Security

Last updated 2 November 2026

How the service is protected

• All traffic is encrypted (HTTPS only, with HTTP Strict Transport Security).
• The site and platform run on Cloudflare's network. Pages load only their own scripts under a strict content security policy; there are no third-party trackers or ads.
• Each company has its own workspace. Roles and approval limits decide what each person can see and do, and partners see only the jobs shared with them.
• Invitations are confirmed with a one-time code sent to the invited address, and repeated failed sign-ins are locked out.
• Every change to a shipment is written to an audit trail.

Reporting a security issue

If you believe you have found a vulnerability, please tell us through the contact form with "Security" in the message. Give enough detail to reproduce it and do not access other people's data. We will acknowledge your report and keep you informed. Our security.txt lists the same contact.