Skip to content

Security & compliance

Security and compliance, built for regulated freight.

How IDS protects your data and proves custody — the record has to hold up to an audit.

Book a walkthrough How we handle data

Controls

A record that stands up to scrutiny.

The controls a regulated-goods operator needs, built in — not bolted on.

Append-only audit trails

Every custody event and record change is captured and immutable. Nothing is silently overwritten — the history is the evidence.

Tamper-evident proof of delivery

Device-authoritative capture at the point of handoff. Signatures, photos and scans are bound to the event so the proof can’t be quietly altered later.

Production HTTPS & access controls

Encrypted transport in production and role-based access, so people see only what their job requires.

SSO/MFA on Enterprise

Single sign-on and multi-factor authentication for Enterprise accounts, aligned to your identity provider.

Configurable data retention

Set retention windows to match your regulatory and contractual obligations, market by market.

Chain of custody, end to end

Custody is tracked from the warehouse to the door and back, with each handoff timestamped and attributable.

Accessibility

Accessibility is a compliance matter here.

The site and app target WCAG 2.2 AA. In our markets, accessibility isn’t a nice-to-have — it’s part of the obligation.

  • WCAG 2.2 AA target — across the website and the CoStop app.
  • Keyboard and screen-reader support — the office tools work for every dispatcher.
  • Contrast and legibility — readable in a cab, a dock, or a warehouse.

The standard

WCAG 2.2 AA

We build to the standard, then verify against it — because in regulated freight, an inaccessible tool is a compliance gap, not just a usability one.

On the roadmap

Where we’re honest about what’s next.

SOC 2 (Type II) is on the roadmap. To be plain: it is in progress and not yet certified. We’ll share our current posture and timeline with you directly, and we won’t claim a certification we don’t hold.

Every change we release is reviewed by a person before it ships, and every defect we have seen becomes a permanent test. For how we handle your data inside any automation, and how faults get diagnosed and fixed, see How we use AI

Put our custody record in front of your auditor.

We’ll walk your compliance team through exactly how the record is captured and held.

Book a walkthrough