Built for chain-of-custody & compliance teams

TERRAVAULT V2
Soil Tracking, Simplified.

Unified soil movement operations for project managers, inspectors, contractors, facilities, and finance teams — with role-aware access, load tracking, and compliance-ready records.

🔒 Private· 🛡 Secure· 👥 Role-gated· 📋 Audit-ready records
📊 Dashboard 🚛 Dispatch & Trucks 🏗 Stockpiles & Bins
🔒 terravault.app/dashboard
TerraVault V2 dashboard screenshot
What TerraVault is

A live chain-of-custody system your team actually runs — from first load to final sign-off.

TerraVault turns your soil movement operations — sourcing, dispatch, weigh-in, lab review, and sign-off — into one live, role-aware system your whole team works from. No spreadsheets. No paper BOLs. No manual reconciliation.

terravault · Chain-of-Custody Map
Process Map All Phases Roles Signatures Reports
Phase 1 · Source & Dispatch
01Load Created
02Field Inspection
03Dispatch Assigned
Phase 2 · Transit & Weigh-In
04GPS Transit
05Facility Weigh-In
06Generator Signature
Phase 3 · Receipt & Compliance
07Receiver Sign-Off
08Lab Sample Check
09Manifest Archived
📦
12-Step Chain of Custody
Every load tracked from source creation through field inspection, dispatch, weigh-in, and receiver sign-off — with cryptographic audit hashing.
👥
Role-Aware Access
13 scoped roles — Project Manager, Field Inspector, Dispatcher, Facility Operator, Finance Reviewer, and more — each with permission-gated views.
✍️
Digital BOL Signatures
Generator, Transporter, and Receiver each sign digitally. Manifests are WORM-locked on final signature — tamper-evident and court-ready.
🔗
SAP & GIS Integrations
Live sync with SAP S/4HANA ERP for contracts and POs, Esri ArcGIS for site mapping, Geotab for GPS tracking, and Mettler-Toledo scales for auto-capture.
🧪
Lab Sample Tracking
Collect samples, track analysis status (Requested → In Lab → Pass/Fail), and trigger Lab Hold states on loads pending results.
📊
Compliance-Ready Reports
Operations, projects, and executive dashboards with exportable data. Audit logs with immutable hash chains, retained for 7 years by default.
Chain of custody

How TerraVault tracks a load

Every load passes through a 12-step BOL workflow — from source creation to final receiver sign-off — with digital signatures at every handoff.

01
Load Created & Dispatched
Field Inspector records source material, classification, and site details. Dispatcher assigns truck and driver, generates the digital BOL, and transporter signs off.
CREATED → FIELD_OBSERVATION → SOURCE_WEIGH_OUT → MANIFEST_GENERATED → DISPATCHED
02
In Transit & Facility Arrival
Driver signs the manifest digitally. Geotab GPS tracks the route. On arrival, the facility weighs the load, inspects the material, and logs deviations if any.
TRANSPORTER_SIGNED → IN_TRANSIT → ARRIVED_AT_FACILITY → WEIGHED_IN → UNDER_INSPECTION
03
Receiver Signs — Chain Closed
Facility Operator accepts or rejects. Receiver signs digitally — all three signatures seal the manifest as WORM-locked. The chain of custody is closed and audit-ready.
ACCEPTED → RECEIVER_SIGNED → CLOSED
Integration ready

Connects to the systems your team already runs

+ FITS — isolated per instance

Every TerraVault instance ships with its own integration endpoints — configured for your environment, credentialed to your systems, isolated from every other client. No shared connectors, no shared credentials.

🏢
ERP
SAP S/4HANA
SAP ECC · S/4HANA OData
Bidirectional sync with your SAP environment. Contracts, POs, and service entry sheets auto-posted on invoice approval.
Inbound contract & PO sync
Outbound Service Entry Sheet posting
Hauler invoice reconciliation
🗺️
GIS
Esri ArcGIS
ArcGIS REST API
Live site mapping overlaid on your project data. Source locations, transfer facilities, and disposal sites geo-referenced in real time.
Project site layer publishing
Load origin & destination mapping
ArcGIS REST API connector
⚖️
Scale
Weigh Scales
Mettler-Toledo · SICS / Modbus TCP
Automatic weight capture at source and facility. Eliminates manual entry errors and locks tare, gross, and net weights directly to the BOL.
SICS & Modbus TCP protocols
Auto tare / gross / net capture
Weight locked to manifest on capture
🔐
SSO
Azure AD / SAML
Azure Active Directory · SAML · OpenID Connect
Single sign-on for your 400+ users via your existing identity provider. MFA enforced at the instance level. SCIM provisioning supported.
Azure AD, SAML 2.0, OpenID Connect
MFA & Conditional Access policies
SCIM automated user provisioning
🚛
Fleet
Geotab Telematics
Geotab Fleet API
Live GPS tracking per truck, round-trip ETA estimates, and automatic arrival detection at weigh stations and disposal facilities.
Live GPS position per load
Round-trip ETA calculation
Geofenced arrival / departure triggers
🧪
Lab
Lab Sample Tracking
SFTP / EDD Auto-Import
Collect field samples, track analysis status end-to-end, and auto-import results via SFTP. Exceedance alerts trigger Lab Hold states automatically.
SFTP / EDD result auto-import
Pass / Fail exceedance alerts
Lab Hold state on BOL workflow
🔒
Every integration is instance-isolated under FITS
Your SAP credentials, ArcGIS API keys, and Geotab tokens are stored in your dedicated Azure Key Vault — never in a shared secrets store. Integration endpoints are scoped to your named instance only. No connector is shared across clients.
6
Native integration
connectors
0
Shared credentials
across clients
API
First architecture —
every connector
Custom connectors
via your instance
Dedicated architecture

