Security & Compliance

Built so your numbers stay yours.

Parcel Optix handles your carrier billing data, so isolation, ownership, and integrity are design decisions rather than afterthoughts. Here is exactly how it works, in plain language.

A separate database per customer

Every tenant gets its own database, not a shared schema with row-level filters. There is no query path, however misconfigured, that can return one customer's invoices or analysis inside another customer's report. Isolation is structural, not a setting we have to remember to apply.

Your customers' addresses are encrypted at rest

The most sensitive data in a carrier invoice isn't yours — it's your customers'. Recipient names, companies, cities, and postal codes, along with your internal references (customer, PO, and department numbers), are encrypted with AES-256 before they touch the database. Combined with per-tenant isolation, ship-to data never sits in plain text on disk.

Your data stays yours

You upload your carrier invoices; you can export your data and cancel at any time. We do not sell, share, or aggregate your shipping data into a benchmark product. The value you find in your numbers is yours to keep.

Numbers that reflect current carrier policy

When FedEx or UPS changes a service guarantee or accessorial rule, we version that change in the product and recalculate on-time and refund-eligibility across your history the same day. Your audit reflects the policy that was actually in force at the time.

How we handle your data

We keep the surface area small on purpose: FedEx and UPS billing data, the analysis we run on it, and the users you invite. That's it.

  • Access to your data is limited to your own authenticated users.
  • Data is transmitted over encrypted connections (HTTPS/TLS).
  • Recipient and reference details are encrypted at rest (AES-256). User passwords are stored as one-way hashes, never encrypted or plain text.
  • You can export your invoices and analysis, and request deletion, at any time.
  • We support per-user roles so you control who on your team sees what.

Compliance, stated honestly

We're an early-stage company and we'd rather be straight with you than claim certifications we don't yet hold. Our privacy policy, terms of service, and data-processing terms are being finalized. If you're in a procurement or security review and need specifics, get in touch. We'll answer directly and share what we have.

Questions from your security team?

We're happy to walk through the architecture and answer a security questionnaire.