Security Policy

1. Overview

SafeTransit EXPRESS maintains a comprehensive, multi-layered security program designed to protect our customers' shipments, data, facilities, and personnel. Our security framework integrates physical security, information security, personnel security, and supply chain security into a unified program that meets or exceeds industry standards and regulatory requirements.

This policy applies to all SafeTransit EXPRESS operations, facilities, systems, employees, contractors, and business partners. Our security program is continuously monitored, tested, and improved to address evolving threats.

2. Physical Security

2.1 Facility Security

All SafeTransit EXPRESS facilities implement layered physical security controls:

• Perimeter fencing with anti-climb measures at all warehouses and distribution centers
• 24/7 CCTV surveillance with minimum 30-day recording retention
• Electronic access control with biometric authentication at sensitive areas
• Manned security presence at high-value and high-traffic facilities
• Intrusion detection and alarm systems monitored by central security operations
• Visitor management system with pre-registration and escort requirements
• Adequate lighting across all facility perimeters and operational areas

2.2 Cargo Security

Shipment security measures throughout the logistics chain:

• Tamper-evident seals on all containers and high-value consignments
• GPS tracking on all transport vehicles with real-time monitoring
• Secure storage areas with restricted access for high-value goods
• Chain of custody documentation maintained for all shipments
• Vehicle inspection protocols at entry and exit of all facilities
• Anti-theft technology including smart locks and geofencing alerts
• Secure parking facilities for overnight vehicle storage

2.3 Vehicle Security

• All vehicles equipped with immobilizers and tracking devices
• Driver authentication required before vehicle dispatch
• Route deviation alerts and automated security notifications
• Panic buttons and direct communication with security operations center
• Regular vehicle security inspections and maintenance

3. Information & Data Security

3.1 Data Protection Framework

SafeTransit EXPRESS implements enterprise-grade information security:

• ISO 27001:2022 certified Information Security Management System (ISMS)
• SOC 2 Type II compliance for cloud-based services
• GDPR, CCPA, and applicable data protection law compliance
• Data classification scheme (Public, Internal, Confidential, Restricted)
• Regular third-party penetration testing and vulnerability assessments
• 24/7 Security Operations Center (SOC) monitoring

3.2 Technical Controls

• AES-256 encryption for data at rest
• TLS 1.3 encryption for all data in transit
• Multi-factor authentication (MFA) for all system access
• Role-based access control (RBAC) with least-privilege principle
• Network segmentation and zero-trust architecture
• Endpoint detection and response (EDR) on all corporate devices
• Web application firewalls (WAF) protecting customer-facing systems
• Email security with DMARC, SPF, and DKIM enforcement

3.3 Incident Response

Our Cyber Security Incident Response Plan (CSIRP) includes:

• Defined incident severity levels and response procedures
• 24/7 incident response team with defined escalation paths
• Maximum 72-hour notification for personal data breaches (GDPR compliance)
• Regular tabletop exercises and incident simulation drills
• Post-incident review and lessons learned process
• Cyber insurance coverage for qualifying security events

3.4 Business Continuity

• Disaster recovery plans with defined RPO and RTO objectives
• Geographically redundant data centers with automatic failover
• Regular backup testing and recovery validation
• Business impact analysis reviewed annually
• Annual business continuity testing and plan updates

4. Personnel Security

4.1 Pre-Employment Screening

All SafeTransit EXPRESS personnel undergo comprehensive background checks:

• Identity verification and right-to-work confirmation
• Criminal background checks (national and where applicable, international)
• Employment history verification for previous 5 years
• Education and professional qualification verification
• Credit checks for positions with financial responsibility
• Enhanced vetting for personnel with access to sensitive areas or information
• Drug and alcohol screening for safety-critical positions

4.2 Ongoing Security

• Annual security awareness training for all employees
• Phishing simulation exercises conducted quarterly
• Clear desk and clear screen policy enforcement
• Immediate access revocation upon termination or role change
• Periodic re-screening for personnel in sensitive positions
• Confidentiality agreements and security policy acknowledgments

5. Supply Chain Security

5.1 C-TPAT Compliance

SafeTransit EXPRESS is a certified member of the Customs-Trade Partnership Against Terrorism (C-TPAT) at Tier III level, demonstrating our commitment to securing the international supply chain:

• Comprehensive security criteria addressing all C-TPAT requirements
• Annual self-assessment and periodic CBP validation
• Security recommendations implemented from C-TPAT validation visits
• Reduced customs examinations and priority processing benefits
• Requirement for business partners to maintain equivalent security standards

5.2 Authorized Economic Operator (AEO)

Our AEO-S (Security and Safety) certification demonstrates compliance with:

• EU customs security requirements for authorized operators
• Pre-arrival and pre-departure cargo security declarations
• Supply chain security risk assessment and mitigation
• Mutual recognition agreements with partner country programs
• Regular EU customs authority audits and compliance verification

5.3 Cargo Screening

• 100% screening of air cargo in compliance with TSA and EU ACC3 requirements
• X-ray, ETD (Explosive Trace Detection), and physical inspection capabilities
• Known Shipper and Regulated Agent certification programs
• Container scanning for sea freight at high-risk origin points
• Random cargo inspections and security sampling programs

6. Third-Party Security

Security requirements for all business partners and service providers:

• Security assessment prior to onboarding of new partners
• Contractual security obligations and right-to-audit clauses
• Annual security compliance reviews for critical partners
• Security incident notification requirements (within 24 hours)
• Data processing agreements with appropriate technical and organizational measures
• Termination provisions for material security non-compliance

7. Security Governance

• Chief Security Officer (CSO) reporting to the executive leadership team
• Dedicated Security Operations Center operating 24/7/365
• Security Steering Committee with quarterly board reporting
• Annual independent security audits by qualified assessors
• Continuous improvement program based on threat intelligence and incident learnings
• Security performance KPIs tracked and reported monthly

8. Certifications & Standards

SafeTransit EXPRESS maintains the following security certifications:

• ISO 27001:2022 — Information Security Management System
• ISO 28000:2022 — Security Management Systems for the Supply Chain
• SOC 2 Type II — Service Organization Control audit
• C-TPAT Tier III — Customs-Trade Partnership Against Terrorism
• AEO-F — Authorized Economic Operator (Full)
• TAPA FSR Level A — Transported Asset Protection Association Facility Security
• TAPA TSR Level 1 — Trucking Security Requirements
• PCI DSS — Payment Card Industry Data Security Standard (for payment processing)

9. Reporting Security Concerns

All security concerns, incidents, or suspicious activities should be reported immediately:

• Internal personnel: Security Operations Center or direct manager
• External stakeholders: security@safetransitexpress.com
• Responsible disclosure of vulnerabilities: security-disclosure@safetransitexpress.com
• Emergency situations: Call local emergency services first, then our 24/7 security hotline

10. Contact

For security inquiries, certification requests, or partnership security assessments:

• Security Department: security@safetransitexpress.com
• Data Protection Officer: dpo@safetransitexpress.com
• Vulnerability Disclosure: security-disclosure@safetransitexpress.com
• General Inquiries: Visit our Contact Page