Secure, reliable EDI
Your purchase orders, invoices and ship notices carry your business. BOLD VAN is independently audited to SOC 2 Type II and hosted with Rackspace across the US. Your data is encrypted at rest and moves over encrypted connections,* and every document is tracked from the moment it arrives.
*Plain FTP isn't encrypted, so it's available only with a signed customer waiver.
How we protect your documents
Independently audited
BOLD VAN holds a SOC 2 Type II report, which means an independent auditor tested our security controls over time, not just on one day.
Encrypted data and connections
Data is encrypted at rest and moves over encrypted connections such as AS2, SFTP and HTTPS.*
*Plain FTP isn't encrypted, so it's available only with a signed customer waiver.
Multi-factor authentication
Multi-factor authentication protects our internal systems and our web apps, including the portal you use.
Continuously monitored
Our controls are monitored continuously and verified through Vanta, and security controls and threat protection on our internal systems help identify issues.
Penetration tested
We test our systems the way an attacker would, so we can find and fix weaknesses.
Code scanned for vulnerabilities
All of our code is automatically scanned for security vulnerabilities, so issues are found and fixed early.
Hosted across the US
BOLD VAN runs with Rackspace in data centers across the US.
Backed up, off-site
Your data is backed up throughout the day, plus daily and weekly backups, all stored off-site.
Experienced security leadership
Our security program is led by an IT lead who worked onsite at NASA.
Secure connections
Connect the way your partners require, with encrypted methods such as AS2, SFTP and HTTPS, or our secure transfer tool for companies without SFTP. Every connection is tested before it goes live.
Every document and its status in view
- Every document tracked. See every document and its status in the portal, with email notifications when something needs your attention.
- Your data, when you need it. How far back you can search depends on your plan, and our higher plans include extended history. Need older records for an audit or a dispute? Our team will help.
- People who answer. US-based EDI experts know your account and respond when something needs attention.
Built to stay up
Retailers penalize late documents, so a network that's down costs you money. BOLD VAN ran at 99.996% uptime over the last 12 months, on infrastructure spread across the US, so your orders, ship notices and invoices keep moving.
Doing a vendor security review?
Our trust report shows our current SOC 2 status and controls, and you can request our SOC 2 report and security documentation there. Questions it doesn't answer? Our team will.
Common questions about security and reliability
Is BOLD VAN SOC 2 compliant?
Yes. BOLD VAN holds a SOC 2 Type II report from an independent audit, and our controls are continuously monitored and verified via Vanta. View our trust report.
Is BOLD VAN HIPAA compliant?
With a Business Associate Agreement in place, BOLD Transmission and Connectivity and BOLD Cloud Mapping are HIPAA compliant, so protected health information moves securely. See HIPAA-compliant EDI.
What is BOLD VAN's uptime?
BOLD VAN ran at 99.996% uptime over the last 12 months.
How long do you keep our EDI data?
How far back you can search depends on your plan, and our higher plans include extended history. Need older records for an audit or a dispute? Ask our team.
Where is BOLD VAN hosted?
With Rackspace, in data centers across the US.
Is our data encrypted?
Yes. Data is encrypted at rest and moves over encrypted connections such as AS2, SFTP and HTTPS. Plain FTP isn't encrypted, so we offer it only with a signed customer waiver.
Do you use multi-factor authentication?
Yes, on our internal systems and on our web apps, including the portal.
Do you scan your code for vulnerabilities?
Yes. All of our code is automatically scanned for security vulnerabilities, and threat protection runs on our internal systems.
How is our data backed up?
Throughout the day, plus daily and weekly backups, all stored off-site.
How will we know if something goes wrong?
You get email notifications when something needs your attention, and our US-based team is a call or email away.
Which connection methods do you support?
AS2, SFTP, FTP, REST API and web services, as well as connections to other VANs. For companies without SFTP, we provide a secure transfer tool. We test every connection before it goes live. Plain FTP isn't encrypted, so we offer it only with a signed customer waiver.
Can we get your SOC 2 report for our vendor review?
Yes. Request it through our trust report, or ask our team.
Where is your support team?
In the US. Our EDI experts know your account and stay in personal contact.
EDI you don't have to worry about
Audited, monitored and backed by people who answer.
Talk to an EDI expert