Built for enterprise,
secure by design

Maximal is SOC 2 compliant. We maintain controls for the planning software and services our customers rely on to run sensitive logistics workflows.

Carrier teams trust Maximal with operational data every day. Our compliance program is one part of a broader commitment to data security, reliability, and responsible access.

Customer data is encrypted in transit and at rest. We use managed cloud key-management services and hardware-backed controls where appropriate to protect encryption keys.

Transport security is enforced with modern HTTPS/TLS configuration so traffic between users, services, and infrastructure is protected from interception and tampering.

Maximal uses peer review, static analysis, and security-focused development practices to reduce risk before code reaches production.

We regularly evaluate the application and deployed environment for security issues and remediate findings as part of the product development lifecycle.

Maximal is hosted on Amazon Web Services and uses AWS security controls such as managed encryption, monitoring, and vulnerability detection where applicable.

Production services run on hardened, continuously patched systems and managed infrastructure designed for isolation, observability, and controlled access.

Persistent data is encrypted using strong industry-standard encryption. Internal service communication is authenticated to help prevent request forgery, tampering, and replay.

We design production systems around least-privilege access, auditable changes, and secure defaults for networking and storage.

Employee devices use strong access controls, disk encryption, and endpoint protection. Production changes require review and validation before deployment.

Maximal uses layered reliability practices including backups, staged releases, and recovery processes to reduce the risk of data loss or service disruption.