Security
What we isolate, and how
Least-privilege client keys. Privileged work in guarded server functions. Public endpoints stay PII-safe.
Who can see a load
Carriers operate on company-scoped loads. Brokers only see broker_loads. Warehouses only see warehouse_loads after a stop or check-in ties the facility to that freight. Admin is not marketed here and is not a client-side bypass.
What brokers never receive
Driver GPS, driver settlements, dispatcher commission, internal notes, and other brokers’ freight are out of the broker surface. Public tender links show city/state lane, dates, equipment, and rate — not street address or personal contact.
Files and deletion
Every file is private. Access is a short-lived signed URL. Product flows soft-delete. Load events remain so you can explain what happened last Tuesday.
Keys and sessions
The browser and the mobile app use least-privilege keys. Privileged mutations run in guarded server functions. When you change a staff member’s access, their session is revoked.