Home / Documentation / Security
Documentation 05
Stated as properties your own team can test, rather than as assurances.
Accounts belong to your organisation and are administered by you. Second-factor authentication is supported by authenticator app and by passkey — Windows Hello, Touch ID or a hardware key — and can be required for privileged roles or for everyone, as your policy dictates.
Passkeys work with no internet connection, which matters on a site that has none.
Devices authenticate with their own credentials, issued per facility or per unit and revocable individually. A scanner that goes missing is revoked without disturbing the rest, and a revoked credential stops working immediately rather than at the next renewal.
Operational actions are written to an append-only audit trail. The application itself holds no privilege to alter or delete those entries — a deliberate arrangement, because an audit trail that the application can edit is an audit trail an attacker who reaches the application can edit.
Entries record who acted, when, and on which record — including actions taken by a party acting on your behalf, which remain attributed to the individual rather than to the agency.
Separation is enforced in the database rather than in application code, so a defect in a feature cannot leak another organisation's records: an unscoped query returns nothing instead of returning everything. Sensitive material a customer entrusts to us — the credentials for your own telematics account, for example — is encrypted at rest and never returned by any interface, only replaced.
For customers working under controlled-unclassified or export-control obligations, the relevant controls are access control, audit, identification and authentication, and protection of data at rest — and the air-gapped deployment exists precisely so that the system boundary can be drawn where your assessor needs it.
We will not claim a certification we do not hold. If your programme requires evidence against a specific control set, ask, and you will get a straight answer about what is in place today and what would be work.
