Fleetwise Data Security Overview
Protecting your data is at the core of how Fleetwise designs, builds, and operates its platform. Fleetwise uses enterprise-grade security controls, cloud infrastructure, and robust operational processes to ensure your data remains secure, private, and available when you need it.
Security Overview
Fleetwise maintains a formal Information Security Policy that governs how information is protected across systems, people, and processes.
Our approach is built on three core principles:
- Confidentiality – protecting data from unauthorised access
- Integrity – ensuring data is accurate and not altered improperly
- Availability – ensuring systems remain reliable and accessible
Fleetwise systems are designed with security embedded at every layer—from infrastructure and application design to operational processes.
Data Protection & Encryption
Fleetwise uses industry-standard encryption to protect data throughout its lifecycle.
Encryption Standards
- Data in transit: TLS 1.2 or higher
- Data at rest: AES-256 encryption
- Backups: Fully encrypted and access-controlled
These controls ensure data remains protected against unauthorised access or interception.
Access Control & Identity Management
Fleetwise enforces strict access control policies to ensure only authorised users can access systems and data.
Controls in Place
- Role-Based Access Control (RBAC)
- Multi-Factor Authentication (MFA) for all staff
- Centralised identity management via Microsoft Entra ID
- Audit logging of all access and system activity
Access is granted based on least-privilege principles and reviewed regularly.
Infrastructure & Cloud Security
Fleetwise systems are hosted on Microsoft Azure in the Australia region.
Platform Security Features
- Built-in DDoS protection
- Anti-malware controls
- Network segmentation
- Dedicated database and app service
- Secure App Services and database infrastructure
Each customer environment is isolated to prevent cross-tenant access or impact.
Monitoring, Logging & Threat Detection
Fleetwise continuously monitors its systems to detect and respond to threats in real time.
Capabilities
- Threat detection using Microsoft Defender for Cloud
- Continuous security posture assessment
- Audit logging of user and system activity
- Alerting for suspicious or anomalous behaviour
These processes support early detection and rapid response to potential security events.
Vulnerability Management
Fleetwise proactively identifies and addresses vulnerabilities across its systems.
Key Practices
- Code scanning (e.g., SonarQube)
- Peer-reviewed development processes
- Regular vulnerability scanning
- Patch and change management processes
This ensures vulnerabilities are detected early and remediated quickly.
Incident Response & Business Continuity
Fleetwise maintains formal processes to respond to security incidents and ensure service continuity.
Incident Response
- Identification and containment
- Eradication and recovery
- Communication and escalation processes
Business Continuity
- Daily backups
- Geo-redundant storage
- Point-in-time restore capabilities
These controls ensure resilience and rapid recovery in the event of disruption.
Data Privacy & Ownership
Fleetwise respects customer data ownership and privacy.
Key Principles
- Customers retain full ownership of their data
- Fleetwise acts as a data processor only
- Data is used solely to deliver services
- Aggregated, de-identified data may be used for analytics
Fleetwise complies with applicable privacy and data protection obligations.
Data Retention & Deletion
Fleetwise manages data securely throughout its lifecycle.
Controls
- Daily encrypted backups
- Secure deletion upon request or contract termination
These processes ensure data is retained only as long as necessary.
Personnel & Organisational Security
Fleetwise ensures all staff understand and meet security responsibilities.
Controls in Place
- Pre-employment screening and background checks
- Mandatory security and privacy training
- Signed policies and code of conduct
- Role-based access controls
Access is regularly reviewed and monitored.
Compliance & Governance
Fleetwise maintains governance processes to ensure security standards are followed.
Practices
- Formal Information Security Policy
- Alignment with recognised security frameworks
- Ongoing risk management and policy reviews
- Senior leadership oversight
These controls ensure continuous improvement and accountability.