Isolation & security
Your clients cannot see each other. Structurally.
Tenant separation is enforced at the data layer, not by remembering to add a filter to a
query. Every table carrying a tenant key is classified, and a test fails the build if a
new one is added without being classified — so a table cannot quietly escape scoping.
Two-level tenancy: operator, then client
Warehouse scoping on top of both
Two-step verification, by app or email
Trusted devices for 30 days
Broker credentials encrypted at rest
API keys stored hashed, never recoverable
Why it exists
Built hand in hand with an operating 3PL, because nothing on the market fit the way the
floor actually ran.
Every part of it is in daily use — receiving, picking, freight, billing and the client
portal. Features land because an operation needed them, and they ship after being used
on a real dock, not after a roadmap review.