Trust Center

Overview

Welcome to Augment's Trust Center. Our commitment to data privacy and security is embedded in every part of our business. Use this Trust Center to learn about our security posture and request access to our security documentation.

Compliance

• GDPR
• SOC 2 Type 1
• SOC 2 Type 2

Documents

AllPublicPrivate Get access Bulk download

• Data Processing Agreement
• Pentest Report
• SOC 2 Type I Report
• SOC 2 Type II Report

Risk Profile

We have secure, reliable hosting that customers can depend on. We are happy to provide details about our risk mitigation practices and recovery objectives upon request.

Product Security

We pay great attention to enterprise features such as access control and single sign on. We are happy to provide more details about our enterprise features upon request.

Self-Assessments

We are working on our security compliance. We can provide completed questionnaires upon request.

Data Security

We follow industry best practices for data security. We are happy to provide more details about our data security practices upon request.

App Security

We take application security seriously and are putting together a program to monitor internal apps.

AI

We take the usage of AI seriously in our organization and work to ensure security and reliability of the AI.

ESG

We prioritize and take environmental, social, and governance (ESG) considerations seriously in our operations and decision-making processes.

Legal

We take legal matters seriously and we always engage our legal counsel to review all commercial activities. Please contact us if you have any questions.

Data Privacy

Privacy of customer data is top of mind. We follow industry best practices and follow all applicable privacy regulations.

Access Control

Access is tightly monitored and controlled at our company. We are happy to provide more details about our access control practices upon request.

Infrastructure

We take great care to work with best-in-class infrastructure providers that provide secure computing and storage. We are happy to provide more details about our infrastructure upon request.

Endpoint Security

We follow industry best practices for endpoint security. We are happy to provide more details about our endpoint security practices upon request.

Network Security

We protect our corporate network against external & internal threats.

Corporate Security

We implement internal measures and practices to maintain a high standard of security.

Policies

We are currently working with experts to put together our company policies. Please contact us for more details.

Security Grades

We are constantly monitoring the security of our website. We will post our grades from public security rating agencies when they become available.

Incident Response

We have a dedicated team that responds to security incidents. We are happy to provide more details about our incident response practices upon request.

Risk Management

We have a dedicated team that manages security risks. We are happy to provide more details about our risk management practices upon request.

Asset Management

We have strict asset management policies in place to ensure that all assets are accounted for and secure.

BC/DR

We have a business continuity plan in place to ensure that we can continue to operate in the event of a disaster.

Training

We provide security awareness training to all employees to ensure that they are aware of security best practices.

Change Management

We have a change and configuration management process in place to ensure that changes are properly reviewed and approved.

Physical & Environment

We have physical and environmental controls in place to ensure that our data centers are secure and reliable.

Continuous Monitoring

We continuously monitor our systems for security threats and vulnerabilities. We are happy to provide more details about our continuous monitoring practices upon request.

GDPR Compliance

GDPR Compliance Program

Augment maintains a GDPR compliance program covering how we collect, process, and protect personal data for our EU and UK customers and their data subjects.

EU & UK Representation

Since Augment does not have a legal establishment in the EU or UK, we have appointed Euverify as our GDPR Article 27 representative for both regions. Euverify serves as the official point of contact for EU data protection authorities, the UK Information Commissioner's Office (ICO), and EU/UK data subjects on matters related to our processing activities.

Our Controls

Our GDPR program includes:

• Documented Records of Processing Activities (RoPA)
• Data Processing Agreements (DPAs) with subprocessors and vendors
• A defined process for responding to data subject requests (access, correction, deletion, portability) within statutory timelines
• A breach notification process aligned with regulatory notification requirement
• Data minimization and retention practices
• Ongoing monitoring of evolving EU/UK data protection requirements

Our Commitment to EU/UK Data Subjects

We are committed to honoring data subject rights under GDPR, including the right to access, correct, delete, or export personal data, and to notifying relevant authorities and individuals in the event of a qualifying data breach.

SOC 2 Type II Certified

Augment has successfully completed its SOC 2 Type II audit and received an unqualified opinion from Prescient Assurance LLC, an independent CPA firm. This is the highest possible audit outcome; confirming that our security controls were both properly designed and operating effectively throughout the full observation period.

Audit Details

What Was Tested and Validated

• Multi-factor authentication and access controls
• AES-256 encryption at rest and TLS 1.2+ in transit
• Role-based access control and least-privilege enforcement
• Automated threat detection (AWS GuardDuty) and 24/7 monitoring (Datadog + PagerDuty)
• Vulnerability scanning and third-party penetration testing
• Change management and software development lifecycle controls
• Backup, disaster recovery, and business continuity procedures
• Vendor risk management
• No security incidents occurred during the audit period

What This Means for Customers

Augment's systems and processes have been independently assessed by a licensed CPA firm over a five-month observation window, not just a point-in-time snapshot. You can be confident that the controls protecting your freight operations data are proven to work in practice, consistently, over time.

SOC 2 Type II Audit Progress Update

Augment has successfully completed its SOC 2 Type II audit, including the full observation period covering the applicable Trust Service Criteria.

Current Status ✅ SOC 2 Type II audit completed ✅ Observation period concluded ✅ No open control gaps or remediation items

What This Means Augment’s security controls were designed and operating effectively throughout the entire observation period. All testing is complete, and there are no outstanding findings. The remaining steps are standard auditor finalization and formal report issuance.

Expected Timeline Final SOC 2 Type II report: expected within approximately 2–4 weeks