How Custody Protects the Record.

Separate by Design

Custody runs on its own database, its own authentication, and its own secrets. The product apps run on Custody's own Vercel projects. None of this is shared with any other ValveRide product.

Where Packs Live

Sealed packs and the raw events they cover are stored in Custody's own Supabase project in the United States. Documents sit in private object storage on that same project.

Tenant Isolation

Row-level isolation is enforced on every customer table from the first migration. Access is denied by default.

Granted, Scoped Access

Custody sees only the loads a carrier has approved for a given shipper.

Tamper-Evident Records

Custody events are append-only and chained, so an entry cannot be edited or removed without breaking the chain. Every finished Evidence Pack is signed with a key held in AWS KMS and stamped by DigiCert, an RFC 3161 timestamp authority that is not ValveRide. Anyone holding a pack can check that it has not been altered, including by ValveRide. Sealed means signed and timestamped. It does not mean ValveRide checked the freight.

Who Seals a Load

A seal is made by an admin of the organization that owns the load, or automatically from that organization's own facility events. ValveRide staff never seal a customer's load and never hold a seat in a customer organization.

How a Third Party Checks a Pack

A third party does not need to trust ValveRide to check a pack. The download holds the events, the signed manifest, the DigiCert timestamp token, the public signing key, and a standalone verifier. Run the verifier on those files, or follow the openssl route in VERIFY. The check opens no network connection back to us.

Deterministic Rules: Same Inputs, Same Answer

Every answer in an Evidence Pack comes from deterministic rules reading the records two or more parties already produced. The same inputs give the same answer every time, and the answer is always one of three: agree, disagree, or unknown. An optional grader may sort leftovers that no rule matched, and it can never upgrade a result or change one the rules already stated.

What We Do Not Collect

• Carrier rates, pricing, or discounts.
• Driver messaging.
• A live location feed for display.