- Hosting: Google Cloud, London region.
- Encryption in transit: the whole site is HTTPS only.
- Passwords: stored hashed, never in plain text. Minimum length and common-password checks are enforced.
- Drivers: PIN login with attempt limits and lockouts.
- Sessions: owners can sign out everywhere, which immediately revokes access.
- Audit log: sign-ins and sensitive changes are recorded for owners.
- Separation: every company's data is isolated from other companies.
- Payments: card details go straight to Stripe. We never see or store them.
- Your control: owners can export everything and delete their company and data from Settings.
Read our privacy notice, terms and driver notice.
Found a security problem? Email hello@kovifleet.co.uk.