Information Security & Trust Architecture.
Enterprise employee transportation involves daily high-frequency geolocation tracking, shift rosters, and corporate facilities data. Commute Masters enforces a zero-trust, multi-tenant security architecture designed to satisfy the most rigorous corporate infosec audits.
Enterprise Security Architecture
| Control Dimension | Technical Enforcement Specification | Verification & Audit Method |
|---|---|---|
| Tenant Scoping Kernel | All queries enforce `tenant_id = current_setting("app.current_tenant")` at session connection. | ✓ Automated CI/CD RLS penetration regression test suite. |
| Connection Pool Partitioning | Client-scoped tenant connection tokens with zero superuser connection leakage. | ✓ Database audit log inspection and privilege separation audits. |
| Historical Ledger Immutability | Financial, trip billing, and compliance tables enforce append-only policies with cryptographic write guards. | ✓ Append-only PostgreSQL triggers and SHA-256 transaction hashing. |
Role-Based Access Control Governance
| Enterprise Role | Authentication Method | Telemetry Data Scope | Financial & Billing Scope |
|---|---|---|---|
| Super Administrator | FIDO2 Hardware Key + TOTP MFA | Platform Infrastructure & Dispatch Hubs | Immutable Ledger Master Oversight |
| Corporate Facilities Lead | Enterprise SAML 2.0 / OIDC SSO | Single Corporate Tenant (RLS Enforced) | Client Invoices, Annexures & SLA Credits |
| Security & Escort Supervisor | Corporate SSO + SMS OTP Challenge | Night Escort Routes & SOS Stream Only | Zero Access (Cryptographically Blocked) |
| Commercial Chauffeur | Driver App Device Fingerprint + OTP | Active Shift Waypoints (Turn-by-turn only) | Shift Duty Rate & Verified Tolls Only |
| Statutory Auditor | Time-Bound Magic Link + MFA | Read-Only Statutory Compliance Logs | Tax Invoices & GST E-Way Bill Records |
Infrastructure Resilience & Business Continuity
99.95% System Uptime SLA
Distributed micro-frontends with edge-rendered telemetry endpoints ensure uninterrupted 24/7 dispatcher visibility across shift changeover peaks.
RTO < 15 Min · RPO < 5 Min
Automated point-in-time recovery (PITR) with continuous write-ahead log replication across geographically separated availability zones.
Sub-10s Telematics Shield
All GPS pings pass through token-bucket rate limiters and cryptographic payload inspectors, dropping malicious or malformed packets in sub-5ms.
Request an Infosec Security Audit Review
Have a standard vendor security questionnaire (VSAQ / CAIQ) or require a technical deep-dive with our platform engineering team? Access our complete vendor compliance pack or schedule a security briefing.