Your fleet's data, handled carefully.
Indian commercial logistics runs on real operational trust. We reject vague buzzwords and marketing claims in favor of concrete, verifiable engineering practices that protect your vehicle telematics, financial ledgers, and compliance documents.
TLS encryption on every connection, HSTS enabled
Object storage encryption via Cloudflare R2
IP & session brute-force defense
Every request scoped to your company's data
Core Security Architecture
Layers designed to protect your fleet data, financial ledgers, and compliance documents.
Encrypted in transit
Every connection to the app and API runs over HTTPS with auto-renewing TLS certificates. Plaintext HTTP traffic is automatically upgraded or dropped at the edge gateway.
Role-based access
Admin, company, and employee roles each see only what they're meant to, enforced on every request across the API.
Login protection
Repeated failed login attempts are throttled per account, with an alert email, to block brute-force attempts. Suspicious velocity triggers temporary locks before unauthorized access can occur.
Audit logging
Administrative actions are logged and reviewable. Sensitive operations such as driver license overrides, bank ledger exports, and user credential alterations generate permanent audit entries.
Data & document storage
Fleet data is stored in a managed, access-controlled database; uploaded documents (insurance, permits, photos) are stored in isolated cloud object storage, not on a shared server disk.
Credential hygiene
Secrets and API keys are stored as environment variables, never committed to source code.
Tenant & Data Flow Boundary Isolation
Three isolation layers, from the public edge to the persistence tier.
Reverse Proxy & Edge Shield
Handles TLS termination, DDoS filtering, and route rate limits before reaching cluster instances.
- Rate Limiting — Per-IP & Per-Session
- Razorpay Webhook — HMAC-SHA256 Signed
Isolated Tenant Workspaces
Logical multi-tenancy ensures customer data sets remain compartmentalized in runtime memory.
- Tenant Context Hook — Scoped Per JWT
- Telematics Ingestion — REST API Endpoint
Encrypted Partitioned Vaults
Primary databases and RC/Fitness document attachments live on segregated storage networks.
- Documents Storage — R2 Signed URLs (5m)
- Database — Managed, Access-Controlled