Skip to content

Security

Scoped, approved, and on the record.

Who did this, what changed and who allowed it are answerable in one place, and your IT team walks it before Movo touches a live load.

An IT team reviewing warehouse system access and controls

Technical review

Against the real system, not a diagram.

Before anything is real

Conductor proposes. A person approves.

Every account starts with a person on every action, and that click is the only moment anything touches your WMS, your board or your orders. Nothing runs unattended unless you ask for it.

  1. Conductor drafts

    An order, a slot, a reply. Nothing written yet.

  2. It is validated

    Checked against your live WMS and your board.

  3. A person approves

    Beside the schedule, the customer and the thread.

  4. Then it is real

    One typed event, appended, with a name on it.

One role is one app

Nobody finds a door they cannot open.

A member holds one role, and that role is the single gate on the requests they make and on the live channel they listen to. There is no permission matrix to get wrong.

A gate operator working from a fixed terminal at a warehouse entrance

Fixed hardware

A terminal that can only be one thing.

  • Office

    The schedule, the yard, Conductor and the reports.

  • Dispatch

    A read-only network board. Always all-site.

  • Dock and gate

    One terminal, one building, set when the terminal is issued.

  • Driver

    The kiosk, and nothing reachable past it.

On the record

The work writes its own history.

Every state change is one typed event appended to one store: who moved the trailer, who approved the draft, who rejected the load and why. The reports are reads over that store.

The Movo trailer rejections report: date, time, trailer number, carrier, reason, appointment number and photo thumbnails, newest first

Any range you pick

The reason, the appointment, and the photos taken at the door.

Where it runs

The answers your reviewer already has a column for.

Movo runs on AWS in the United States. These are claims about the running system, each one checked against the configuration that implements it. The rest of your questionnaire is answered in the review.

  • HostingAWS, United States (us-east-1)
  • Application computeNo public network path to the servers
  • In transitEncrypted on every public endpoint
  • Documents at restEncrypted and versioned
  • PasswordsHashed and salted per password, never stored or logged
  • Runtime secretsA managed secret store, never in source
  • DeploysShort-lived credentials, no long-lived cloud keys
  • This websiteNo analytics, no third-party trackers

Before the call

What your reviewer asks first.

Each person or device holds one role, and that role is the app they get: office, dispatch, dock, gate, or driver. It is checked on every request, so nobody reaches a screen that is not theirs. Movo records who made or approved each change and what changed.