Your Critical Tracking Event and Key Data Element records are sensitive operational data, and we treat them that way.
Last updated: July 2026
TracAssure is built on established cloud infrastructure, with encryption applied to data both at rest and in transit, and access to customer data restricted by role so people only see what their job requires.
We're a young company, and we're deliberately cautious about the claims we make here: we'd rather tell you plainly what we do today than publish specific commitments—certifications, uptime numbers, response-time guarantees—before we've formally verified we can stand behind them. We're actively working through a more complete security program, including third-party review, and we'll expand this page with specifics as each piece is confirmed rather than in advance of it.
Customer data is used solely to provide the platform to that customer. We don't sell it, and we don't use it to train models or for any purpose beyond delivering the service you're paying for. We use a small number of established third-party providers (for hosting, payments, and email) to operate the platform, and we're formalizing our documentation of exactly how and where each one touches customer data.
If you need specifics for a vendor security review—subprocessor details, data flow, retention practices—email us and we'll work through your questionnaire directly rather than trying to anticipate every possible question on a public page.
If you believe you've found a security vulnerability in TracAssure, we want to hear about it. Email contact@3roots.net with "Security" in the subject line and as much detail as you can provide—we'll acknowledge your report and follow up as we investigate.
Please don't access, modify, or attempt to exfiltrate data beyond what's needed to demonstrate the issue, and give us a reasonable window to address it before any public disclosure.
For FSMA 204-specific information, see the Compliance page. For anything else—including our current Data Processing Agreement—contact contact@3roots.net.