FITS TerraVault, not a shared tenant

Every client runs on a physically separate database, app registration, and key set — not a row in someone else's table.

🏛️
Data Sovereignty
Your data stays yours
Physically isolated database per client. Contractual ownership of every soil record, manifest, and audit log — even if you leave.
⚙️
Process Ownership
Your workflow, your configuration
12-step or custom BOL workflow configured in your instance — not a feature request. Change approvers, steps, or classifications without waiting on a release cycle.
🛡️
Security Isolation
Separate app registration, separate keys
Dedicated Azure App Registration, RBAC, and Key Vault. A breach or misconfiguration in another client's instance has zero path to yours.
🚀
AI Foundry · SaaS Speed
Go-live in days, not months
Azure AI Foundry stamps and provisions your named instance automatically — Dev, Test, and Prd environments, isolated database, SSO, and RBAC configured before day one.
🔄
Upgrade Control
Platform updates on your schedule
Core improvements arrive as reviewed PRs to your instance. Security patches are fast-tracked; feature upgrades ship on your release window.
📋
Compliance-Ready
Audit logs that are entirely yours
FedRAMP-ready architecture. SOC 2 Type II available. Your immutable audit trail has no cross-tenant data — clean for regulators from day one.
Shared multi-tenant SaaS
Your data shares tables with every other client
One vendor outage or breach affects everyone
Customization means a feature request and a roadmap wait
Upgrade timing is the vendor's decision, not yours
FITS TerraVault
Your database, physically isolated — zero shared tables
Isolated blast radius — another client's issues can't reach you
Your workflow is configuration in your own instance
You approve every update via reviewed PR — on your schedule
1
Dedicated instance
per client
3
Isolated environments
Dev · Test · Prd
0
Shared tables with
other clients
Days
From contract
to go-live
Transparent, all-inclusive pricing

One platform. Three editions.

No per-load or per-user fees. All editions include unlimited users and full chain-of-custody tracking.

Core
Full chain of custody, digital manifests, and compliance reporting — no integrations required.
✓ Unlimited users & load logging
✓ Digital Bill of Lading (Appendix J format)
✓ Source → Transfer → Disposal chain of custody
✓ Stockpile & bin management
✓ Material budgets & live dashboard
✓ Email notifications & audit trail
✓ Hauler invoice reconciliation
✓ Reports: CSV / XLSX / PDF, 2-yr archive
✓ SSO / MFA / RBAC / SCIM
◐ SAP, ArcGIS, Scales, AI, Geotab, Lab — available as add-ons
Enterprise
Everything in Professional, plus on-premise deployment, dedicated support, and custom SLA.
✓ Everything in Professional, plus
✓ On-premise Kubernetes deployment option
✓ Contractual 99.9% uptime SLA
✓ Dedicated support engineer (Year 1)
✓ SOC 2 Type II audit report on request
✓ FedRAMP-ready architecture
✓ Custom data retention & sovereignty policies
✓ Multi-tenant management console
✓ White-label & co-branding options
Feature / CapabilityCoreProfessionalEnterprise
✓ Included ◐ Available as add-on – Not available

All prices are annual all-inclusive subscription fees — no per-user, per-load, or storage overage charges. Integration Hub connector fees cover Entuber's configuration and maintenance only. Underlying third-party system licenses (SAP, ArcGIS, Geotab) remain the client's responsibility.

Questions? Contact Siva Kumar at skumar@entuber.com or (203) 326-0222.

Access TERRAVAULT V2

Enter your organizational email to access TERRAVAULT V2. Contact your System Administrator if you need access or have forgotten your login details.