The controls below are in the product today. We only list what we have built and tested.
The app is served over HTTPS, and browsers are told never to connect over plain HTTP.
Carrier and store credentials you connect are encrypted with AES-256-GCM before they are saved, and are never returned to the browser.
Every request is scoped to your organisation, and automated tests check that one organisation cannot read, change or reference another's data.
Each member has an Admin, Editor or User role in your organisation. What they can see and change follows that role.
Passwords are hashed with bcrypt. Changing or resetting a password ends every other session, and you can sign out everywhere at once.
Rate card and fuel levy changes need approval and keep a change log of who changed what and when.
Uploads are limited by type, size and row count and are imported whole or not at all. CSV exports are written so spreadsheet formulas cannot run from your data.