Privacy
Last updated
If a carrier sent you a link to fill in a driver application, the first part of this page is for you. The second part covers the rest of this website.
Last updated
If a carrier sent you a link to fill in a driver application, the first part of this page is for you. The second part covers the rest of this website.
Last updated
If a carrier sent you a link to fill in a driver application, the first part of this page is for you. The second part covers the rest of this website.
Four documents every time: the front of your driver's licence, the back of it, your three-year driving record, and your CVOR abstract. One more if it applies to you — a work permit, or a PR card. A police clearance as well if you already have one; that one is optional. That is the whole list.
It is stored encrypted, on servers in Canada. Only the carrier that sent you the link can open it — no other carrier on this system can see it, search it or export it. The file is checked first: that it opens, that its contents are the kind of file it claims to be, and that a photo is big enough and sharp enough to read. Details read off the document then fill in boxes you would otherwise type yourself. A box filled that way is locked, and above it is a “Not right?” button that tells the carrier the value is wrong.
The reading is done by software, not by a person. That software belongs to two companies whose services run outside Canada: Anthropic and OpenAI. A copy of your document — or of the text taken out of it — is sent out of the country to be read, and what it finds comes back into your form. Not every file has to go: a driving record with real text in it is often read here, by this system's own parser, and never sent anywhere. You cannot tell in advance which yours will be, so take it that anything you upload is read outside Canada. Separately, if the form itself fails while you are using it, a report of the failure — the page it happened on, your browser and the program's own trace — goes to Sentry, an error-monitoring service outside Canada; your link is taken out of it first.
Some applications show a “Find the address” search above the address boxes. What you type into that search is sent to Amazon Location Service, run by Amazon Web Services, which sends back addresses that match; picking one asks it for that address's details, and fills in the boxes below. Only the search's text goes — nothing else on your form, and no document. You can change any box it fills. Typing your address straight into the boxes sends nothing anywhere.
A phone photo carries more than the picture. It records where you were standing when you took it. Every photo you send is re-saved as soon as it arrives, and the re-saved copy keeps the picture and nothing else: no GPS position, no phone model, no camera timestamp. It is the re-saved copy that is kept and the re-saved copy that is sent away to be read, so the location never travels with it. What your phone actually uploaded — the file with the position still in it — is deleted once the stripped copy exists, and “deleted” here means what the section below says it means. A PDF is different: it is stored exactly as you sent it, so whatever the file itself carries stays inside it.
The application has no box for your social insurance number and no box for your bank account. The document list has no room for a SIN card or a direct deposit form either; an application will not accept those two at all. Once somebody is hired, a carrier can file both against their employee record on the staff side of this software — but never through an application link, and never from you while you are applying. If a file you send turns out to have text in it that looks like a social insurance number, it is stopped there, before any reading service sees it — a photo has no text until something reads it, so that check cannot cover a photograph, which is part of why those two documents are not on the list at all. The package does contain blank forms that ask for a SIN — the employee information form is one — but those are filled in on paper after a job offer, never on this website.
Some files are refused: one that will not open, a photo too blurry or too small to read, or a document that is not the one it was filed under. A refused file is deleted straight away, and so is the record of the upload. What is left is one line in the carrier's log saying a file was rejected, with its name and the reason. If the check that refused it was the automated one, it had already read the file in order to decide.
Every time this page says a file is deleted, this is what happens: the record of it goes, and the file is taken out of the storage it was in. The storage keeps an older copy for up to 90 days so that a mistake can be undone, and clears that copy on its own once the 90 days are up. So a deleted file is out of reach of everyone — the carrier included — as soon as it is deleted, and out of the backups within 90 days of that.
Your link expires; the email that sent it says when. After that it will not open, and you have to ask the recruiter for a new one. Until then, whatever you had already filled in and already uploaded stays with the carrier. An application you never submitted is then deleted 90 days after the link expired — what you had filled in, the files you sent, the details read off them and any signature you gave, all of it, on its own and without anyone asking. What stays is the carrier's record that an application was started and their log of what happened to it. Cancelling is on the same clock: a carrier cancelling your link stops anyone opening it again, and the same 90 days then clears what you sent. Taking a document off your checklist removes it from your list, and the file itself waits for that same clear-out.
Ask the carrier that sent you the link. They hold your application, and they are the ones who can tell you what they will do with it, how long they intend to keep it, and who at the company can see it. Use the phone number or email address of the recruiter you have been dealing with. This website has no mailbox of its own for drivers.
Your name, company, email address, phone number (optional), fleet size and a message, and nothing else: not your IP address and not your browser. Each request is stored in our database, so it cannot be lost on its way to us, and is deleted 3 years after it was sent. Where an address to receive demo requests has been configured, a copy is also emailed there with your email as the reply-to. We use a request only to reply to it. Requests are limited to five per hour from one address.
There is no self-serve sign-up. Accounts are created by invitation from a carrier's administrator. Three cookies, and only those three, keep you signed in: your session, the two-factor step while you sign in, and the device you chose to trust; your theme preference is kept in your browser. Inside the application we record which screens a signed-in person opens and how quickly they load — the screen, never the record on it — keep those entries for 90 days and daily totals after that, and send none of it to anyone else.
Every change, upload and export inside the application is recorded in an audit trail with who did it and when. Records belong to one organisation and never cross between carriers. When the application itself fails, a report of the failure — the screen it happened on, the browser and the program's own trace, with any database detail, cookies and request contents removed — goes to Sentry, an error-monitoring service hosted outside Canada. What a signed-in person writes in Report a problem, the screenshot they choose to attach, and their name and email go to the same place.
This page describes what the software does today. It is not a legal contract. If something here does not match what you were told, the carrier that sent you the link is the one to ask.