Data Processing Addendum (DPA)
This Data Processing Addendum (“DPA”) forms an integral part of the Echelon Terms of Service between Systemics Inc., d/b/a Echelon Fleet Systems (“Echelon,” “Processor,” or “Service Provider,” operating at https://echelonfleet.com) and the enterprise motorcoach carrier or fleet organization (“Controller” or “Customer”) and governs the processing of Personal Data in accordance with the California Consumer Privacy Act / California Privacy Rights Act (CCPA/CPRA), U.S. state privacy laws, the EU/UK General Data Protection Regulation (GDPR), and FMCSA 49 CFR Part 395 data integrity standards.
1. Roles of the Parties & Processing Instructions
- Customer as Data Controller / Business: Customer determines the purposes and means of processing driver records, passenger manifests, charter contacts, and fleet telematics entered into its tenant workspace.
- Echelon as Data Processor / Service Provider: Echelon processes Customer Personal Data solely on documented instructions from Customer to provide, secure, and support the Echelon platform on echelonfleet.com. Echelon certifies that it will not (a) “sell” or “share” Customer Personal Data, (b) retain, use, or disclose Customer Personal Data outside the direct business relationship between Echelon and Customer, or (c) combine Customer Personal Data across unaffiliated tenants.
2. Technical & Organizational Security Controls
Echelon maintains defense-in-depth security controls across all production workloads on echelonfleet.com:
- Encryption at Rest & in Transit: All persistent volumes, database snapshots, and Vault-managed secrets are encrypted at rest using AES-256. All external and cluster-ingress traffic is encrypted in transit using TLS 1.3 with strict HSTS enforcement.
- PostgreSQL Row-Level Security (`FORCE ROW LEVEL SECURITY`): Every multi-tenant table in Echelon's database enforces mandatory PostgreSQL FORCE ROW LEVEL SECURITY policies keyed on current_setting('app.current_org_id'), mathematically preventing cross-tenant query leakage at the storage engine layer.
- Immutable Audit Logs & ELD Tamper Resistance: Authentication events, OAuth token exchanges, RBAC changes, financial postings, and FMCSA 49 CFR § 395.30 ELD duty-status edits are recorded in append-only audit logs with actor, IP, timestamp, and before/after diffs.
- Zero-Trust Secrets Management & Pure ARM64 Isolation: OAuth client secrets, JWT signing keys, and third-party API tokens are managed via HashiCorp Vault and External Secrets Operator on hardened GKE Autopilot ARM64 nodes.
- Incident Notification (48-Hour SLA): Echelon notifies affected Enterprise Customers without undue delay—and in no event later than forty-eight (48) hours—after confirming any Personal Data Breach impacting Customer's tenant.
3. Authorized Subprocessor Registry (`echelonfleet.com`)
Customer grants general written authorization for Echelon to engage the vetted infrastructure and integration subprocessors listed below. Echelon provides at least thirty (30) days' advance notice of any new subprocessor addition:
| Subprocessor Entity | Scope of Processing | Processing Location | Certifications & Safeguards |
|---|---|---|---|
| Google Cloud Platform (GCP) | Primary Cloud Compute (GKE Autopilot Axion ARM64), Cloud SQL PostgreSQL, & Encrypted Storage | United States (us-east1) | SOC 1/2/3, ISO 27001, FIPS 140-3 Encryption, EU/UK SCCs |
| Google Maps Platform & Google Identity (OAuth 2.0) | Commercial Route Distance Matrix, Places Geocoding, Airport Geofencing & Federated OAuth SSO | United States / Global Edge | Google API Services User Data Policy (Limited Use), SOC 2 Type II |
| Microsoft Corporation (Microsoft Entra ID / Azure AD) | Enterprise OpenID Connect (OIDC) / OAuth 2.0 Single Sign-On & Directory Tenant Verification | United States / Tenant-Scoped | ISO 27001, SOC 2 Type II, Microsoft Data Protection Addendum |
| Stripe, Inc. | PCI-DSS Level 1 Charter Invoice Payment Processing & Subscription Billing | United States | PCI-DSS Level 1, SOC 1/2, EU/UK DPF & SCCs |
| Twilio Inc. | A2P 10DLC Transactional Driver Dispatch SMS & Safety Notification Delivery | United States | ISO 27001, SOC 2 Type II, CTIA 10DLC Carrier Compliance |
| Resend, Inc. | Transactional Email Delivery (Account Verification, Charter Quotes, Invoices, Password Resets) | United States (us-east-1) | SOC 2 Type II, TLS 1.3 Opportunistic/Enforced, DKIM/SPF/DMARC |
| Intuit Inc. (QuickBooks Online API) | Customer-Authorized General Ledger, Invoice, & Facility-Fee Accounting Synchronization | United States | SOC 2 Type II, ISO 27001, OAuth 2.0 Scoped Token Vaulting |
4. Audit Rights, Cross-Border Transfers & Deletion on Termination
Where Personal Data originating in the European Economic Area, United Kingdom, or Switzerland is transferred to Echelon in the United States, the EU Standard Contractual Clauses (Module Two: Controller-to-Processor) and the UK International Data Transfer Addendum are incorporated herein by reference. Upon request to legal@echelonfleet.com, Echelon provides countersigned PDF copies of this DPA and security architecture attestation packages for enterprise procurement teams.
Questions regarding OAuth verification, privacy, or enterprise compliance? Contact legal@echelonfleet.com or privacy@echelonfleet.com.