Security & compliance
Access
argon2id passwords with breach checks, TOTP 2FA, Google / Microsoft sign-in, session list with remote sign-out, role-based permissions enforced on the server.
Isolation
Every query is scoped to your organization and group tree; automated tests prove cross-tenant access fails. Public QR pages show only fields you whitelist.
Data protection
TLS everywhere, encrypted backups, signed expiring download links, append-only audit log, deletion certificates on offboarding.
POPIA & GDPR
DPA, subprocessor list, subject access and erasure, driver-privacy options for staff vehicles. Report vulnerabilities via security.txt.