Security and data handling at ShipmentVisibility
Shipment data tells a lot about your customers, suppliers and lanes. This page explains how ShipmentVisibility protects it, who can see it, how long it is kept and how you get it back or delete it.
Encryption in transit and at rest
All traffic to the application, the branded tracking page and the API uses HTTPS with TLS. Shipment data, account data and backups are encrypted at rest.
Access control and team roles
Every user signs in to a company account, and access to shipments never crosses from one account to another.
- Team seats on every plan, so each person has their own login
- Client sub-accounts on Pro and higher, where each client sees only its own shipments
- Custom roles and permissions on Enterprise to separate viewing, adding shipments, alert rules and billing
- API keys created per account and revocable at any time on Pro and higher
Single sign-on on Enterprise
Enterprise accounts sign in through SAML single sign-on, so access follows your identity provider and ends when a user is disabled in your directory.
Audit log
Enterprise accounts keep an audit log of sign-ins and changes to users, roles, alert rules, integrations and API keys.
Your data stays yours
You own the shipment numbers, references and events in your account. ShipmentVisibility uses them only to provide the service to you and never sells them.
- Export shipments, events and ETAs as CSV at any time
- Read the same data through the REST API on Pro and higher
Data retention by plan
Shipment history is kept for the period your plan includes, then removed from the active account.
| Plan | Shipment history |
|---|---|
| Starter | 90 days |
| Growth | 1 year |
| Pro | 2 years |
| Enterprise | Custom |
Deletion on request
The account owner can ask for the account and its data to be deleted by writing to support@shipmentvisibility.com. Data is removed from the active service and from backups as they rotate.
Infrastructure and service providers
ShipmentVisibility runs on infrastructure from a hosting provider and works with a small number of service providers by category: a payment processor, an email delivery provider and tracking data providers that supply carrier events. Each receives only the data it needs for its part of the service.
Payment card data
Card payments are handled by the payment processor. Full card numbers never reach or get stored on ShipmentVisibility servers.
Cookies
The site sets only strictly necessary cookies, such as the session and security cookies that keep you signed in.
Reporting a vulnerability
If you find a security issue, write to support@shipmentvisibility.com with the steps to reproduce it. Please give us reasonable time to fix it before sharing details publicly, and do not access or change data that is not yours while testing.
Related pages
Read the privacy policy, the terms and the shipment visibility FAQ, or see shipment tracking software pricing.