Security
How customer data is handled
Operating data is your customers' cargo and money. Here is what is enforced structurally.
- Isolated per organization
- Operating data — shipments, containers, settlement — belongs to an organization, and queries carry that scope by default. Rows from another organization are not reachable. Shared master data such as ports, and auth sessions, are not organization-bound.
- Every change is recorded
- Creates, updates and deletes on operating records — shipments, settlement, documents — are logged with who, when and what changed. Records are kept for seven years and pruned daily.
- Roles split access
- Owner, accountant, manager and staff roles exist, and each resource is checked by policy. Which roles can be granted is itself restricted, so privileges do not quietly escalate.
- Truckers and drivers see only their own
- They join by magic link — no account needed — and see only the jobs assigned to them. Links carry an expiry and can be revoked at any time.