the board, and drivers see their own work and their own statements, nothing else. When a user is deactivated, their sessions are revoked so a departed driver's logged-in phone stops working too.
Question 3: What happens to my data if something breaks?
Servers fail. The question is whether your load history, documents, and invoices survive it. Ask how often backups run, where they go, and how the vendor knows the backups are actually working, because an unverified backup is a hope, not a plan.
HaulerPro's database is backed up automatically every day to an offsite storage provider, and scheduled checks verify that the backups are running. Backup health is one of the controls we verify continuously, not something we assume.
Question 4: How are passwords and payments handled?
Two things a vendor should be able to say without hesitating. First, that they never store your actual password, only a salted hash, which means even the vendor cannot read it. Second, that they never store your card. HaulerPro does both: passwords are stored only as salted hashes, login attempts are protected against brute force, and payment card data is processed entirely by Stripe and never stored on HaulerPro systems.
Question 5: Can I verify any of this, or do I have to take your word for it?
This is the question that separates a security page from a security posture. Most vendors answer with a paragraph of adjectives. The honest answer is a public, current list of controls and their status.
HaulerPro publishes ours. The HaulerPro Trust Center lists our security controls and their live status, our subprocessors, and our compliance work. Key controls are verified by automated checks that run against production on a schedule, so the page reflects current status, not last year's audit binder. We are straightforward about where we are: HaulerPro is working toward SOC 2 Type II attestation, the controls listed reflect current verified status, and a formal audit report is not yet available. When it is, it will be on that page.
What this means for a small carrier picking a TMS
You do not need to become a security expert. You need five answers: data isolation, role enforcement, verified backups, password and payment handling, and public proof. A vendor who can answer all five plainly is telling you how they operate. A vendor who cannot is telling you something too.
HaulerPro is a TMS for independent carriers and small fleets: dispatch, documents, invoicing with the POD attached, IFTA mileage across the 48 contiguous states and DC, driver settlements, and vehicle maintenance tracking, at $95 per month for up to 5 users or $250 per month for up to 15 users. The security work runs underneath all of it, verified daily, published openly. Review the Trust Center, then start a free trial, 14 days, no credit card required.