EVCare™ is built for the security and procurement standards transit agencies and their IT teams require — encryption everywhere, data residency choices, and a clear answer to every question on a vendor security questionnaire.
Data Protection
All data is encrypted in transit with TLS 1.3 and at rest with AES-256. No fleet data ever moves or sits unprotected.
Fleet data for US agencies can be hosted and processed on US-based cloud infrastructure; Canadian agencies can be kept in-country. You choose.
Granular, role-based access control so operations, maintenance, finance, and executives each see only what they should. SSO support on the roadmap.
You retain ownership of all fleet data. It is used to operate EVCare™ for you — nothing else — and is returned or deleted on request.
A short, vetted list of infrastructure sub-processors, available on request, each under contractual data-protection obligations.
Continuous monitoring of the platform with a defined incident-response process and agency notification commitments.
What We Never Do
Volterra does not sell, rent, or broker agency or fleet data to anyone, ever.
We do not use your fleet data to train models for other customers without your explicit agreement.
No proprietary hardware and no rip-and-replace. Your data is exportable, and you can leave with it.
Security overview documentation and questionnaire responses are available to evaluating agencies on request.
Compliance
Data handling follows Canada’s PIPEDA, with privacy practices documented in our Privacy Policy.
We are building toward SOC 2 Type II. Current controls and our roadmap are documented in the security overview available on request.
We routinely complete agency and IT security questionnaires as part of procurement — send yours and we’ll turn it around.
This page summarizes Volterra’s security posture for evaluation purposes and is not a contractual commitment. Specific terms are addressed in the Data Sharing Agreement and contract for each deployment.
Send us your security questionnaire or request the EVCare™ security overview — we respond within one business day.