Security as a first priority.

ISO 27001In progress

We are working towards ISO 27001 certification, the standard for information security management systems. The way of working is already in place across development and operations — from code review and access control to encryption and backups.

GDPR compliance

Trukks processes personal data according to GDPR. You own your data — we only process it to deliver the service.

• Data processing agreement (DPA) included
• Data extracts and deletion on request
• Clear division of responsibility between you and us

EU data residency

Your data is stored and processed within the EU. No business data leaves the union to operate the service — a simple answer to an increasingly common question in your customers' security reviews.

Encryption

All data is encrypted — both when it is stored and when it is transmitted. Traffic to and from Trukks runs exclusively over HTTPS/TLS, and data at rest is encrypted in the storage layer along with the backups.

• Encryption at rest (data and backups)
• HTTPS/TLS for all traffic

Authentication

Accounts are protected with modern authentication. Multi-factor authentication (MFA) is available for all users, and single sign-on (SSO) lets you manage access centrally through your own identity provider.

• Multi-factor authentication (MFA)
• Single sign-on (SSO)

Granular role-based access

Not everyone should see everything. Roles and permissions are controlled in detail — the technician sees their jobs, finance sees the bases and management sees the whole. Subcontractors get access to exactly what they need, nothing more.

Full audit logs

Every change in Trukks is traceable: who did what, when, and from which value. When the question comes — from a customer, an auditor or internally — the answer is in the log.

The EU AI Act

We follow the development of the EU AI Act and design new functionality responsibly. Any AI-assisted features are built with transparency and your control of your data as the starting point.