Security by design
A pass that's worthless if stolen.
DockPass is built around one idea: nothing a thief can copy, photograph or guess should get them a load. Six layers must all pass before a truck leaves.
1. Handling ID
About 59 bits of randomness. Usable only while the shipment awaits pickup and has a carrier. Rate-limited per IP; repeated failures alert the company.
2. Identity check
License authenticity and a live face match. After three failed checks the pickup locks and the company is alerted.
3. Company approval
A passed ID check never issues a pass on its own. Your admin must accept the driver, and declined drivers can't retry.
4. QR credential
128 random bits, looked up by SHA-256 hash and stored only encrypted with AES-256-GCM. One pass per accepted driver.
5. Gate check
The code must exist, be unused, unexpired and unrevoked, and belong to this company and warehouse. It is consumed in a single atomic update.
6. Loading & approval
Pallet counts must match the invoice. Holds require a note and escalate. Each role can act only at its own warehouse.
What that means for you
Guarantees, not promises.
These properties are enforced by the system itself — not by a policy someone has to remember at 3 a.m. on a busy dock.
- A stolen screenshot of a QR pass can't be reused — the second scan is denied and alerts you
- A database dump reveals no usable pickup codes
- Two simultaneous scans of the same code can never both succeed
- Cancelling a shipment instantly revokes its pass
- Every scan, allowed or denied, is logged with the guard, gate and time
- Traffic is encrypted end to end with TLS
Questions from your security team?
We're happy to walk through the design with your IT and loss-prevention teams.