Security is the foundation, not a feature.
Silica moves orders, payments, and location data for operations that can't afford downtime or a breach. Here's how we take that seriously.
- Encryption in transit, on every product
- TLS 1.2+
- Encryption at rest, on every product
- AES-256
- Independent penetration tests
- 2x a year
- To acknowledge a vulnerability report
- 1 business day
Protection at every layer.
Controls that apply across the console and every app.
Role-based access control
Permissions go down to the location, register, or vehicle.
Least-privilege infrastructure
Environments are segmented, and access is least-privilege by default.
Continuous monitoring
Automated anomaly detection across infrastructure and API traffic, around the clock.
Backups and recovery
Encrypted, geographically redundant backups, with recovery drills run regularly.
Third-party testing
Outside security firms test the platform at least twice a year.
Working toward the standards you expect.
Our security program is modeled on SOC 2 Type II controls and GDPR data-handling requirements, and we're advancing formal certification as the company scales. Card payments run through PCI DSS-compliant processors, so card data never touches our servers directly.
Found a vulnerability?
We run a responsible disclosure program and read every report. Tell us before you tell anyone else.
[email protected]We aim to acknowledge every report within one business day.
Get started
See your whole operation in one place.
Tell us about your deliveries, drivers or stores. We'll have your team on the console and the apps within days.