Your customers' cargo data stays yours.

A forwarder holds commercial invoices, prices and identity documents for other businesses. This is how Aether keeps them separate and protected.

Each company is separate

Every record belongs to one company and is protected by row-level security in the database as well as by checks in the application. Customers who sign in to a portal see only their own shipments, quotes and invoices.

Access by role and module

People get the modules their role needs. Finance, customs and settings are separate permissions, and sensitive steps such as overriding a credit control need a reason that is recorded.

Secrets are encrypted

Mailbox passwords and sign-in tokens are stored encrypted with AES-256-GCM. Mail connections require TLS, and secrets are never shown again after they are saved.

Single sign-on and policy

Companies can require SAML single sign-on and multi-factor authentication, set session and idle limits, restrict sign-in to IP ranges, and provision people with SCIM.

Hardened by default

Responses carry HSTS, a content security policy and frame blocking. Webhooks Aether sends are signed, and outbound connections to private network addresses are refused.

Your data is yours

Data export and data deletion requests are built into the product, and customer-facing views are allow-lists, so a column added later cannot leak margin or cost.

What we do not claim

Aether does not currently hold a SOC 2 or ISO 27001 certification, and we do not describe the product as certified or compliant with any scheme it has not been assessed against. The agent's answers are grounded in published sources and are not legal advice.

How we handle personal data is set out in the Privacy Policy. To report a vulnerability or ask a security question, write to support@trivianedgeglobal.com.