SOC 2 Type I & Type II Compliance
Hey Bubba! is SOC 2 Type I and Type II compliant. Both independent audits are complete. Our Type II examination verifies that our security controls operate effectively over the audit period to protect your fleet's data.
Our Verified Trust Principles
Our SOC 2 Type II audit rigorously validates our commitment to the three criteria most critical to your daily operations.
Security
Actively defending against unauthorized access to keep our systems & your data safe.
Availability
Ensuring reliable, uninterrupted uptime to support your 24/7 dispatch operations.
Confidentiality
Safeguarding sensitive freight data, broker communications & proprietary information.
Independently Audited. Continuously Monitored.
Third-Party Validation
Independent experts rigorously reviewed our security controls over an extended period to ensure sustained effectiveness, not just a single-day snapshot.
- SOC 2 Type I and Type II audits completed
- Proven design and operational effectiveness
- Full audit report available under NDA
24/7 Active Defense
Passing the audit is just the baseline. Our infrastructure and dedicated engineering teams actively protect your data every second of the year.
- Continuous control testing and documentation
- 24/7/365 on-call engineering response
- Real-time threat alerting and thorough incident reviews
AICPA SOC 2
Hey Bubba! Subprocessors & Infrastructure Security
At Hey Bubba!, maintaining the confidentiality, availability, and integrity of carrier and fleet data is central to our operational mission. The Bubba platform relies on a limited set of subservice organizations and third-party SaaS integration partners to deliver 24/7 AI-driven dispatch, real-time load booking, and telematics automation. All third-party vendor relationships undergo rigorous pre-onboarding security risk assessments and continuous annual compliance monitoring in accordance with our SOC 2 Type II and ISO 27001 commitments.
Core Sub-Service Organizations
Primary host and edge security environments directly bounding the Hey Bubba! platform.
Primary hosting for the Hey Bubba! application, database and storage; underlies compute networking and managed encryption for production workloads.
Provides DNS management, DDoS protection, and CDN edge caching to secure and accelerate access to the Hey Bubba! platform.
Stores encrypted, versioned backups of production data to support disaster recovery and business continuity.
Fully managed relational database service powering core application data, with automated backups and encryption at rest.
Provides real-time dashboards and alerting for platform health, performance, and security monitoring.
Securely stores and manages API keys, credentials, and other sensitive configuration secrets used by the platform.
Serverless container runtime powering scalable, on-demand backend services and AI processing workloads.
Asynchronous messaging infrastructure that reliably delivers events between platform services in real time.
Enforces strict role-based access control across Kubernetes workloads to limit access to production infrastructure.
Integrated SaaS & Feature Sub-Processors
Third-party integrations powering AI reasoning, telephony, mapping, and telematics.
Provides foundational language model capabilities for Hey Bubba!'s back-office automation, under zero-data-retention agreements.
Provides foundational language model capabilities for Hey Bubba!'s back-office automation, under zero-data-retention agreements.
Provides foundational language model capabilities for Hey Bubba!'s back-office automation, under zero-data-retention agreements.
Powers real-time voice synthesis for Hey Bubba! voice features.
Provides real-time speech-to-text transcription for AI-driven call handling and dispatch automation.
Powers SMS and voice communications, including automated call handling and dispatch notifications.
Provides telephony infrastructure supporting voice calls and carrier communications.
Powers mapping, geolocation, and route visualization features across the platform.
Integrates ELD and fleet telematics data to power real-time vehicle and driver tracking.
Integrates ELD and fleet telematics data to power real-time vehicle and driver tracking.
Integrates electronic logging device data to support hours-of-service compliance and tracking.
Integrates with the DAT load board to source and post available freight loads.
Integrates with the Truckstop load board to source and post available freight loads.
Integrates with the 123Loadboard freight marketplace to source and post available loads.
Integrates with Parade's freight visibility and tracking tools for carriers and brokers.
Integrates with the Uber Freight marketplace to source and book available loads.
Supports customer relationship management and marketing communications.
Provides business email, calendar, and collaboration tools used by the Hey Bubba! team.
Supports email integration for carriers and brokers who communicate via Microsoft Outlook.
Supports email integration for carriers and brokers who communicate via Yahoo Mail.
Supports email integration for carriers and brokers who communicate via iCloud Mail.
Provides identity and access management for secure single sign-on across integrated Microsoft services.
Supports video conferencing for customer onboarding, support, and internal collaboration.
Hosts source code and manages the software development lifecycle for the Hey Bubba! platform.
Used internally for product design and prototyping of the Hey Bubba! platform experience.
Provides real-time dashboards and alerting for platform health, performance, and security monitoring.
Provides application performance monitoring and error tracking across the Hey Bubba! platform.
Request Our SOC 2 Type II Report
Our independent auditor's SOC 2 Type II report is available to customers and prospects under NDA. Request it here, and our team will also help with security questionnaires and procurement reviews.
FAQ'sFrequently Asked Questions
Yes. Hey Bubba! is SOC 2 Type I and Type II compliant, and both independent audits are complete. Our Type II examination covers Security, Availability, and Confidentiality. The Type II report is available to customers and prospects under NDA.
An independent auditor evaluated Hey Bubba!'s controls for Security, Availability, and Confidentiality, and verified they operated effectively over a continuous monitoring period, not just on a single day.
Yes. The full SOC 2 Type II report is available to customers and prospects under NDA. Contact [email protected] or request it through our contact form.
An independent, licensed CPA firm performed the SOC 2 Type II examination in accordance with AICPA Trust Services Criteria.
SOC 2 Type II examinations cover a defined audit period and are typically renewed annually to demonstrate ongoing control effectiveness.
Hey Bubba!'s SOC 2 Type II examination covers Security, Availability, and Confidentiality: the criteria most critical to freight dispatch operations.
No. Customer data processed through Hey Bubba! is strictly isolated. We maintain zero-data-retention agreements and contractual commitments with our foundational LLM providers, ensuring your operational and dispatch data is never used to train, fine-tune, or improve third-party models.
Email [email protected] with details of the concern, or use Get Help in the Hey Bubba! app menu. Our team investigates every report promptly and documents resolution steps.