Protect supplier data with bank-level security
Your money, your data and your customer’s data are as important to us as they are to you. The Trolley platform offers bank-level encryption and a full suite of tools to manage the security your accounts, letting you operate in full confidence.
Trolley's multilayer data protection features
Bank-Level Security
Trolley uses end-to-end 256-bit bank-level security. We believe in always-on TLS and maintaining data encryption while at rest and in motion. All passwords and API secrets are one-way hashed using Bcrypt with a factor of 10. API secrets are generated using cryptographically secure random number generators and represent over 128-bits of entropy.
We have built-in tokenization of all sensitive information such as bank account and debit card numbers, government IDs and social security numbers.
Two-Factor Authentication
Enable two-factor authentication (2FA) on your Trolley account and receive an access code to sign from a new device. Secure your whole Trolley environment by enforcing 2FA for all users.
Choose the 2FA method that works best for you: by email, SMS text message, or with an authenticator app.
IP & Domain
White-listing
Add an additional layer of security to your Trolley dashboard by white-listing approved IP addresses, and restricting access from any other IP addresses. Helpful if you only wish to allow access from your offices or other approved locations.
You can also limit access to the API to just from your domains.
Security Notifications
Keep informed instantly when one of your staff users requests a password reset on their account, sets a password, or other user-level activity.
Notifications can be sent by email, text message, or to a Slack channel.
User Roles & Permissions
Issue individual logins to each team member in your company that needs it, and assign an appropriate role to users with permission levels to match their responsibilities. We don’t charge extra fees for each user, so there is no reason for anyone to share logins.
We support five different roles with permissions levels specific for developers, read-only users, admins, owners and regular team members – each with access levels that make sense to that user.
Login History
View team members' login history, including account, time, IP address, and login location (city, region, country) to audit strange account activity or out-of-the-ordinary payments.
Ready to get started?
Integrate, onboard, schedule, pay, communicate, and comply—all from the Trolley platform & API—with little effort required.
