Security

All traffic to the platform is encrypted with TLS 1.3. Shipment records, documents, and account data are encrypted at rest. Backups are encrypted and stored in a separate region.

Dashboard access requires authenticated sessions; administrative functions are additionally restricted by role (Admin, Operator, Viewer). All access to shipment records is logged and auditable.

API keys can be rotated and revoked instantly from the dashboard. Keys are shown once at creation and stored hashed.

The platform runs continuous dependency scanning, automated backups, and incident response runbooks. The live status of all services is published on the Status page.

To report a vulnerability, contact our security team through the contact page; we respond to security reports within 24 hours.