SECURITY
Your freight data,
handled with care.
LaneDesk turns freight-request emails into organized shipments, quotes, and tenders. This page explains what we protect, how, and which providers help us run the service. Last updated September 23, 2026.
You stay in control
- Your data is yours. We use it only to run LaneDesk for you. We never sell it, and neither we nor our AI providers use it to train AI models.
- You choose what comes in. We receive only the emails you forward to your dedicated LaneDesk address.
- You can leave with everything. Request an export at any time (CSV/JSON plus original documents). When your agreement ends, we delete your data at your request or after 30 days.
How it’s protected
| Area | What we do |
|---|---|
| Encryption | HTTPS for all traffic. Data and files are encrypted at rest. Backups are also encrypted with AES-256. |
| Separation | Each customer has its own workspace. Database row-level security keeps other customers from seeing your data. |
| Access | Individual logins with role-based permissions. Your administrator adds and removes users. Production access is limited to the Lane Desk founders. |
| Documents | Files are kept in private storage. Download links are issued only to your authorized users and expire after 60 seconds. |
| Email intake | Each workspace has its own intake address, and your sender rules decide which senders are accepted or held for review. Email content is treated as untrusted. Attachments are not sent to AI. |
| People decide | AI suggests shipment details, and your team reviews and confirms them. LaneDesk never awards or tenders a load on its own and does not contact carriers for you. |
| Activity history | Changes to shipments, quotes, tenders, documents, and team membership are recorded. |
| Backups | Encrypted database backups every night, kept for 14 days. |
| Incidents | If we discover unauthorized access to your data, we will notify you within 72 hours. |
Service providers (subprocessors)
These providers process customer data only to deliver their services to us. We will tell customers before adding a new provider that handles their workspace data.
| Provider | Purpose | Location |
|---|---|---|
| Supabase | Database, sign-in, and document storage | United States |
| Vercel | Application hosting | United States |
| Postmark | Receives the freight-request emails you forward | United States |
| OpenAI | Suggests shipment fields from email text. Response storage off; API data is not used for training | United States |
| Typesafe (Jev) | Classifies whether an email is a shipment request | — |
| GitHub | Stores encrypted database backups | United States |
Security reviews and questionnaires
Evaluating LaneDesk for your company? We are glad to go through your security questionnaire or vendor review with you. Your written agreement with Lane Desk LLC sets out the binding data protection terms.
Reporting a vulnerability
If you believe you have found a security issue, email both co-owners with the details and steps to reproduce it. Please do not access, change, or keep other people’s data, and do not run tests that could disrupt the service. Give us reasonable time to fix the problem before you disclose it publicly. We will acknowledge your report and keep you updated.
See also our Privacy Notice and Terms of Use, or contact us.