Laneify is a multi-tenant logistics platform built for 3PLs and enterprise shippers. Security isn't a page we bolted on — it's how the system is architected. Here's exactly what's in place.
Every request is scoped to your organization at the query layer — you only ever see your own data. Client (3PL sub-account) users get a default-deny surface: they can reach only what they're explicitly allowed. This is enforced by an automated isolation test that runs on every change (dozens of cross-tenant checks, zero tolerance for a breach).
Third-party credentials you connect (carriers, marketplaces, ERP, identity providers) are encrypted at rest with Fernet (AES-128 + HMAC) — decryptable only by the running service, never returned by the API. Passwords are hashed with bcrypt. All traffic is served over TLS.
Sensitive actions are written to a hash-chained, tamper-evident log — who did what, when, and from where. The chain is cryptographically verifiable, so any alteration is detectable, and admins can export the full trail as CSV for their own auditors.
Sign in with email + password, optional multi-factor (TOTP), or your own identity provider via OpenID Connect single sign-on. SCIM 2.0 lets your IdP automatically provision and deprovision users, so offboarding an employee instantly removes their access.
Role-based access with built-in and fully custom roles, so each person gets exactly the permissions they need — nothing more.
Laneify holds no global third-party API keys. You connect your own carrier, marketplace, and ERP accounts; the credentials are encrypted, used only to sync your data into your workspace, and never shared with Laneify staff or other customers. Disconnect anytime.
Your data is yours. Export it whenever you want, configure retention, and request erasure of a customer's personal data to support privacy obligations.
Hosted on managed PostgreSQL with automated backups. Health checks and Prometheus-format metrics give operators real-time visibility, and concurrency-safe writes keep data correct even under simultaneous use.
Laneify is built with the controls an enterprise security review expects. We are transparent about our posture: this page describes controls that are implemented today. For a security questionnaire, penetration-test summary, or to report a vulnerability, contact security@laneify.ai.