DockVerdict

DockVerdict Privacy Policy & Zero-Training Data Commitment

Effective Date: November 11, 2026

Controller / Service Provider: DockVerdict (https://dockverdict.com)

Privacy & Data Protection Desk: privacy@dockverdict.com

DockVerdict builds freight Accounts Payable (AP) reconciliation and ACORD 25/28 insurance compliance software for freight brokerages, third-party logistics providers (3PLs), and commercial general contractors. Because our customers entrust us with proprietary carrier lane rates, bills of lading, and vendor insurance certificates, data confidentiality is foundational to our architecture.

1. Categories of Business Data Processed

  1. Uploaded Audit Documents: Rate Confirmations, Carrier Invoices, Signed Bills of Lading (BOLs), Lumper/Scale Receipts, TMS CSV exports, and ACORD 25 / ACORD 28 Certificates of Insurance submitted via our web sandbox or dedicated ingestion addresses (ap@dockverdict.com, coi@dockverdict.com).
  2. Business Contact & Billing Metadata: Corporate contact names, work email addresses, USDOT/MC docket numbers, company names, and subscription billing identifiers processed via Stripe.
  3. Operational Telemetry: Request timestamps, SHA-256 document content hashes (for duplicate suppression), and extraction confidence scores.

2. Strict Zero Foundation Model Training Guarantee

  1. Never Used to Train Public or Cross-Tenant AI Models: Customer rate confirmations, carrier pricing, shipper/consignee identities, and insurance certificates are processed exclusively through zero-data-retention enterprise inference endpoints and deterministic rule engines.
  2. No Cross-Brokerage Rate Pooling: DockVerdict never aggregates, resells, benchmarks, or shares your contracted lane rates or carrier roster with any other brokerage, shipper, carrier, or third party.
  3. Ephemeral Public Sandbox Processing: Documents uploaded to the unauthenticated Live Audit Studio on https://dockverdict.com are evaluated in ephemeral memory to return your real-time audit result and are not persisted to disk.

3. Infrastructure & Enterprise Subprocessors

SubprocessorPurposeSecurity & Data Posture
Cloudflare, Inc.Edge HTTPS routing, WAF, DDoS protection & worker executionTLS 1.3 encryption in transit; SOC 2 Type II certified
Google Cloud (Gemini API)Multimodal PDF/OCR structured field extractionPaid API tier with zero foundation model training
Stripe, Inc.Subscription checkout, invoicing & PCI-DSS Level 1 card vaultingDockVerdict never touches or stores raw payment card numbers
Resend, Inc.Transactional audit notifications & authenticated outbound emailSPF, DKIM & DMARC aligned on dockverdict.com

4. Data Retention, Export & Ephemeral Deletion

  1. Full Customer Ownership: Customer retains 100% ownership of all uploaded load packets, COI records, and QuickBooks CSV exports (dockverdict_qbo_vouchers.csv).
  2. 30-Day Post-Cancellation Purge: Upon workspace cancellation or written request to privacy@dockverdict.com, all customer documents and extracted metadata are permanently deleted within 30 calendar days (or within 48 hours upon expedited deletion request).
  3. Communication Preferences (RFC 8058): Any recipient may opt out of commercial email communications instantaneously via one-click unsubscribe at https://dockverdict.com/unsubscribe or by emailing privacy@dockverdict.com.
Questions or Data Processing Addendum (DPA) Requests: Email privacy@dockverdict.com for enterprise security questionnaires, W-9 documentation, or signed DPA execution.