Tenant isolation and relationship-scoped access
Every freight forwarder operates inside a secure, isolated tenant. Operational data is scoped strictly to your branch unless an explicit customer relationship or subcontractor authorization grants shared visibility.
- Strict company-level scoping on APIs and database queries—no cross-tenant reads without a defined relationship or share record
- Relationship graphs control what each counterparty sees: PO lines, RFQs, bookings, and documents follow party linkage rules
- PostgreSQL row-level security (RLS) policies enforce data isolation at the database layer, not only in the UI
- Server-side checks on role, operational permissions, and licensed modules for every mutating operation