E-invoicing: inbound-reception obligation in France from September 1, 2026 Your Backlane invoices are already compliant →
Company · Security & data

Your data works for you. It never leaves.

Trips, contracts, payments: your ledger is your asset. Backlane puts it to work, protects it, and returns it in full the day you ask.

Where your data lives
✓Hosted in the European Union (Google Cloud, Belgium region)
✓Strict per-client isolation: every piece of data is scoped to your account, on every request
✓Encryption in transit (HTTPS everywhere) and at rest
✓Keys and credentials kept in an encrypted vault, never in code
What we refuse to do
✓No personal driver data in risk scores: vehicles and usage only
✓Raw telematics positions are erased after 90 days; private trips are never located, from collection onwards
✓Your data is never resold, shared, or used to train third-party models
✓Never a send in your name from an unverified domain

Every action is journaled

Everything an agent does is written, timestamped, replayable. You always know which rule produced which action, and you can take over at any time.

Sends have a circuit breaker

An unusual send volume freezes itself and waits for an explicit release. The system is designed to fail quietly and safely, never loudly.

Everything is reversible

Your data exports in full. An import can be undone. An account closes with full restitution. Reversibility is not a sales option, it is architecture.

Security questions or reports: contact@backlane.ai. Processing details in the legal notice.

What we keep, and for how long

One duration per kind of data, not a blanket policy.

The location of an identifiable driver runs on a short clock. What survives is aggregates without any position: that is what lets us measure a fleet without tracking anyone.

DataRetentionWhy
Raw telematics positions90 daysThe replay window for an incident. Beyond that, only vehicle-day aggregates remain, with no coordinates at all.
Trips declared privatenever locatedCoordinates are stripped at collection, before any storage. The trip is counted, it is not situated.
Driver label on a trip12 monthsThe named link disappears long before the usage aggregate, which stays anonymous.
Mileage curvecontract termIt is proof for excess-mileage billing, not a movement trace.
Vehicle and driver documentscontract term + legal archivingRegistrations, certificates, signed contracts: retention is what the law requires.
Invoices and accounting records10 yearsFrench legal obligation. These records cannot be deleted, including by us.
Agent action logaccount lifetimeThis is your evidence: which rule produced which action, when, and who approved it.
Sub-processors

Who touches the data, and what for.

No sub-processor has access to the whole: each receives strictly what its function requires. The named, current list is annexed to the data processing agreement handed over at signature, and any change is notified to you before it takes effect.

Hosting and storage

Google Cloud, Belgium region. No transfer outside the European Union.

Email, SMS and WhatsApp delivery

European providers, recipients and message content only. No sending from an unverified domain.

Bank aggregation

A licensed provider, read only. We never see your banking credentials: consent is given on their side, not ours.

E-invoicing

A registered dematerialisation platform, for issuing and receiving in the legal format.

Language models

A provider under a no-retention, no-training contract. See below what is sent to them, and what never is.

AI, precisely

What goes to a model, and what never does.

✕No personal driver data enters a risk score: vehicles and usage only.
✕No geographic position is ever sent to a model.
✕None of your data trains a model, ours or a third party's. That is contractual, not declarative.
✕No agent sends a sensitive message without your approval, and none can release the circuit breaker that freezes an abnormal volume.

What is sent: the text of a document to classify, the content of an invoice to read, the question you ask the Analyst and the result of the query it runs. Every call is logged with its answer, and every number you get shows the query that produced it.

Frequently asked questions

Where is the data hosted?

In the European Union, Belgium region, with no transfer outside the EU. Per-customer isolation is applied on every request, not just at account level.

Do you provide a data processing agreement?

Yes, handed over at signature, with the named and current list of sub-processors annexed. Any change is notified to you before it takes effect.

What happens if we stop?

The export is complete, in an open format, available without negotiation. Only accounting records stay retained for as long as the law requires, including against our will.

How much are you losing today?
No theoretical number: we measure it with you. In 30 minutes on your real fleet, or quantified from 6 months of history, delivered within 48 hours.
Quantify my fleet in 48 hours Book a demo

No commitment. Nothing changes with your current tools or insurer.