Administration

Role-based access control, user management, data retention policies, and security configuration.

Security Principles

Role-Based Access

Permissions scoped per role — brokers see only assigned RFQs.

Secure Authentication

Authenticated sessions required for all operational access.

Least Privilege

Users receive only the minimum access required.

Audit Logging

Every AI and human action is immutably logged.

Secure Webhooks

HMAC signature verification on all inbound webhooks.

Data Retention

Administrator-configurable retention policies per data type.

Role-Based Access Control

RoleUsersPermissions
Super Admin1Full access to all modules, configuration, and audit.
Administrator3All operations + configuration. No user management.
Operations Manager4Operations, reporting, exceptions. No AI config.
Broker18Assigned RFQs, quotes, customer communication.
Pricing Manager2Pricing rules, lane intelligence, margin overrides.
View Only6Read-only dashboards and reports.

Data Retention Policies

Data TypeDefault RetentionConfigured Retention
Customer Freight Documents90 days180 DAYS
RFQ Records1 year3 YEARS
Audit Trail2 years7 YEARS
Customer DataIndefiniteINDEFINITE
AI Extraction Artifacts30 days90 DAYS