Company
Vehicles
Store real-time fleet data
Customers
Full customer profiles
IoT devices
NEW
FleetFlow IoT hardware
Rides
Track vehicle ride analytics
Service tickets
Manage support cases
Threads
AI
Customer communication
Partners
Connect service partners
Find
Tracking network
Articles
Knowledge management
Pricing
Free tier
Free to start
Free migration
We move your data
Dedicated infrastructure
Isolated infrastructure
Support plans
Advanced support
About
Who we are
Trust & security
Built for privacy
Security & Trust
Your trust is our foundation. FleetFlow is designed with a deep commitment to data privacy and security.
Our platform runs on AWS infrastructure, with robust physical and logical safeguards. These facilities are monitored 24/7, with multi‑factor access controls and surveillance, ensuring only authorized personnel can reach our systems.
On the network side, production and non‑production environments are isolated, using virtual private networks and segmented subnets, and applying strict firewall rules. This layered approach prevents unauthorized lateral movement and tightly controls traffic flow. Combined with real‑time monitoring and automated alerting, our infrastructure is designed to stay resilient against failures and intrusions.
Tight access controls are fundamental to our security model. Internally, least‑privilege principles are enforced: employees receive only the minimum access necessary for their roles, and every access request ied single‑sign‑on (SSO) solution for all internal systems. All team members sign confides reviewed, approved, and logged. Multi‑factor authentication is required via a confidentiality agreements, and undergo security training.
On the customer side, the platform offers role‑based access control (RBAC) so customers can map their own organizational roles to specific permissions. Whether you’re granting read‑only access to auditors or full admin rights to your risk and compliance teams, Duna lets you tailor user privileges down to detail.
With industry‑standard protocols data in transit is encrypted (TLS or equivalent) and data at rest is encrypted (AES‑256 or similar). Encryption keys are managed with strict controls and rotated regularly to minimize risk.
All customer data is stored in the European Union, under the full scope of GDPR. Data minimisation is enforced, clear consent processes are maintained, and tools are provided to meet data‑subject rights such as access, correction, and deletion requests. By combining strong encryption with local processing, customer data remains confidential and compliant.
Your onboarding processes are mission‑critical. Duna’s infrastructure is built to maximize uptime and rapid recovery. With event‑sourced architecture and infrastructure‑as‑code capabilities, environments can be rebuilt or event logs replayed quickly, ensuring business continuity even in the face of major disruptions.
Regular, encrypted backups are maintained across multiple EU locations, along with an up‑to‑date disaster recovery plan that’s tested at least annually.
Critical services are deployed redundantly across separate data centers and network zones to prevent single points of failure.
Automated monitoring alerts our on‑call teams instantly to any anomalies, enabling immediate investigation and remediation around the clock.
in progress