Security

Brokerages trust WIQ with their quotes, truck costs and customers. Here is how we protect them.

Last updated September 24, 2026

Walled off by design

Your quotes, customers, rates and loads are separated inside the database itself, not just in the app, so one company can never see another’s records.

Locked down

All traffic is encrypted with modern HTTPS. Passwords are securely hashed, you can sign in with your Microsoft account, and logins and sign-ups are protected against abuse.

Backed up daily, on and off site

Your data is backed up every night with encrypted copies, and a full copy of the system is stored off-site every day. Our systems are checked automatically, and admin actions are logged.

Your data

Your quotes, customers, rates and loads are separated inside the database itself, not just in the app, so a signed-in user can only ever reach their own company’s records.
No other company can see your data. Agencies inside the same brokerage see combined lane prices and truck costs only when the brokerage turns that on, never shipper names or which agency a number came from, and any agency can take its numbers out. If you connect your own Truckstop account, the lanes you win and their truck costs go to Truckstop’s rate program, never your customers’ names (see the Privacy Policy).
Passwords are hashed with bcrypt and never stored in plain text.
Email connection tokens are encrypted, with the key kept outside the database.
Sessions use signed tokens that expire.
Payments are handled by Stripe. We never see or store card numbers.

Infrastructure

Hosted in the United States (New York region).
Encrypted connections only: TLS 1.2 and 1.3, with HTTPS enforced.
The database is not reachable from the internet. The firewall allows only web traffic and secure admin access.
Automatic intrusion blocking, plus rate limits on sign-in, sign-up and other sensitive endpoints.
A bot check on sign-up.

Backups and monitoring

Nightly database backups, encrypted with a key that is not stored on the server.
A full copy of the system stored off-site every day, kept for 7 days.
Automated health checks around the clock, with automatic recovery if the service stops responding.
Admin actions are logged.

Email permissions

WIQ uses two separate kinds of access. You can use the Outlook add-in without ever connecting your mailbox, and the other way around.

The Outlook add-in

Uses the lowest permission Outlook offers for add-ins: it reads only the email you have open, and only when you open WIQ on it.
Cannot see your other emails, calendar or contacts, and cannot change or delete anything.
Does not run in the background.
When you reply with a quote, it opens a reply for you to review and send yourself.

Connecting your mailbox (optional)

Send: lets WIQ send quote replies from your own address when you click send.
Read: only if you turn on inbox reading, so WIQ can spot shipper replies and mark quotes won or lost.
Stay signed in: lets the connection refresh without asking you to sign in again.
You approve these through Microsoft’s own sign-in screen, and you can disconnect at any time.

Questions or a report

If you find a security issue, or your IT team has questions, email [email protected]. Our subprocessors are listed in the Privacy Policy.