Your trust and data security are our top priorities. Learn about our comprehensive security measures.
Last updated: March 8, 2024
At PRIME, security is not just a feature—it's the foundation of everything we do. We employ industry-standard security practices and continuous monitoring to protect your data and ensure the integrity of our platform. Our security program is built around encryption, access controls, audit logging, and GDPR-aligned data practices.
End-to-end encryption for data at rest and in transit, with advanced key management systems.
Role-based access control, multi-factor authentication, and principle of least privilege.
Automated security monitoring, threat detection, and alerting on our production infrastructure.
Secure cloud infrastructure with redundancy, automated backups, and disaster recovery.
Documented security practices aligned with industry standards and data protection regulations.
Comprehensive security training, background checks, and secure development practices.
Data encrypted in transit (TLS) and at rest
Data practices aligned with European privacy requirements
Card data handled by a PCI DSS Level 1 processor
Security-relevant events recorded for review
Role-based permissions across fleet, driver, and admin surfaces
Report vulnerabilities to our security team for prompt review
Within 72 hours of becoming aware of the breach
Without unreasonable delay, but no later than 45 days
As soon as possible after discovery and assessment
If you discover a security vulnerability or suspect unauthorized access to your account, please contact our security team immediately.
security@primetransit.com
We acknowledge and investigate every report.
We will not pursue action against good-faith research that does not access other users' data, degrade service, or publicly disclose before we can remediate.
Live platform status at primetransit.com/api-status
We run a responsible disclosure program. If you find a security vulnerability, we appreciate your help in keeping our platform secure.
We do not offer cash rewards at this stage.
We believe in transparency regarding our security practices and incidents. We publish security updates and post-incident reports whenever there is something to share, to keep our community informed.
