Security

Your data. Your control.

Enterprise-grade security from day one. Not an afterthought.

🔒

Encryption at Rest & In Transit

All data encrypted with AES-256 at rest. TLS 1.3 for every connection. Database credentials rotated automatically.

Active
🛡

Tenant Isolation

Row-level security in PostgreSQL. Every query scoped by organization_id. No customer can ever see another's data.

Active
🔐

Authentication & Authorization

JWT-based auth with HttpOnly cookies. Role-based access control (admin, dispatcher, dock, driver). Session blacklisting on logout.

Active
📝

Audit Logging

Every sensitive action logged with user, timestamp, IP, and payload. Immutable audit trail for compliance.

Active
🧱

Security Headers

CSP, HSTS, X-Frame-Options, X-Content-Type-Options, Referrer-Policy. Enforced on every response.

Active
🤖

NetGuard Agent

24/7 self-healing AI agent. Circuit breakers, memory monitoring, crash recovery. Auto-restarts degraded services.

Active
📊

SOC 2 Type II

Compliance program in progress. Policies, controls, and evidence collection underway for formal certification.

In Progress
📋

ESA Electronic Monitoring

Ontario Employment Standards Act compliant. Written monitoring policy generator, geofence perimeters, worker disclosure with acknowledgment tracking, configurable data retention. Built-in transparency.

Active
🗺

Geofence Perimeters

Customer-defined facility boundaries. GPS tracking automatically disabled when workers exit the geofenced area. Entry/exit event logging. Privacy by design.

Active
🧪

Penetration Testing

Third-party security assessments planned for Q3 2026. Bug bounty program launching alongside.

Planned